Skip to content
buyminute
Last updated 17 September 2026

Privacy Policy

buy1minute.com is operated by Apprizon, LLC ("we", "us", "our").

The waitlist

Before primary sales open, you may join our waitlist and name a preferred minute. We store your email address, your preferred minute (if specified), a referral or UTM source (if present), and acryptographic one-way hash of your IP address solely to prevent automated sign-up abuse. We use this information only to send you a one-time launch invitation when claiming opens. Naming a minute reserves nothing.

We never sell waitlist data. You may request deletion at any time by emailing hello@buy1minute.com.

What we collect and why

  • Account email address: Collected when claiming a minute or signing in. Used to deliver transactional notices (purchase confirmations, setup reminders, and service updates).
  • Payment details: Processed directly by Stripe. We never see or store complete credit card numbers. We store only an opaque transaction reference and card fingerprint to enforce our one-minute-per-account rule and to process refunds.
  • Minute Identities: The sentence a minute keeper submits, its review status, and its version history. Approved Identities are public by design.
  • Saved personal minutes & private notes: When you save a personal minute as a Time Citizen, we store the invitation details, your structured choice, and your optional private note (up to 280 characters). Your private notes are strictly confidential: they are never public, never displayed on the live clock or minute pages, never used for advertising, never sold, never included in public aggregate statistics, and never used to train artificial intelligence or machine learning models.
  • Collective world context & structured contributions: When you complete a daily invitation, an anonymous structured choice signal (such as an activity category, broad time band, and local date) may contribute to collective aggregate horizons. We never store or process user IDs, account emails, raw IP addresses, or private notes for aggregate calculations. Daily device retry receipts are automatically removed after 48 hours.
  • Verified reach & engagement: When visitors interact with the live clock or a minute page, we calculate a daily cryptographic visitor fingerprint to measure unique daily reach. We do not store raw IP addresses for this purpose.
  • Usage analytics (Firebase / Google Analytics): When enabled, we use Google's Firebase Analytics to understand how the site is used. It records events such as page views, along with basic device and session information (device and browser type, approximate location inferred from IP, referring page, and the pages you visit), tied to a Google-assigned analytics identifier. To do this, Google Analytics sets first-party cookies or similar identifiers in your browser, and shares the data with Google as a processor. It is only active when we configure it, and we use it for aggregate product analytics, not advertising.

Cookies and tracking

We do not use third-party advertising cookies, cross-site ad trackers, or ad-profiling tools, and we do not build advertising profiles about you. The only cookies or similar identifiers we use are those needed to run the site (such as sign-in session state) and, when Firebase Analytics is enabled, the first-party analytics identifier described above, used to measure aggregate usage.

Public aggregate statistics

We compile aggregate engagement metrics per minute (verified daily reach, interaction totals, views, and participating timezones). We publish them without account emails, raw IP addresses, visitor fingerprints, or other direct identifiers on each minute's public ledger.

What we do not do

  • We do not sell, rent, or trade your personal data.
  • We do not display third-party advertisements or embed ad networks.
  • We do not build cross-site behavioural profiles.

Third-party service providers

  • Google Firebase: Authentication, encrypted database, and cloud infrastructure.
  • Google Gemini (Interactions API): Used solely server-side to generate and evaluate daily time-aware prompt invitations ahead of publication. Google Gemini never receives visitor account details, private notes, responses, or personal data from the site, and visitor writing is never used as model training input.
  • Google Firebase Analytics / Google Analytics: Aggregate usage measurement, when enabled (see "What we collect and why" above).
  • Stripe: Payment checkout and automated refunds.
  • Resend / SMTP Relay: Transactional email delivery.

Data retention and deletion

We retain your personal data only as long as necessary to provide the service and fulfill the purposes described in this policy:

  • Account and journal records: Retained while your account remains active. Live deletion from our active database is immediate upon your request. Encrypted database backups age out and are permanently overwritten under our fourteen-week disaster-recovery lifecycle.
  • Waitlist data: Kept until launch invitations are delivered, or until you request deletion by emailing hello@buy1minute.com.
  • Device retry receipts: Cryptographic hashes used to prevent double-counting in aggregate statistics are automatically purged within 48 hours.
  • Moderation and compliance records: Submissions evaluated for safety or breach of terms may be retained in non-public audit logs as reasonably needed for legal compliance, fraud prevention, and dispute resolution.

Your data rights

You may export your saved personal minutes or delete individual entries or your entire account at any time directly in your account settings at /me/settings. You may also request data export or deletion by contacting hello@buy1minute.com. If you hold a claimed minute as a Minute Keeper, you must release or transfer your minute before account deletion can proceed. Account deletion permanently purges your private journal entries from our live database.

Children

buy1minute.com is not intended for children under 13, and we do not knowingly collect personal information from children under 13. Users aged 13 or older who are still minors where they live may use the service only with the consent described in the Terms.

Contact

For questions or privacy requests: hello@buy1minute.com · Apprizon, LLC