Mipkin

Privacy Policy

Last updated 13 October 2026

Mipkin is operated by Eros Media LLC (“we”, “us” and “our”), 1000 Brickell Ave., Suite 715, Miami, Florida 33131, United States. Eros Media LLC is the controller of personal information processed for Mipkin. The app is built so your Mipkin, Nook, check-ins and writing stay on your device by default. A few optional features need a service to work, and production builds use limited Firebase diagnostics and analytics, and limited PostHog product analytics, described below.

Consumer health data. What you write in Talking freely, or send for a reflection, may say something about your health. Our Consumer Health Data Privacy Policy sets out what we collect, why, who receives it, and how to use your rights, as Washington, Nevada and Connecticut law asks. How Talking freely handles crisis language is published on our safety page.

What we collect about you

We do not ask for a name, phone number, contacts, photos, location or date of birth. Production builds use Firebase Crashlytics, Firebase Analytics and PostHog for the limited purposes below. On iPhone, we may also use limited app-install measurement with Google Ads and, only after you allow tracking, Meta. Optional email sign-in uses Firebase Authentication to verify an email address; we describe that separately below.

What is stored, and where

The core Mipkin data the app keeps by default lives in your device's own storage, in a private area belonging to the app. That includes:

  • A randomly generated identifier created on your device, which is not linked to you and is never sent anywhere.
  • Your Mipkin — which one, their name, the room, how long you have known each other, and their bond and energy values.
  • What you have done in the app: the small things you have tended, quests, adventures, keepsakes, warmth earned and spent, decor owned and where you put it.
  • What your Mipkin remembers from talking with you. Her everyday conversations are written in advance and you answer by tapping; there is nothing to type. When you choose to tell your Mipkin something — tea or coffee, mornings or nights, a busy week ahead — the app keeps a short fixed label for it with the date, at most 24 of them, and the names of your 12 most recent conversations so your Mipkin does not repeat itself. It never keeps the answer you tapped as words, and never keeps how you said you were feeling. You can see everything it remembers, and forget any of it, on your Mipkin's page in the app.
  • Your daily check-in answer, which is replaced each day.
  • Any Personal Rhythm you choose to make: its label, gentle time preference, whether you pause it, whether you chose “done” or “not today” today, and whether you choose to show completed choices in a private seven-day look-back. This stays on your device; it is not a streak, score, notification signal, account backup, or analytics data. The look-back cannot see your writing, check-ins, Mipkin, friends, health data, or anything you did not choose to include.
  • A bundled activity-soundscape choice, if you make one. Focus sessions themselves are not saved. Neither is listening history, account backup, analytics data, or a notification signal.
  • The pages you write in your own journal, and any reflection returned for them.
  • If you turn on Talking freely, the conversations you have with your Mipkin there: what you typed, what the AI wrote back, and when. These stay on your phone. You can delete one conversation, all of them, or everything.
  • Anything you tell your Mipkin from the “Tell” sheet, or on iPhone through Siri or Shortcuts. Siri handles your voice request under Apple’s own terms; Mipkin receives only the words it passes on, keeps them in a small file on your phone (left out of your iPhone backup) until the app next opens, and then files them exactly as if you had typed them in the app. A quick thought is kept with your own journal pages and marked as left for your Mipkin. Something coming up — an interview, a hard call, a first day back — is kept as the few words you typed, the day, an optional time, an optional kind you picked from a fixed list (such as “work” or “a hard thing”), and, once it has passed, the answer you chose to how it went and one optional line of your own. Your Mipkin asks about each thing at most once and mentions it beforehand at most once. None of this is copied into account backup, sent to our service, or included in analytics, except that with Talking freely on, a fixed word for how soon it is or how it went may be sent, as described under “Talking freely”; analytics only counts that something was told or answered, never what, when, what kind, or how it went. You can change or forget each thing on your Mipkin's page, it is included when you export your data, and it is deleted with everything else. Finished things are removed from the device after three weeks.
  • Anything you shut in the worry box. This never leaves your device under any setting — there is no switch that sends it, and nothing in the app reads it except the screen that shows it back to you.

This core content does not leave your device unless you choose one of the optional features below. Limited anonymous diagnostics and product-interaction events do not contain that core content. Inside the app you can export the local information it holds, or delete it, at any time.

