Privacy Policy - My 5 Minutes

This Policy explains how WiBAAP handles data in the My 5 Minutes Android app. Contact: contact@wibaap.com.

Data kept on the device

By default, goals, schedules, selected weekdays, completions, durations, preferences, language, and terms acceptance remain in the device's local database. This data is not sent to WiBAAP until the user links an account and uses Premium synchronization. Uninstalling the app, resetting the device, or clearing app data may delete this local copy.

Google account and Premium synchronization

Linking a Google account is optional. When used, Google and Supabase provide an account identifier and, when available in the profile, name, email address, and profile picture. Supabase maintains the session and stores synchronized goals, completions, preferences, and synchronization metadata.

This data is used for authentication, backup, restoration, synchronization between devices, preventing data from different accounts from being mixed, and secure account deletion. Database access rules restrict each user to their own data.

Google Play subscription

To confirm Premium, the app sends the product, purchase token, and an obfuscated account identifier to the backend. The token is checked directly with the Google Play API. We store only its hash, together with product, base plan, status, expiration, renewal, order identifier, and verification dates. The purchase token is not stored in plain text.

Ads and consent

The free version may display ads through Google AdMob. Before requesting ads, the app checks consent through Google's UMP platform. If consent status is unknown, the app does not request ads. Premium users do not receive ads.

Depending on configuration and user choice, the Google Mobile Ads SDK may process IP address to estimate general location, app/ad interactions, diagnostic information, and device or account identifiers for advertising, measurement, analytics, and fraud prevention. Data is encrypted in transit. When required by Google UMP, the app displays Settings > Support and Legal > Privacy options so these choices can be reviewed. The advertising identifier can also be managed in Android settings.

Retention and deletion

After Google Play confirms that Premium has ended, synchronized goals, completions, preferences, and history remain in the cloud for at least 30 days to allow restoration. A daily automated cleanup may delete this data after that period. An unconfirmed or temporarily unavailable subscription state does not authorize cleanup. Data still on the device is not affected.

The user can permanently delete their account and cloud data in Settings > Support and Legal > Delete account and data or at the official My 5 Minutes account deletion page. Deleting the account does not automatically cancel a Google Play subscription; cancellation must be completed in the Play Store.

Sharing and providers

We do not sell personal data. Data is processed only by providers required for the service: Google Sign-In, Google Play, Google AdMob/UMP, and Supabase, subject to their policies and agreements. Information may be retained where required by law or necessary for security, fraud prevention, or legal claims.

Security and rights

We use encrypted connections, protected on-device sessions, backend purchase verification, per-user access controls, and authenticated deletion. No system is entirely infallible. Requests for access, correction, objection, or deletion may be sent to contact@wibaap.com, subject to applicable law.

Children and changes

The app is not directed to children below the applicable minimum age. This Policy may change when the app, providers, or law changes. Material changes will update the date and version above and may require renewed acceptance.