Terms

What you get, what we do not promise, and what happens to your data. Written to be read, not to be survived.

LAST UPDATED 24 SEPTEMBER 2026

The agreement

MiniEnv is operated by Las Mulas LLC, a limited liability company registered in Wyoming, USA. Where this page says we or us, that is Las Mulas LLC, reachable at support@minienv.dev.

MiniEnv is the macOS app, the command-line tool, the relay at api.minienv.dev, and this website. Downloading, installing or using any of them means you accept what is on this page. If you are using it for a company, you are saying you are allowed to agree on its behalf. If you do not agree, do not use it.

The Security page and the Privacy page are part of this agreement. Security is where the limitations live, including the ones we have not fixed, and it is deliberately not a marketing page.

Your account

One account per person. Accounts are not for sharing: that is what projects and teams are for.
You need a working email address, and you have to confirm it before you can create a team, invite anybody, or take a paid plan.
You are responsible for what happens under your account, on every device you have authorised, and for the private key on your machine.
You choose who you invite, and you are responsible for removing them when they should no longer have access. We do not vet the people you add.
You must be at least 16.

Your key, and permanent loss of data

This is the most likely way you will lose data, and it is the design rather than a flaw in it.

Your private key is yours alone, and we do not have it. It is generated on your Mac, kept in the macOS Keychain, and never sent to us. If you lose it and no other member is on the project, that project's values are unrecoverable. Not difficult to recover: unrecoverable. There is no escrow, no admin override, no backup and no support path, because a support path would be a decryption path.

Where we offer a way to export your own key, keeping that copy safe is entirely yours to do. If you do not export it, or you lose the export, the sentence above applies.
Removing somebody from a project stops them receiving future values. It cannot retrieve what they already read. Rotate those credentials at their source.
Keep your own independent copy of any credential you cannot afford to lose. MiniEnv is where a team shares secrets, not the only place your production secrets should exist.

Accepting these terms means accepting that permanent, unrecoverable data loss is an intended property of the service, and that we are not liable for it.

Plans and payment

Free covers 5 people in a team, including the admin, and one team. Pro is $29.99 per month: it lets you run up to 3 teams, and one subscription covers all of them, lifting the people limit and adding the features listed on the homepage on each. It covers the teams you run, not teams you have only joined: being a member of somebody else's team gives you Pro inside it only if its admin pays.

Payment is handled by Stripe, which is the merchant of record. Stripe collects, files and remits sales tax, VAT and GST where those apply, and your receipt comes from Stripe. Card details never reach the app or our relay.
Your bank statement will say LINK.COM* MINIENV rather than our name. That is how Stripe presents this kind of sale, and it is the same charge.
The price is the price before tax. What actually leaves your account is the price plus whatever tax your country charges, and the billing panel in the app states both.
Subscriptions renew monthly until you cancel. Cancel any time from the billing panel in the app.
Cancelling is not an immediate downgrade. You keep Pro until the end of the period you have already paid for, and the app shows the date. We do not refund part-months.
If a payment fails, Stripe retries for about a fortnight and your team stays on Pro throughout. We are not taking your teammates away over a card that expired on a Sunday. If it never succeeds, the team returns to free-plan limits and nothing encrypted is deleted.
If prices change, existing subscriptions get at least 30 days' notice by email before the new price applies. Carrying on after that date is acceptance of it.
If we materially reduce what a paid plan does, we will email you, and you can cancel and have the unused part of that billing period refunded.

Going over the limit never removes anybody. A team that drops to Free with more than five people keeps every one of them, and is simply refused new ones. Losing access to your colleagues because a card expired would be a worse failure than any limit.

If you are a consumer in the EU or the UK, you normally have 14 days to change your mind about a digital service. By subscribing and getting Pro immediately, you are asking us to start straight away and accepting that the withdrawal right ends once we have. Nothing here removes a refund right your own country does not let you waive.

What you may not do with it

Store credentials you are not allowed to hold, or break the law with it.
Attack the service: denial of service, credential stuffing, probing for another account's data, or working around rate limits and access controls.
Resell access, or run it as a service for other people, without asking us first.
Automate registration to create accounts in bulk.
Impersonate anybody, or misrepresent who can read a project.

You are also responsible for any obligation attached to what you store, including your own agreements with the providers whose keys you hold.

Security research is welcome and is not on that list. Tell us what you found at support@minienv.dev with the word vulnerability in the subject, and we will come back to you before doing anything else. We will not go after you for a good-faith report. Please give us a reasonable chance to fix it before publishing.

We may suspend or close an account that breaches this section, without notice where the breach is serious or still happening.

