Privacy Policy
Last updated: October 5, 2026
In short. Almost everything you record in Mimo stays on your phone. What leaves it is the minimum each feature needs: your questions to the AI, with what it needs to know about you to answer, and —only if you choose— a copy of your things in your account, what you share with your circle, or your morning email of doses. We do not sell data, there are no ads, and there is no third-party analytics SDK inside the app.
1. Who is responsible
The controller of your data is ssssstudios, based in the United States. For any question about this policy or to exercise your rights, write to support@ssssstudios.com.
2. What data we process
2.1 An account, only if you want one
Mimo works without an account. When you open it, the server creates an anonymous identifier for your installation, not tied to your name, your email or your phone.
If you choose to sign in:
- Sign in with Apple: we receive the identifier Apple assigns to your Apple ID for Mimo and, if you allow it, your email. If you choose "Hide My Email", we receive Apple's relay address and never yours. We also keep a code that lets us revoke Mimo's access to your Apple account when you delete yours, as Apple requires.
- Sign in with Google: we receive your Google account identifier and your email.
- Your profile in your account: with an account we keep your profile —name, age, country, your week or due date, your baby's birth date, name and sex, your language and the appearance you chose— so that when you sign in again, or on another iPhone or iPad, you do not start from scratch.
- A copy of what you record: with an account we also keep a copy of what you log in the app —your appointments, medications and doses, your kick, contraction, symptom and mood logs, your baby's (sleep, feeding, milestones, growth and vaccines), your scans and folders, your chat history and what Mimo remembers about you— and its photos: yours and dad's, your baby's illustration, the photos of scanned products and your folder icons. It is there so you do not lose it when you sign out or switch phones. Only you can see it, and it is deleted with your account.
We never ask for a password or a phone number.
2.2 What stays on your phone
Without an account, this is kept only on your device, not on our servers. We cannot see it, or recover it if you delete the app. With an account, the copy described in 2.1 is kept as well:
- Your complete chat history and what Mimo remembers from earlier conversations
- Your medical appointments and medications (unless you turn on the email summary, see 2.8)
- Your kick, contraction and symptom logs
- Your emotional check-in answers and score
- Your baby's sleep, feeding, milestones, growth and vaccines
- Your scan history
- Your photos and dad's, and your baby's illustration
- Your profile, if you have no account
If you sign out, it is deleted from that phone; with an account, it comes back when you sign in again.
2.3 What you ask the AI
So that Mimo does not answer blindly, each question goes with a summary of what the app knows about you: your name, your week or your baby's age, your age, the medications you take, the symptoms you logged today, how your last check-in went (in one sentence, without your answers), your next appointment, your country, and what it remembers from earlier conversations.
All of that goes through our server to the model provider (Anthropic) only to answer you. We do not store your conversations: for each question we record what it cost, not what you said. Anthropic does not use this data to train its models. In Settings, "What Mimo knows about you" shows what it remembers, and you can delete whatever you want.
2.4 The scanner
The photo of the product you scan is sent to the model provider to check whether it is safe in pregnancy. The result is saved on your phone; the photo does not stay on our server.
2.5 Your baby's image
Only if you tap the button to create it, a photo of you and one of dad travel, through our server, to two providers: Anthropic, which looks at your features (skin tone, hair, eyes) for the backup drawing, and the one that generates the illustration (WaveSpeed). They are used for that and nothing else: they are not published, not shared, not used to train any model and not stored on our server, except in your account's copy if you have one. The illustration is saved on your phone and, if you have an account, in its copy (see 2.1).
2.6 Your circle
If you invite someone (up to two people), we share with them:
- Your first name, your week and your due date (or the birth date), and the baby’s sex and name if you added them
- Your upcoming appointments: what they are, the day, the time and who with
- How you are each day, when you do your check-in, and the symptoms you mark. Never your answers one by one or your score
- The emergency alerts you send from Urgent symptom
So that those alerts reach them even when Mimo is closed, we keep their phone's notification code, which Apple provides for that. Each invitation works once and expires after 7 days.
