Your privacy,
clearly explained.

1. Your companion and backups

Your companion’s life is saved on your iPhone: chosen species and name, state and progress, decoration, care, memories and walk summaries. This information lets you continue your story.

If you choose online backup, that saved state is sent to our Supabase service and associated with your account. It may include step counts kept in walk summaries or memories. Turning automatic uploads off stops future uploads; it does not erase a copy already stored online. System backups of your iPhone also depend on your Apple settings.

2. Sign-in and a shared household

Sign in with Apple provides access to online features. Apple and Supabase process authentication information, including an account identifier and the email address supplied by Apple, which may be a relay address. Mimlo does not receive your Apple password.

A household can include an owner and one invited partner. Members can see the household companion’s name and species, fullness, wellbeing and shared care events. The journal identifies events as yours, your partner’s or a former member’s; it does not show their email. Your personal companion’s backup is not shared with the partner.

An invitation link provides a limited preview and a way to request household membership. Share it only with your intended partner. It can be revoked and expires after 24 hours.

3. Steps, camera, photos and notifications

You can change permissions in iOS settings and the corresponding options in Mimlo. A refusal limits the relevant feature. A notification already passed to Apple may still arrive after you disable it.

• Motion & Fitness: with iOS permission, steps taken during a walk you start are read for that activity. Mimlo does not request GPS location or record a geographical route.
• Camera: with permission, it displays your companion in your room using augmented reality. This feature does not send the camera feed to our servers.
• Photos: a picture is added to your library when you choose Save. Mimlo does not read your photo library. Sharing uses the destination you choose in the iOS share sheet, under that service’s own rules.
• Daily reminder: optional and scheduled locally on your iPhone. Partner notifications: optional and delivered through Apple Push Notification service, using a device token associated with your account and household.

4. “Improve Mimlo” is your choice

Usage measurement is off by default. You can enable or disable it in Settings → Improve Mimlo. It helps us understand which features people use and when they return.

Events contain a predefined action type, a timestamp, random installation, session and event identifiers and, for sessions, an active duration. They do not contain your companion’s name, photos, step counts, email address, Apple account identifier or backup contents. Visits from one installation can be connected: the data is pseudonymous, not necessarily anonymous.

No earlier history is reconstructed. Disabling the option clears pending events on that iPhone; it does not retrospectively delete events already received. Development builds keep these measurements locally; planned distributed builds can send them to Supabase after you opt in.

5. Service providers and purchases

Supabase provides authentication and storage for online backups, households, notifications and optional usage measurement. Apple provides sign-in and notification delivery. These providers may also process technical information needed to operate their services, such as IP addresses and security logs.

Connections to our online service use HTTPS encryption. Access rules restrict a personal backup to its account and shared data to household members. This is not end-to-end encryption; the services that host and process the information take part in protecting it.

Paid purchases are not yet enabled in the Release version being prepared. Test versions use RevenueCat, which may process a technical user identifier and information about products, test transactions and access entitlements. The commercial configuration and the data it actually processes must be confirmed before activation. Mimlo does not collect payment card numbers.

The reviewed website and app code do not include an advertising network. Mimlo does not use the information for advertising across other apps. Hosting regions and applicable international transfers must be documented before publication; no exclusive Canadian or European data residency is claimed.

• Apple privacy information
• Supabase data processing
• RevenueCat privacy

6. How long information is kept

• Local saved state: kept on the device until erased or replaced. Restoring a backup can retain a local archive of the previous state.
• Account and online backup: the reviewed version has no automatic inactivity deletion. The final retention and deletion policy must be completed before public availability.
• Household: closing it removes the household and journal. A departing member’s past care events may remain attributed to a former member while the household exists.
• Optional usage data: the local queue holds up to 500 events for up to 30 days. Received events are purged daily after 90 days; inactive installation identifiers are removed after 90 days. An active identifier can be kept longer.
• Partner notifications: registration is renewed after 30 days, notification tasks are kept for 7 days and inactive installations are removed after 90 days. Provider logs and infrastructure backup retention must be confirmed separately.

7. Your choices and requests

Depending on applicable law, you may request access, correction or deletion, withdraw consent and, where these rights apply, request portability or restriction or object to certain processing. Proportionate identity verification may be needed.

Signing out or uninstalling the app does not delete your Supabase account or its online backup. The in-app account deletion process and the contact for requests must be finalized before release. This draft does not present that functionality as already available.

Deletion or withdrawing consent may make the affected features unavailable. Optional permissions can be withdrawn without deleting the local companion. Complaints can be addressed to the competent data protection authority for your place of residence.

8. This website and local storage

This website currently uses no advertising cookies, audience analytics or collection forms. It stores only your FR/EN choice in browser local storage under mimlo-language. You can change the language or clear the website’s data to remove that preference.

Fonts, visuals and videos are served with the website, hosted on Cloudflare Pages. There is no embedded third-party video player. Cloudflare processes IP addresses and technical request information to deliver and protect the website. Applicable retention periods remain to be specified.

9. Minors and changes

The age range, distribution countries and any parental consent arrangements must be established before release. This draft does not characterize the service as directed at children.

The date on this page identifies its version. Material changes in information use or purpose will be explained, and new consent obtained where required. The publisher’s final details are provided in the Legal notice.