Privacy should feel simple, too.

1. Who we are

Mimlo is operated by Nibble Audio, Inc. (“Mimlo,” “we,” “our,” or “us”). This Privacy Policy applies to the Mimlo iOS app, website, and related services.

Nibble Audio, Inc. is located at 1209 Orange Street, Wilmington, Delaware 19801, United States.

2. Information we collect

Information you give us

• Account information. When you use Sign in with Apple, we receive an Apple account identifier and, if you choose to share them, your name and relay email address.
• Profile information. Your display name, optional profile picture, and generated profile color.
• Age eligibility. Before sign-in, the app asks whether you are under 16 or at least 16. It stores only an eligibility confirmation on that device, not your birthday.
• Friends and invitations. Your invite code, friend requests, friend connections, and related activity.
• Your Mimlos. Text, drawings, colors, photos, and other content you create, plus the people you choose to send it to.
• Messages to us. Information you include when you contact support, report a problem, or make a privacy request.

Information collected as the service operates

• Delivery information. Push notification tokens, Live Activity tokens, content identifiers, delivery state, and timestamps needed to deliver and update a Mimlo.
• Device and diagnostics. App version, device and operating system information, language, crash data, and limited security or performance logs.
• Website information. IP address, browser type, requested pages, and similar server logs. We do not use the website for targeted advertising.

Mimlo does not require access to your phone contacts or your phone number to add friends.

3. How we use information

We use information to:

• create and maintain your account and profile;
• help people exchange and accept friend requests;
• store, deliver, display, and update Mimlos and Live Activities;
• send transactional notifications about requests, content, account activity, and service changes;
• provide support and respond to your requests;
• protect people, investigate abuse, secure the service, and prevent fraud;
• debug, analyze, and improve reliability, accessibility, and performance; and
• comply with law and enforce our Terms.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

4. When we disclose information

We disclose information only as needed in these situations:

• To the people you choose. Friends can see your display name, profile image, and content you send them. A person holding your high-entropy private invite link can see a limited preview of your display name, profile image, and profile color before deciding whether to send a request. Five-letter codes are resolved only for signed-in users through protected server functions.
• On the recipient’s Lock Screen. A Mimlo, your display name, and your profile image may be visible without the recipient unlocking their iPhone. People near or holding that device may therefore see them.
• Service providers. We use vendors that host data, store media, deliver notifications, monitor reliability, and host the website. These currently include Google Firebase/Google Cloud, Apple and APNs, and Vercel. They process information for us under their own contractual and security obligations.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or defend legal claims.
• Business changes. Information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.
• With your direction. We may disclose information when you ask us to or give us permission.

5. Legal bases in Europe and the UK

Where applicable, we use the following legal bases:

• Contract. We process account, profile, friendship, Mimlo content, device, and delivery information to create your account and provide the friend, history, notification, and Live Activity features you request.
• Legitimate interests. We use limited logs, diagnostics, reports, and relationship information to secure and troubleshoot Mimlo, prevent abuse, respond to support, and improve reliability. We balance those interests against your rights.
• Consent. We rely on your choices for optional device permissions and any processing for which law requires consent. You may withdraw consent in the app or iOS settings without affecting earlier processing.
• Legal obligations and claims. We process the minimum information needed to comply with law, respond to valid process, and establish, exercise, or defend legal claims.

6. Retention

We keep account and profile information while your account is active; friendship and block records while the relationship or safety need remains; pending friend requests for 14 days; operational delivery and retry records for up to 30 days; and viewable Mimlo history and its media for up to 90 days after delivery. Invite links remain active until you rotate or disable them, or you delete your account.

When you delete your account, we disable it promptly and target deletion or de-identification of information tied to it from active systems within 30 days. Limited records may remain where required for security, fraud prevention, dispute resolution, or law. Residual copies may remain temporarily in provider backup systems, isolated from ordinary product use, until those systems overwrite them. Content already delivered to another person’s device may remain there until it expires or they remove it.

In-app deletion revokes Mimlo’s Sign in with Apple authorization, stops future delivery, and clears Mimlo’s shared media cache on the deleting device. Signing out also clears that local cache. A recipient may have made a screenshot or other copy that Mimlo cannot control.

7. Your choices and rights

• Update your display name and profile picture in Mimlo’s settings.
• Rotate or disable your private invite link.
• Control notification and Live Activity permissions in iOS Settings.
• Remove friends or stop using an invitation.
• Delete your account in the app or follow the steps on our account deletion page.

Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a copy of your personal information, or object to certain processing. You may appeal a decision or complain to your local data protection authority. We may need to verify your identity before completing a request.

To exercise a privacy right, email privacy@mimlo.app.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and encryption in transit. No online service is completely secure, so please use a secure device and tell us if you suspect unauthorized access.

9. International transfers

Mimlo’s primary Firestore profile, friendship, and delivery records use Google’s nam5 United States multi-region. Profile images and Mimlo media use Cloud Storage in US-CENTRAL1 (Iowa). Firebase Authentication, other Firebase and Google support systems, Apple/APNs, and Vercel may process information in the United States and other countries where they or their providers operate.

Where required, we use a recognized transfer mechanism, such as applicable standard contractual clauses, and assess protections for transferred information. We do not promise that all processing remains in one state, country, or region.

10. Children

Mimlo is currently for people who are at least 16. The app asks for age eligibility before Sign in with Apple and does not permit an under-16 user to create an account. We do not knowingly collect personal information from children under 16. Contact us if you believe a child created an account despite this control.

11. Changes to this policy

We may update this policy as Mimlo changes. We will update the effective date and provide additional notice in the app when a change materially affects your rights.

12. Contact us

Questions or requests can be sent to Nibble Audio, Inc. at privacy@mimlo.app. For product help, visit Mimlo Support.