Apple Health mindful minutes

On iPhone, only after you choose to connect Apple Health, Mipkin can write the duration of breathing, grounding, wind-down and focus activities as mindful minutes. Mipkin never reads Apple Health. The mindful-minute record is written directly by iOS and is not sent to Mipkin, Firebase, OpenRouter, or RevenueCat. You can control or revoke this access in Apple Health or iPhone Settings.

Optional features that send data

Reflections, Talking freely, visiting, care cues, private friends and account backup are separate choices. You can use the core Mipkin, Nook and journal without any of them.

Reflections

While reflections are on, the text of each journal page you keep is sent to our service. If you selected support areas during onboarding, up to six fixed choices such as “rest” or “connection” accompany it. No Mipkin name or identifier, mood, check-in, streak, warmth, keepsake, device identifier, advertising identifier, timestamp, or previous journal entry is sent. To check that you have Mipkin Plus, the app may also send, in a request header, the anonymous purchase ID that RevenueCat gives this install (see “Purchases”), but only if you said yes when the app asked; you can change that answer in Settings, under Privacy, and saying no changes nothing else. Our service passes it only to RevenueCat to ask whether it holds Plus right now, keeps only that yes-or-no answer in memory for a few minutes, and never stores or logs the ID.

Our service checks for crisis language before any model call. An entry that triggers that check is not sent to the model. An ordinary request is sent to OpenRouter, which passes it to a host of the AI model (currently Anthropic's Claude, run on Amazon Bedrock or Google Cloud Vertex AI) for one short AI-generated reflection. We ask OpenRouter to use only hosts it lists as keeping no copy of the text (zero data retention) and not training on it; if none is available, you get no reflection rather than one from a host that keeps the text. We design our service not to persist or log the page text or the reply. OpenRouter's handling is governed by its privacy policy, and each host's by its own terms. A reflection is not medical or mental-health care, advice, diagnosis or a conversation with your Mipkin.

You can turn reflections off at any time in Settings. The choice is read before each send, so turning it off stops future requests. Everything already written stays on your phone.

Talking freely

Talking freely is part of Mipkin Plus. It is only for people 18 and over, it is offered in the United States and the United Kingdom, and it is off until you turn it on, on its own consent screen. It lets you type to your Mipkin and have an AI write her replies. AI conversation may not be suitable for some young people.

What is sent. When you send a message (up to 1,000 characters), the app sends it to our service with the recent lines of the same conversation (up to 12), so the reply makes sense. Only your messages and the AI’s replies are included, not the app’s own notices. It also sends a few fixed choices, never typed text: which kind of Mipkin she is, her pronouns, up to six support areas you picked during onboarding, the version of the consent you agreed to, your app language and your phone’s region setting. Only if you turn on a separate switch on the consent screen does it also send short fixed labels for things you chose to tell her in her everyday conversations, like “tea” or “busy week”. While Talking freely is on, the AI may also write her answer when you tell her about something coming up, or tell her how it went: for that the app sends only a fixed word for how soon it is or for the answer you picked, with the same fixed choices, never what you typed about it, and anything you said was hard is always answered in words we wrote. We do not send your Mipkin’s name, your journal, worry box, check-ins, mood, Apple Health data, purchases, account ID, device identifiers or location. You do not need an account or to sign in, and the request carries no account or device identifier. To check that you have Mipkin Plus, the app may also send, in a request header, the anonymous purchase ID that RevenueCat gives this install (see “Purchases”), but only if you said yes when the app asked; you can change that answer in Settings, under Privacy, and saying no changes nothing else. Our service passes it only to RevenueCat to ask whether it holds Plus right now, keeps only that yes-or-no answer in memory for a few minutes, and never stores or logs the ID. Like any web service, ours sees the internet address a request comes from; our code does not log what the request says.

Who handles it. Our service, run on Google Cloud, first checks each message for crisis language (see “Crisis language” below). An ordinary message then goes to OpenRouter, which passes it to Anthropic’s Claude models, run on Amazon Bedrock or Google Vertex AI. One model reads the message in the context of the conversation as a second safety check and answers only with a classification; another writes her reply. We ask OpenRouter to use only hosts it lists as keeping no copy of the text (zero data retention) and not to allow data collection; if no such host is available, you get no reply rather than one from a host that keeps the text. We design our service not to store or log your messages or the replies. None of them uses your conversations to train AI models. OpenRouter’s handling is governed by its privacy policy, and each host’s by its own terms.

