Privacy.

Minne keeps what you write into it and what it needs to run. It holds:

• your ClackID id, name and email address, which ClackID gives it when you sign in. Your password stays with ClackID; Minne never sees it;
• everything you write or upload: notes, folders, tags, the people you write about, and files you add, with every earlier version of each so a change can be undone;
• the connections you make (a document archive, a mailbox, a task list, a meeting-notes app, a calendar link), with their keys sealed under a key kept apart from the database. Live document archive and mailbox access is currently disabled. Credentials from earlier connections remain sealed until you remove your account or a migration explicitly removes them;
• what Claude did through your connection: which tool, when, whether it worked, and Claude's one line on why, for 90 days, then as counts per month;
• your sign-in sessions and the devices you link, as hashes; a session lasts 12 hours. For the apps' offline copy, the id a device gave each thing it made offline (so sending it again makes nothing twice), and for 90 days the addresses of pages it should drop;
• in a shared workspace, who is in it and in which role, who wrote each change, each member's own instructions to Claude, and which of your folders you share with another workspace. An invitation is kept as a hash of its link, with the role it offers and the name you gave it, and works once within 14 days;
• which plan you are on, as ClackID reports it. Payment is taken by Clackis on checkout.clackis.com; card details are held by Stripe, never by Minne.

Data is stored by Cloudflare in the EU (the database) and Western Europe (files). Every night an encrypted copy is kept for 30 days, and on Sundays for 90. Something you delete leaves the backups within 91 days.

Language models run on Cloudflare's Workers AI, which is not held to the EU. Each use (meaning search, reading notes to suggest a split, checking and automatic scan reading) is off until you switch it on, and note suggestions wait for your review. If you enable automatic scan reading, the transcription is stored beside the original file and can be replaced by a reading from your device. Usage records keep only counts of calls, never the content sent or returned.

If you connect a task list, the text and date of each follow-up you create go to it. If you switch on the morning reminder in an app, Apple’s push service carries it, with counts only. Nothing else leaves Minne unless you send it.

We do not store your IP address or browser details. Sign-in attempts are limited using a keyed hash of the address that cannot be turned back into it, kept under an hour. There are no tracking or advertising cookies; cookies keep you signed in, show a message after an action and remember your layout density.

You can export a workspace as Markdown, or delete it, from Settings. Deleting your account deletes the workspaces only you are in, removes your connections, and tells ClackID you no longer use Minne.