Vercel, and anywhere else you push to

If you connect MiniEnv to Vercel, your Vercel token and your values go straight from your Mac to Vercel. They do not pass through our relay, and the token stays in your Keychain. We are not a party to that exchange.

Once you push a value to Vercel, Vercel has it and can read it. That is what pushing means, and it cannot be undone from here. What Vercel does with it, and what happens if Vercel is breached, is between you and Vercel under their terms. The same is true of anywhere else you copy a value to.

Your data stays yours

You own everything you put in. The only licence you give us is the narrow one needed to run the service: to store, transmit and back up your ciphertext and the metadata listed on the Privacy page, and to show you the names of your own variables.

We cannot read your values, so we cannot mine them, train on them, sell them, or hand them to anyone. That is not a promise about our intentions. It is a statement about what we hold.

The software itself

We grant you a personal, non-exclusive, non-transferable licence to install and use the app and the command-line tool for what they are for, on hardware you own or control, for as long as you keep to these terms.

Do not strip our notices or ship the app as your own. Nothing here takes away a right you have under your own law to study, test or decompile software, and nothing here applies to any part we have released under an open-source licence, which is covered by that licence instead.

What we do not promise

The honest part of a terms page, so here it is without the capital letters.

No uptime guarantee. There is no SLA on any plan, paid or free, and there will not be one until we can actually meet it. Your .env files on disk keep working when we are down.
The service is provided as it is, with all faults. We do not warrant that it is uninterrupted, secure, error-free, fit for a particular purpose, or that any data will be preserved or recoverable. Security lists the limitations we know about.
Not a backup. MiniEnv is where a team shares secrets. It is not the only place your production secrets should exist.
Macs only, today. The app needs an Apple Silicon Mac, and the command-line tool that comes with it needs Node 20.19. The key lives in the macOS Keychain, so there is no Windows or Linux build.
No advice we give becomes a warranty. Only what is written here counts.

Our liability is capped at the greater of what you paid us in the twelve months before the claim, or $100. We are not liable for indirect or consequential loss, or for lost profits, revenue, business, goodwill or data, including lost keys and lost encrypted values, whatever the legal theory and even if a remedy in here fails its purpose.

None of that limits liability for fraud, gross negligence, wilful misconduct, or death or personal injury caused by negligence, or anything else the law does not allow to be limited. Some countries do not permit these exclusions, so parts of this section may simply not apply to you, and if you are a consumer your statutory rights are untouched.

If we get sued over what you did

If someone brings a claim against us because of how you used MiniEnv, what you stored in it, a breach of these terms, or a right of theirs you infringed, you agree to cover that claim and our reasonable legal costs. Not where the claim comes from our own gross negligence or wilful misconduct.

Ending it

You can delete your account from the app at any time, and that is the end of it. Deletion is permanent and is described on the Privacy page. If a team you administer is still being billed, the app offers to cancel the subscription and then delete, in that order, so the money does not outlive the team.

We may suspend or close an account that is attacking the service or doing something plainly illegal, or if the law requires it. Barring a serious or ongoing breach, we will email you first, give you a reasonable chance to fix it, and give you a way to get your data out.

If we ever shut MiniEnv down, we will give at least 90 days' notice by email and on the changelog, and keep it running long enough for you to move. Since only you can decrypt your values, that export is something you perform, not something we hand over.

Ending the agreement does not end these sections: your key and permanent loss of data, your data stays yours, what we do not promise, the indemnity, the law that applies, and the small print.

Which law applies

These terms are governed by the laws of the State of Wyoming, USA, without its conflict-of-laws rules, and the UN Convention on Contracts for the International Sale of Goods does not apply.

Before starting anything formal, write to support@minienv.dev and give us 30 days to sort it out properly. Most things end there. Anything left goes to the state or federal courts in Wyoming, and you agree they can hear it.

If you are a consumer, none of that takes away the protection of the mandatory law of the country you live in, or your right to bring proceedings in your own courts.

Changes, and the small print

If these terms change materially, we will email account holders at least 30 days beforehand, move the date at the top of this page, and note it in the changelog. Carrying on using MiniEnv after that means the new version applies. If you do not agree with a change, delete your account: that is a real answer here, because deletion is real.

This page, Privacy and Security are the whole agreement, and replace anything said before.
If one part turns out to be unenforceable, it is narrowed just enough to work and the rest still stands.
Not enforcing something once does not mean giving it up.
You cannot transfer this agreement without us agreeing. We can transfer it to whoever takes over the business.
We are not liable for failing to do something because of events outside our reasonable control.

Anything unclear on this page is a fault of the page. Ask us and we will fix the wording.

Contact

Las Mulas LLC, Wyoming, USA.
General, billing and security: support@minienv.dev.