Notes you keep for her. Where we offer it, you can turn on a separate switch in Settings and write up to six short notes (120 characters each) for your Mipkin to know in every conversation, such as a name or something you are learning. It is off until you turn it on, and you write every note yourself: nothing is summarised from your conversations and nothing is guessed about you. Every note is listed in Settings, where you can change or delete it. While notes are on, they are sent with each message, alongside the recent lines, so the reply can use them; our service checks them like your messages, leaves out any that its safety checks would stop, and is designed not to store or log them. Turning notes off stops them being sent at once. They are kept on your phone like your conversations: included in your export, deleted with everything else, and never copied into account backup or sync.

On your phone. Conversations are saved on your phone so you can scroll back, up to 50 conversations of up to 200 lines each. You can delete one conversation, all of them, or everything. They are included when you export your data and never copied into account backup or sync; like the rest of the app’s storage, they can be included in your phone’s own iCloud or Google backup. The phone also keeps your consent and its version, your answer to whether you are 18 or over (only yes or no, and the date it was asked), and, if the app has shown you ways to get help, the date it paused offers.

Reporting a reply. You can report any AI reply from inside the app. If you confirm, we receive that reply, your message before it, the reason you picked, which model wrote it and the version of the consent you agreed to, with nothing that identifies you. A person reads it, we use it to improve our filters, and we delete it after 90 days.

No analytics. Talking freely sends no analytics events, and crash reports never include conversation text.

Your control. You can turn Talking freely off at any time in Settings, and nothing more is sent from that moment. Conversations already on your phone stay there until you delete them.

Your Mipkin is not a person, and Talking freely is not therapy, counselling, medical care or a crisis service. AI replies can be wrong.

Visiting

When you turn on visiting, we publish which kind of Mipkin yours is, how grown it is, what it is wearing, and which room you chose with the decor you own in it and where it stands, so someone holding the code you share can see your Mipkin as it is when it visits and look round your room. We never publish the name you gave your Mipkin, your mood, bond, energy, warmth, check-in, journal, outings or last-seen time.

A visiting record contains those appearance and room fields, a hash of a secret write key, timestamps, and a small queue of fixed gestures. A gesture can carry one keepsake, as a gift: only a keepsake from the app's own list, never text. It expires after 90 days without an update. Visiting has no public feed, searchable list or chat. Turning visiting off asks the service to revoke your code; if the phone cannot reach the service, the app tells you it is still on instead of claiming a code is gone when it is not.

Private friends

Private friends are optional and require an account. You create a blank, expiring invitation and the other person has to accept before a connection exists. Our service stores only two opaque account IDs, the connection state, a time, and—until read—a small queue of one of three fixed gestures. An active pair can also choose one reviewed shared-rhythm label, such as “Take a breather”; there is no custom goal text, completion record, schedule, streak, reminder, history or score. It does not store names, profiles, selected Mipkins, journal pages, reflections, aliases or free-form social text. There is no directory or discovery feature.

Either connected person can propose, accept, decline or remove that one shared rhythm, and it never sends a notification or tracks whether either person does it. You can remove or block a friend in Settings. Removing deletes the connection and shared rhythm for both people. Blocking also prevents a future invitation between those two accounts. Deleting your account removes your pending invitations, connections, current shared rhythm, blocks and queued gestures.

Optional sign-in

Sign-in is not required to use Mipkin. If it is available in your build, Apple or Google gives us a short-lived identity token so our service can verify it against that provider. We do not store that token, your name, avatar or provider profile. Our service stores an opaque Mipkin account ID, the provider name, a hashed provider subject, a creation time and, only if you link it, your shareable hearth code. It does not store your Mipkin, chosen Mipkin name, journal, reflections, check-ins, Nook, purchases, device identifier or secret hearth key.

A short-lived account session is held in the app's memory after you sign in; it is not saved to device storage. It can recover and manage a linked hearth code after a reinstall. You can delete the account in the app after reconnecting it. Deletion withdraws the linked hearth code, removes the account record and clears the account-backed friends and backup described here; deleting the account does not delete local app data.

Email sign-in uses Firebase Authentication to send a passwordless sign-in link. Firebase receives and holds the email address and a Firebase account identifier for that optional sign-in. Mipkin does not receive your address to send the link. When you open the link in the app, Firebase provides a signed identity token; our service verifies it and stores only an opaque Mipkin account ID, provider name and a hash of Firebase’s account identifier. The link and token are held only in memory in the app.

