Privacy policy of the Mimi app

1. Who the data controller is

The controller of the personal data processed in connection with the Mimi app is Codentra Sp. z o.o., with its registered office in Świdnica, NIP 9571129766.

Privacy contact: hello@codentra.pl.

2. Data sent to Anthropic (the Claude model)

In order to understand a command, Mimi sends to Anthropic's API (api.anthropic.com) the content of your command — typed or converted from speech to text — the context of the last few utterances in the conversation, and the current date and time, so that “tomorrow” or “in two hours” are understood correctly.

If the command concerns a specific person or place, that context may include the data necessary to carry it out: the name and phone number of the contact found, the recipient's email address, the name of the destination or your approximate location. The scope is limited to what is needed to execute the command.

Requests are sent on your own Anthropic API key, which you create and enter in the app yourself. You settle payments with Anthropic directly, and your data is subject to Anthropic's privacy policy and terms. Codentra has no access to the content of your requests or to your Anthropic account.

3. Speech recognition

Speech-to-text conversion is performed by the speech recognition built into iOS. Depending on your settings and the capabilities of the device, it happens on the device or on Apple's servers. Mimi does not store audio recordings.

In Mimi's Settings you can turn on the “On-device speech recognition only” option — the recording then does not leave the phone. Listening for the wake word (“Mimi”, “hey Mimi”) always runs on the device only.

4. Data that does not leave the device

The following data is processed locally only and is not sent anywhere:

• Health and activity data from the Health app (steps, heart rate, calories burned, workouts). Readings are shown and read out loud on the device only; they do not go to the language model or anywhere else.
• Notes saved in Mimi — stored in the app's local database.
• Photos — Mimi opens the camera or the system photo library; images are not transmitted to anyone.
• Files and PDF documents created by Mimi — they stay in the app's directory on the device.
• The API key, the Telegram bot token and Twilio credentials — stored in the device's Keychain, protected by iOS, with no copying to other devices.

5. Data passed to other services at your command

If you use these features, Mimi passes data directly to the services you designate yourself:

• Telegram (a subscription feature) — the message content and the chat identifier go to the Telegram Bot API, on your own bot token.
• Calls and text messages through Twilio (an optional feature, for advanced users) — the destination number and the message content go to Twilio, on an account belonging to you. Codentra is not an intermediary in the call or in its billing.
• Text messages, iMessages and emails sent without these features go through the standard iOS system sheets — Mimi only fills them in, and you confirm the sending.

6. What Mimi does not do

• does not collect analytics data and contains no third-party libraries for analytics or advertising
• does not track you across apps or websites
• does not display ads
• does not sell or share data for marketing purposes
• does not build a user profile and does not make automated decisions producing legal effects

7. Legal basis and your rights (GDPR)

Processing takes place in order to perform the function you ask for — the basis is the performance of a contract (Article 6(1)(b) GDPR) and, as regards passing the content of a command to Anthropic, your consent (Article 6(1)(a) GDPR), given on first launch of the app. You can withdraw that consent at any time by deleting the API key in Settings or by uninstalling Mimi.

You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability and to object. Because Codentra does not store your data, you exercise these rights yourself on the device. That is what Mimi Settings → Your data → “Delete all Mimi data” is for: a single command erases the conversation history, all notes, settings and the API key and tokens from the Keychain. Uninstalling the app alone does not remove Keychain entries, which is why this option exists separately.

For matters concerning data on the side of Anthropic, Telegram or Twilio, turn to those entities respectively. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

8. Transfers of data outside the EEA

Anthropic, Telegram and Twilio process data on servers outside the European Economic Area, including in the United States. The transfer takes place on the basis of the mechanisms provided for by those entities in their own terms. If you do not want the content of your commands to leave the EEA, do not use Mimi — without access to the language model the app will not understand commands.

9. Retention period

Codentra does not store data, so it sets no retention period for it. Data on the device stays there until you delete it. The conversation history lives only until the app is closed, and you can clear it with the bin icon. Notes, settings and keys are erased by the “Delete all Mimi data” option in Settings. Retention periods on the side of Anthropic, Telegram and Twilio are set by their own policies.

10. Children

Mimi is not directed at children under 13 and does not knowingly collect their data.

11. Changes to this policy

We will announce material changes in the update notes in the App Store and through the update date at the top of this document.