Privacy Policy
This privacy policy explains how MimoTalk collects, protects, uses, and safeguards your data.
1. Information We Collect
- Account Data: Email address, username, display name, optional profile avatar, and encrypted password hash (never stored in plain text).
- Content & Media: Messages, voice notes, photos, videos, and file attachments sent or received through the service.
- Automatic Technical Data: Device type, operating system, IP address, session tokens, crash logs, and push notification tokens.
- What We Do NOT Collect: We do not collect precise GPS location unless explicitly requested, nor do we scrape device contacts.
2. How We Use Your Information
- To deliver messages, voice notes, live presence status ("In this chat", "online", "offline"), and push notifications.
- To authenticate users, protect accounts from brute-force attacks, and address security incidents.
- To respond to support requests at support@mimotalk.me and enforce Terms of Service.
3. Message Security & Encryption
Messages and voice notes are encrypted in transit using modern TLS (HTTPS and WebSockets) as data travels between your device and our servers.
Data is stored securely in encrypted database infrastructure. Passwords are hashed using salted cryptographic algorithms and are never accessible in plain text, including to staff.
4. Third-Party Service Providers
- Vercel & Render: Web hosting, API routes, and real-time WebSocket server infrastructure.
- Supabase / PostgreSQL: Secure database storage for account credentials, friendships, and message history.
- Resend: Delivery of transactional emails (verification links, password resets).
5. Data Retention & Account Deletion
- Deleted Messages: Content and media are deleted immediately. Deletion tombstones are kept up to 30 days solely to synchronize across offline devices.
- Account Deletion: You can permanently delete your account at any time in Settings → Security → Delete Account. Account deletion permanently purges your profile, messages, voice notes, and media.
- Data Export: You can download a portable JSON export of your account data from Settings → Security.
6. Children’s Privacy
MimoTalk is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we learn such data was collected, we will delete it promptly.
7. Contact & Security Inquiries
For privacy inquiries or data requests, contact us at support@mimotalk.me.
To report security vulnerabilities, email security@mimotalk.me.
Contact Us
If you have questions about these terms or this policy, contact us at support@mimotalk.me.