Deleting a Firebase email account in Mipkin also asks Firebase Authentication to remove that optional Firebase identity. If you cannot use the app, contact us through the account-deletion process below so we can verify ownership before acting.

Optional account backup

Account backup is off until you explicitly turn it on and press Back up now. It copies Mipkin progress (including the short labels your Mipkin remembers from conversations), Nook choices, inventory, what your Mipkin is wearing, and settings to the account so you can choose to restore them on another device. It does not copy journal pages, thoughts or things coming up that you told your Mipkin, how they went, reflection text or replies, Talking freely conversations, worry-box entries, check-ins, onboarding acquaintance answers, local friend aliases, visiting codes, secret keys, provider tokens or payment records, so a restore from it cannot bring those back; the data export in Settings is the way to keep everything. Purchases belong to your App Store or Google Play account and come back with Restore purchases.

Turning account backup off stops new copies. To delete the existing account copy and account-backed friendship records, delete the optional account from Settings or use the account-deletion process below.

Optional care cues

Care cues are off until you turn them on in Settings and allow notifications on your phone. A signed-in account can then use Firebase Cloud Messaging and our Google Cloud service to deliver at most one practical, complete cue per local day. The app sends and stores an FCM delivery token, device platform, consent time, primary-device status, your selected care-cue categories, frequency, timezone, quiet hours, visual-art choice, temporary pause, category-level feedback such as “later” or “less like this,” and the category of a care action you choose to mark complete. It does not send the action text or an action ID. Short delivery receipts prevent duplicates, apply non-response backoff, and expire. Before a queued cue is sent, our worker checks the current consent, selected category, pause, quiet hours, safe time window and local day again.

Care cues do not use your journal, reflection text, chosen Mipkin, Mipkin name, social activity, location, contacts, steps, sleep, calendar, health data, or notification opens. We do not use a lack of app activity as a reason to notify you. Lock-screen art, if you separately turn it on, is one public Mipkin illustration and never shows your goal, check-in, or chosen Mipkin.

You can turn care cues off, pause them for a week, choose categories and frequency, remove lock-screen art, or reset category learning in Settings. Turning care cues off removes the device registration from our service. Deleting your optional account removes its care-cue preferences, devices, category learning, schedule and delivery receipts.

Crash diagnostics and limited analytics

Firebase Crashlytics and Firebase Analytics are always on in production. Crashlytics receives native crash diagnostics and sanitized JavaScript error type, redacted message, and shortened file-and-line frames. Firebase Analytics receives a small fixed set of events for onboarding, a revealed Mipkin, opening and completing an authored daily moment, an art load or fallback, purchase state, and startup, storage, network or rendering reliability. After a store purchase is confirmed in a production build, it may also receive a trial-start or purchase event carrying the store's numeric price and currency code, and nothing else about that purchase.

These reports never include your writing, journal, worry-box content, check-in answer, chosen Mipkin or name, social data, Apple Health data, account ID, or product ID. PostHog never receives a price. Automatic screen reporting is disabled. Advertising measurement is off until you allow it. Allowing it grants Firebase advertising storage, advertising user data and advertising personalization. Declining leaves those signals denied and does not change anything else in the app. Product analytics in Firebase stays on either way. PostHog is not used for advertising.

Firebase creates an anonymous app-instance identifier and may attach coarse app and device information such as app version, platform and device model. Choosing Delete everything resets the Analytics app-instance on that device. Reports already uploaded contribute to anonymous aggregate reporting; because Mipkin does not attach your account or identity, we cannot find or delete an individual anonymous aggregate after upload.

App-install advertising measurement

We may link Firebase Analytics to our Google Ads account and use the iPhone app's first-open event to count and improve app-install campaigns. After you allow advertising measurement, we may also send a trial-start or purchase event, with a numeric price and currency code, so Google can tell whether an ad led to that trial or purchase. We do not send your writing, check-ins, companion identity, social or Health data, account ID, or email for this purpose. We do not import PostHog data into ad accounts or use Firebase Analytics audiences for remarketing.

