Privacy Policy

General provisions

This privacy policy explains how mish OÜ (registry code 14723162, email mish@mish.ee), as data controller, processes personal data in connection with the website mish.ee and the iOS app Boardmembers.

Data we process on mish.ee

If you contact us by email, we process the data you share (such as your name, email address, and message content) solely to respond to your inquiry.

Our hosting provider automatically collects technical log data (such as IP address, browser type, and access time) to keep the site secure and operational.

Cookies

We use one strictly necessary cookie to remember your preferred display mode (light/dark). This cookie contains no personal data and does not track you across other websites. We do not use analytics or marketing cookies.

Data we process in the Boardmembers app

Boardmembers stores your boards, photos, and notes in your own Apple iCloud account via Apple's CloudKit framework. We do not operate our own servers or database — your content is stored and synced by Apple, under Apple's own privacy policy (apple.com/legal/privacy).

The app asks you to choose a display name and generates a random, non-identifying member ID on your device. If you join a board shared by someone else, your display name becomes visible to the other participants of that board.

To fill a board, the app requests access to your camera and, when saving an exported image, permission to add photos to your photo library. It does not request access to your existing photo library, contacts, location, or microphone.

Sharing and exporting boards

You can invite other people to a board using Apple's native iCloud sharing. This shares board photos, notes, and display names directly between iCloud accounts — mish never sees or stores this data on its own systems.

You can export a board to your device (for example as a photo or PDF). Exporting happens entirely on your device via Apple's share sheet; we do not receive a copy unless you choose to send it to us yourself, for example by email.

Push notifications

The app uses Apple's CloudKit push notifications to keep boards in sync between your devices. These are silent background updates — we do not send marketing notifications, and no notification content passes through mish's own systems.

Purchases and subscriptions

Boardmembers may offer optional in-app purchases and subscriptions (such as an 'Executive' plan), sold and processed entirely through Apple's App Store and StoreKit. mish does not receive or store your payment card details — these are handled by Apple under Apple's own privacy policy.

Apple provides us with limited transaction information (such as whether a subscription is active) so the app can unlock the relevant features. Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period, and can be managed or cancelled at any time in your Apple ID account settings.

Support requests

If you use the app's 'Send Feedback' option, it opens a pre-filled email to mish@mish.ee that may include basic diagnostic information (app version, device model and name, OS version, subscription plan, and language). This is sent only when you choose to send that email yourself.

Legal basis and retention

We process data based on our legitimate interest (providing and securing the website and app), performance of a contract (in-app purchases and subscriptions), and to respond to your inquiries. Board and photo data is retained for as long as you keep it in the app — deleting a board or photo, or deleting your iCloud data, removes it. Correspondence is kept only as long as needed to resolve the inquiry or meet legal obligations.

Children's privacy

mish.ee and Boardmembers are not directed at children under 13, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.

International use

Boardmembers and mish.ee are available worldwide, including to users in the United States. Storage and processing of your app data happens through Apple's global iCloud infrastructure under Apple's own privacy policy. We do not sell personal data, and California residents may contact us at mish@mish.ee to ask what personal data, if any, we hold about them.

Your rights

Under the General Data Protection Regulation (GDPR), you have the right to access, correct, or delete your data, restrict or object to processing, and request data portability. To exercise these rights, contact us at mish@mish.ee.

Because your boards, photos, and notes are held in your own iCloud account, you can delete them yourself immediately: Settings → [your name] → iCloud → Manage Account Storage → Boardmembers → Delete Data, or by deleting the app. We hold no separate copy of this content. If you email us asking for your data to be deleted, we will delete that correspondence and point you to the self-service steps above where relevant.

If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

Changes to this policy

We may update this policy from time to time to reflect changes to mish.ee, the Boardmembers app, or applicable law. The 'effective as of' date above shows when it was last updated.