2.7 Reminders and notifications
Your medication reminders, the alarm and the notice that your free trial is ending are local: your own phone schedules them and they do not go through any server. The only notifications we send are your circle's emergency alerts.
2.8 The medication email summary
It is optional and off by default. If you turn it on in Medications → Reminders, we keep your email, your medications (name, dose and schedule), your time zone and the time you want it, to send you each morning's doses. Resend delivers it. When you turn it off, or use the "Stop receiving it" link in every email, all of that is deleted from our server.
2.9 Purchases
Apple processes purchases and subscriptions. We never see or receive your card details. We use RevenueCat to know whether you have Mimo Premium and activate it on your account.
2.10 Analytics
There is no third-party analytics or advertising SDK in Mimo. The only thing we count is how much AI each person uses in the month, to apply the usage limit.
2.11 This website
This website uses no cookies and no advertising. To know how many people visit it and which pages they read, we use Vercel Web Analytics, which counts visits without cookies and without identifying you: it does not store your IP address or follow you across websites. It also keeps, in your own browser, the color you pick in «Hazla tuya» (the colors section), to show it to you next time; it never leaves your browser and is deleted when you clear the site's data. That is why we do not ask you to accept cookies. The contact form sends nothing: it opens your email app with the message written.
3. On what legal basis
Each processing activity relies on a legal basis, and what you can demand depends on it. When the basis is your consent, you can withdraw it whenever you want, without giving reasons; withdrawing it does not affect what was done before.
| What | Legal basis |
|---|---|
| Installation identifier, usage limits and subscription status | Performance of a contract (art. 6.1.b GDPR): it is the service you asked for. |
| Your Apple or Google account and your profile in it | Performance of a contract (art. 6.1.b), and only if you choose to create it. |
| The copy of what you record and its photos in your account | Your explicit consent (arts. 6.1.a and 9.2.a), and only if you choose to create the account. |
| Your chat questions and scanner photos | Performance of a contract (art. 6.1.b). |
| The health data that goes with your questions, what you share with your circle, and your emergency alerts | Your explicit consent (arts. 6.1.a and 9.2.a). See below. |
| The photos for your baby's image | Your consent (art. 6.1.a): only if you request the image. |
| The medication email summary | Your explicit consent (arts. 6.1.a and 9.2.a): only if you turn it on. |
| Purchases and subscriptions | Performance of a contract (art. 6.1.b) and legal obligation (art. 6.1.c) for what must be kept for accounting. |
| Usage limits, against fraud and abuse | Legitimate interest (art. 6.1.f): keeping the service up and fair for everyone. |
Your health data is a special category
Your pregnancy, your symptoms, your medications and how you feel are health data, and European law protects them more (art. 9 GDPR): the general rule is that they cannot be processed, and the door we use is your explicit consent, which you give when you start, by ticking the box in "Before we start". We store on our server the date and the version of this policy you accepted, so we can prove it. If the policy changes in any important way, we will ask you again in the app. That is why most of it never leaves your phone, and what does leave only serves the feature you are using. You can withdraw that consent at any time: by deleting what Mimo remembers about you, removing someone from your circle, turning off the email summary, signing out, or deleting your account.
4. Who we share it with
We do not sell or rent your data. We share it only with the providers the app needs to work, and only the minimum each one needs:
| Provider | Why | What it receives |
|---|---|---|
| Supabase | Database, files, sessions and accounts | Your identifier, your consent, your account and, if you have one, your profile and the copy of what you record with its photos, your circle, usage counters and, if you turn it on, the email summary |
| Anthropic | Chat answers and scanner analysis | Your questions with their context summary, product photos and, if you request your baby's image, the parents' photos |
| WaveSpeed | Your baby's illustration | The two photos, only if you request the image |
| Apple | Sign-in, purchases and alert notifications | Your Apple ID identifier, purchase data and the notification code |
| Sign-in, only if you choose it | Your account identifier and your email | |
| RevenueCat | Your subscription status | Your identifier and purchase data |
| Resend | Sending the email summary, only if you turn it on | Your email and the day's doses |
| Vercel | Hosting this website and counting its visits | The pages you visit, without cookies and without identifying you |
4.1 Where it is processed, and what that means in Europe
ssssstudios and several of these providers are in the United States. If you are in the European Economic Area or the United Kingdom, this means your data leaves your jurisdiction, and the law requires us to say so and explain the safeguard.
