Privacy Policy
This Privacy Policy explains what information Mimi handles, why it is used, when it is sent to external services, how long it is retained, and how it can be deleted.
1. Sharing Links Inside Mimi
If you choose link sharing, the selected note text, corresponding images, completed audio, title, source URL and sender display name are copied to a private sharing area in the cloud. This is a separate, explicit choice from ordinary note synchronization or audio backup. People who have the link can authenticate in Mimi, review the content and save independent copies to their devices. Sharing data excludes email addresses, favorites, playback history, authentication credentials and internal custom-voice IDs. Note bodies and media are not published in a browser.
2. Shared-Content Safety Checks and Reports
Before a link becomes active, shared text, title, source URL, images, and audio are sent to Google Cloud Vertex AI for safety review. Failed or uncertain checks do not activate a link and may require an authorized administrator's review. Reports record a share identifier, reason, necessary account identifiers and handling history. Blocking a sender prevents future receives from that sender. Reporting and link revocation are available in the app's sharing screen. Report shared content or rights infringement to canada.shohe@gmail.com.
3. Shared Copy Retention and Revocation
Active sharing copies are retained until the owner stops the link or deletes the source note or account. Revocation stops new receives and deletes the sharing media. Uncommitted preparation data is cleaned after cancellation or 24 hours. Operational metadata after revocation, resolved reports and completed handling history are normally cleaned within 30 days. Opaque revocation markers, receipt records and pseudonymous sender-blocking information remain as needed to prevent reactivation, duplicate saves and abuse. Copies and source attribution already saved by recipients are not removed by the sender's deletion.
4. Optional Usage Analytics
If you choose to help improve Mimi, Google Analytics for Firebase measures sharing starts and results, screen usage, actual listening time, and registration, purchase and ad outcomes. It uses an app-instance identifier and a pseudonymous account identifier. Analytics events do not include note text, titles, source URLs, email addresses, authentication tokens or purchase proofs. Analytics collection of IDFA and IDFV and ad personalization are disabled. Participation is optional and can be changed anytime in Profile > Privacy & Data > Help Improve Mimi without changing feature access. Withdrawal stops new collection and discards unsent custom events. Analytics event retention is limited to 14 months, BigQuery detail to 90 days, and non-identifying daily aggregates to 13 months. Account deletion also asynchronously requests deletion of associated analytics data.
5. Ads Before Playback
For registered Free users who have listened to at least 30 minutes of audio, an ad may appear before explicitly starting new audio in the app. Ads are not inserted during playback, automatic continuous playback or background controls. Actual listening time and ad history are kept per account on the device to limit frequency. These functional counters are separate from optional usage-analytics consent. Pro users and guests are excluded from these playback ads. Optional ads for earning characters remain a separate feature.
6. Information We Handle
Mimi may handle account and profile information, notes, images, audio, playlists, settings, device and app identifiers, usage information, diagnostics, and support inquiries. Audio features may process voice recordings, text to be spoken, language information, selected voice identifiers, and generated audio.
7. Purposes of Use
We use this information for authentication, synchronization, note management, speech generation, custom voice creation, service delivery, troubleshooting, abuse prevention, support, service improvement, and compliance with legal obligations.
8. Firebase and Google Cloud
Mimi uses Google Firebase and Google Cloud for authentication, storage, synchronization, notifications, and server-side processing. Data may be stored or processed by those services in association with your account identifier.
9. Google Mobile Ads and Ad Rewards
Mimi uses Google Mobile Ads for optional video ads that earn characters and for pre-playback ads shown to eligible Free users. For ad delivery, measurement, fraud prevention, and diagnostics, Google may collect or process device and app identifiers, IP address, approximate location, ad impression, viewing and interaction data, and diagnostic information. Ad personalization is governed by applicable law, your consent, and device and in-app settings. Mimi uses Google User Messaging Platform to present consent or choices where required and, when applicable, lets you revisit them in Profile > Privacy & Data > Ad Privacy Choices. See [How Google uses information from apps that use its services](https://policies.google.com/technologies/partner-sites?hl=en). Characters are granted only after the server verifies completion of the optional video ad.
10. Speech Synthesis and Custom Voices
When you generate speech, the text to be spoken, selected voice identifier, and language information are sent through Firebase Functions to Alibaba Cloud Model Studio (Qwen). When you create a custom voice, the voice recording, enrollment text, and language are also sent. Mimi also stores the recording in its cloud. This information is used to synthesize speech and create a custom voice reflecting the characteristics of the recording.
11. International Processing
The international Alibaba Cloud Model Studio API currently used by Mimi for audio processing is provided in the Singapore region. Static data is stored in Singapore, while inference may be scheduled across international infrastructure excluding the Chinese mainland. If we materially change the provider or processing region, we will provide advance notice and request renewed consent where required.
12. AI Text Processing
When cloud summaries, translation, or proofreading are used, source text, processing conditions, content hashes, and related analysis data are sent through Firebase Functions to Google Cloud Vertex AI (Gemini). On-device processing may be used where available. The feature explains this processing and requests permission before sending data.
13. Web Article Extraction
When you share or import an article URL without prior Jina AI Reader permission, Mimi first attempts on-device extraction. Only if extraction fails and you grant permission is the article URL sent to Jina AI Reader. When permission already exists, Mimi may use Jina AI Reader directly. Search terms or identifiers in the URL may also be disclosed. Retrieved text may then be processed in Mimi's cloud to create a note.
14. External-Service Permissions and Withdrawal
Mimi separately asks permission, with the recipient and purpose, for speech generation, custom voices, summaries/translation/proofreading, web article retrieval, shared-link safety checks, and optional usage analytics. Permission state is stored in Mimi's cloud with your account and shared across devices and the Share extension. You may revoke each permission at any time in Profile > Privacy & Data. Revocation stops new transfers but cannot undo data already sent.
15. AI Model Training
Mimi does not provide voice recordings, text to be spoken, or other user data for the purpose of training or improving third-party AI models, and does not consent to such use. Each provider's handling of data is governed by its applicable contract and published terms.
16. Retention and Deletion
Data stored in Mimi's cloud is retained for as long as needed to provide the service or until you delete the relevant data or account. When you request deletion from Account settings, Mimi deletes the account, notes, images, audio, playlists, custom voices, and other associated data. Deletion from Firebase, storage, and external services including Alibaba Cloud runs asynchronously and may take time to complete. For the account-deletion job, only a request identifier and status needed to prevent conflicts and confirm completion are retained for up to 30 days; email, notes, audio, and external voice identifiers are not retained in that job. The separate shared-copy, receipt and safety-record rules above continue to apply.
17. Service Providers and Disclosure
Mimi does not disclose personal data to third parties except to cloud and AI service providers needed to operate the service, with your consent, as required by law, or where necessary to protect a person's life, safety, or property.
18. Security
Mimi applies reasonable safeguards appropriate to the information handled, including encryption in transit, access controls, authentication, least-privilege permissions, and minimizing sensitive information in logs. Third-party protections are subject to their own contracts and published terms. Mimi does not assert unverified equivalence between those protections and its own.
19. Your Choices and Requests
You can disable certain cloud features and delete applicable data, such as registered voices, through settings or deletion controls provided in the app. Use the contact method shown in the app to request deletion of account-related data or to make legally available requests to access, correct, restrict, or delete personal data.
20. Changes to This Policy
Mimi may update this Policy to reflect changes in law, features, or data practices. Material changes will be announced in the app with their effective date, and renewed consent will be requested when required.
21. Contact
For questions about this Policy, contact canada.shohe@gmail.com.