The question appears after you already have a Mipkin, not on the first launch that includes onboarding. You can change the answer anytime in Settings, under Privacy. On Android, allowing it lets Google read the advertising ID. In the EEA and the UK, Android also shows Google’s consent form before that identifier is shared, once that form is configured. On iPhone, allowing it leads to Apple’s tracking prompt. The iPhone app asks for Apple's permission to track only after you allow measurement. If you allow it, Mipkin initializes the Meta App Events SDK and lets Meta collect an advertising identifier and limited app-install or activation events to measure and improve Facebook and Instagram install campaigns. If you decline, Mipkin does not initialize that SDK or send those events, and the app works the same. Mipkin does not send journal content, check-ins, companion identity, social or Health data, account ID, or email to Meta. You can change Apple's tracking permission in iPhone Settings.

PostHog is also on in production. PostHog receives the same kind of bounded product-journey events as Firebase Analytics — onboarding steps, a revealed Mipkin, care and companion interactions, paywall and purchase outcomes, and reliability outcomes — drawn from a fixed catalogue whose properties are enumerated values only. It never receives your writing, journal, worry-box content, check-in answer, chosen Mipkin or name, social data, Apple Health data, or advertising signals. Session replay and autocapture are disabled, and PostHog is not used for advertising.

Before you sign in, PostHog identifies the app only by a random identifier created on your device. After you sign in, it receives a one-way SHA-256 hash of your opaque Mipkin account ID, domain-separated for analytics use, so one person’s journey is not counted as several. Your Mipkin account ID itself is never sent. Because that hash is derived from your account, we can find and delete your PostHog records on request through the account-deletion process below, and Delete everything resets the random identifier on that device.

Crisis language

Before any journal page or Talking freely message reaches an AI model, our service checks it for words that suggest somebody is in danger. In Talking freely it also checks your recent messages in the conversation together, has a second AI model read each message for danger said indirectly (so that model receives your message too), and checks each AI reply before you see it. If a check finds something, nothing more goes to the model that writes replies, the AI stops for that conversation, and the app shows you ways to reach people who can help instead.

These checks run on our service, in memory. We do not record what was written or who wrote it. For Talking freely we do keep a daily count of how many times the app showed those ways to get help, with no names, accounts, devices or words attached, because some laws require us to report those numbers. Our full approach is on our safety page.

Payments

Subscriptions and one-off purchases are handled by Apple's App Store or Google Play. We do not receive your card number or billing address. When purchases are enabled, RevenueCat processes the store purchase record and entitlement status using its own anonymous app user ID, so the app can tell whether an item is available. If you agree when the app asks, our service may also ask RevenueCat whether that anonymous ID holds Plus before it pays for an AI reply or reflection, as described above; it keeps no record of the ID, and keeps the answer only in memory for a few minutes. We do not send RevenueCat your Mipkin, chosen Mipkin name, journal, check-ins, Nook, visiting data, or optional account record, and we do not link its anonymous ID to that account.

Notifications

The app can schedule one gentle local reminder on your own phone. That reminder is separate from optional account-backed care cues. Neither names your Mipkin or shows your check-in on a lock screen. If you have that reminder on, the app may also schedule one local note a couple of hours after something you told your Mipkin about has passed. It never says what the thing was or names your Mipkin, never arrives in quiet hours (10pm–8am) or on a break, and never makes more than one of these notes a day. If you type a reply into it, the reply is kept on your phone as a thought left for your Mipkin. Care cues use Firebase Cloud Messaging only after the separate in-app and phone-permission choices described above.

Age and children

Mipkin is a general-audience service for adults and older teens. You must be at least 13 to use it, and it is not directed to children under 13. We do not knowingly collect personal information through Mipkin from a child under 13. If you are a parent or guardian and believe a child under 13 used an online feature, contact us so we can investigate and delete the information.

In the EEA and other places where the age for a child to consent to online processing may be between 13 and 16, a parent or guardian must provide parental permission when local law requires it before the child uses a consent-based online feature. Mipkin is not marketed as a children's product and does not use child-focused advertising.

Talking freely is only for people 18 and over. Where your phone can tell the app your age range, the app uses that; otherwise it asks your age. If the app cannot tell that you are 18 or over, Talking freely is not offered. If we learn that someone under 18 is using it, it is switched off on that phone.