The safeguard is the standard contractual clauses approved by the European Commission, included in the data processing agreements with each provider not otherwise covered, and —where the provider is certified— the EU–U.S. Data Privacy Framework. If you want to know which mechanism covers a specific provider, write to us.
5. How long we keep it
- Your profile and the copy of what you record in your account, your circle and what you share with it: while you use the app, or until you delete them.
- Your consent: as long as you have an account or identifier, so we can prove you gave it.
- Invitations: 7 days, or until used.
- AI usage counters: reset every month.
- Email summary: until you turn it off.
- What you send to the AI and to the illustration generator: not stored on our server outside your account's copy.
6. Your rights
You can access your data, correct it, delete it, object to its processing and ask for a portable copy. In the European Union and the United Kingdom the GDPR guarantees it; in Brazil, the LGPD; in California, the CCPA/CPRA (see section 7). The most direct way is inside the app: Settings → Delete my account. For anything else, write to support@ssssstudios.com.
What exactly happens when you delete your account
Everything the server associates with you is removed: your profile, the copy of what you record and its photos, your consent, your circle and invitations, what you shared with it, your alerts, usage counters, the email summary, and the link with Apple or Google (we revoke Apple's access). On your phone, everything the app stores is deleted. It cannot be undone.
What you bought does not disappear: it lives in your Apple ID, not here, and comes back with "Restore purchase" if you reinstall. Deleting your account is not a refund.
If you have an active subscription, cancel it first. Apple manages it and it cannot be cancelled from the app: if you delete your account without cancelling, you will keep being charged. Do it in iPhone or iPad Settings → your name → Subscriptions.
If you think we are not complying
Write to us first, it is the fastest way. But you do not have to: you have the right to complain directly to the supervisory authority in your country (art. 77 GDPR). In the UK it is the ICO; in Brazil, the ANPD; the EU authorities are listed by the European Data Protection Board.
7. If you are in California
We do not sell or share your personal information, in the sense of the law (CCPA/CPRA): we do not give it to anyone for anything of value, nor hand it over for advertising. We do not do it today and did not in the previous twelve months, including for minors under 16. That is why you will not find a "Do Not Sell or Share My Personal Information" button: there would be nothing to turn off.
The categories we collect, with the law's names: identifiers (your installation's and, if you have one, your Apple or Google account's, and your email), commercial information (your subscription), app activity (AI usage counters), content (what you ask Mimo and the photos you send) and sensitive personal information: your health data. Where it comes from, what it is used for and who receives it is in sections 2, 3 and 4.
You have the right to know what we collect and get a copy, to delete and correct it, to limit the use of sensitive information (we use it only for the features you use), and not to be treated differently for exercising these rights. To exercise them: Settings → Delete my account, or write to support@ssssstudios.com, yourself or through an authorized agent. We verify it is you with your identifier or account, without asking for any new data.
8. Children
Mimo is not directed at children under 13 and we do not knowingly collect data from children. If you believe a minor in your care gave us data, write to us and we will delete it.
9. Security
All traffic between the app and our servers is encrypted over HTTPS. The database only lets each person read their own data, and access is restricted to what is needed to run the service. No system is infallible: if a breach affecting you ever happened, we would tell you.
10. Health data and your doctor
Mimo is not a medical device and does not replace your doctor. The data you record is yours and we treat it as what it is: sensitive information.
11. Changes to this policy
If we change how we handle your data, we update this page and the date above. When the change is substantial, we also tell you inside the app before it happens.
12. Contact
Write to support@ssssstudios.com. This policy is governed by the laws of the State of Delaware, United States.