Legal bases

Where privacy law requires a legal basis, we rely on consent for reflections, Talking freely, visiting, care cues, advertising measurement (including Meta app events only after you allow tracking), and other optional features you deliberately turn on (because what you write in reflections and Talking freely can reveal information about your health, we ask for your explicit consent to it, for the purposes described above); performance of our contract to provide an account, backup, private-friend, purchase-entitlement and support functions you request; our legitimate interests in keeping Mipkin secure, reliable and understandable through tightly limited diagnostics, product measurement and aggregate install-campaign measurement; and compliance with legal obligations when we must keep or disclose a record. We do not attach Firebase or Meta app events to a Mipkin account.

Service providers and recipients

We use service providers only where needed to operate the feature: Google and Firebase for hosting, authentication, delivery, crash reporting, limited analytics and install-campaign measurement; Meta for app-install measurement after Apple's tracking permission; OpenRouter, and through it Anthropic’s Claude models on Amazon Bedrock or Google Vertex AI, for reflections you request and Talking freely messages you send; RevenueCat and Apple or Google for purchase entitlements; and Apple or Google for optional sign-in. They process information under their own terms and applicable data-processing commitments. We may also disclose information when required by law, to protect people or the service, or as part of a corporate transaction subject to appropriate protections. We do not sell personal information. Any cross-app advertising measurement with Meta requires Apple's tracking permission.

Retention

Local content remains on your device until you delete it or the app. Visiting records expire after 90 days without an update; blank invitations expire after 48 hours; and short care-cue delivery receipts expire after 30 days. Optional account, backup, friendship and care-cue records remain until you delete the account or the record is no longer needed to provide the feature, subject to limited legal, security and backup retention. Mipkin is designed not to persist or log reflection text, Talking freely messages or AI replies on its service. Reported Talking freely replies are deleted after 90 days. Daily crisis-help counts, which contain no personal information, are kept for three years. Firebase, OpenRouter, RevenueCat, Apple, Google and Meta retain information under their own policies and configured service periods. We choose retention according to the feature's purpose, the amount and sensitivity of the information, security needs, and legal requirements.

International transfers

Eros Media LLC and some providers process information in the United States and other countries that may have different privacy laws from your home country. Where required for a transfer from the EEA, UK or Switzerland, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses with the applicable UK addendum, or another legally recognized safeguard used by the relevant provider. Contact us if you would like information about the safeguard that applies to your information. Talking freely is offered only in the United States and the United Kingdom; it is not offered in the EEA.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, obtain portability of, or object to processing of your personal information. You may withdraw consent at any time without affecting earlier lawful processing. You may also appeal a decision where applicable and complain to your local data protection authority. We may need to verify your request, and legal exceptions can apply.

These rights include the GDPR and UK GDPR rights described above for people in the EEA and UK. Depending on local law, people in Switzerland, Canada, Brazil, Australia, New Zealand and US states with comprehensive privacy laws may also request access, correction or deletion, receive information about processing, withdraw consent, object or appeal. You may complain to the authority where you live, including an EEA or UK data protection authority, Brazil's ANPD, Canada's privacy commissioners, Australia's OAIC, or New Zealand's Privacy Commissioner. We do not sell personal information. You can turn advertising measurement off in Settings under Privacy, and you can decline or revoke Apple's tracking permission to stop future Meta app events; contact us to exercise any other applicable advertising-related privacy right.

You can exercise many of these choices directly in the app:

  • Access and portability — export your full local state from the app at any time.
  • Erasure — delete all local data from the app, or delete Talking freely conversations one at a time or all at once. The app also attempts to withdraw a visiting record before discarding its local key and resets the local Firebase Analytics app-instance.
  • Account deletion — if you enabled optional sign-in, delete that separate account from Settings after signing in again. Our account-deletion page explains the same process if you cannot open the app.
  • Withdrawal of consent — turn reflections, Talking freely, sending the purchase ID for the Plus check, advertising measurement, visiting, care cues or account backup off in Settings, and change app tracking permission in iPhone Settings. Turning backup off stops new copies; delete the optional account to erase the existing account copy.

To exercise another right, email support@mipkin.app. We will respond within the period required where you live. Rights over consumer health data are set out in our Consumer Health Data Privacy Policy.

Automated decisions

Mipkin makes no solely automated decision that produces a legal or similarly significant effect about you. Reflections and Talking freely replies are wellbeing content written by an AI, not eligibility, employment, credit, insurance, housing, medical or other consequential decisions.

Changes

If this policy changes in a way that affects what leaves your device, we will update this page and the in-app disclosure before release. This page's date is the record of when it last changed.

Contact

Questions about this policy: support@mipkin.app.