Privacy Policy

Effective October 25, 2026

This Privacy Policy explains how Mimzie, Inc. ("Mimzie," "we," "us") collects, uses, and shares personal information when you use the Mimzie desktop app, the Mimzie website, Mimzie accounts and cloud sync, and related services (the "Services"). It does not cover AI agents, model providers, websites, or other third-party services you choose to use with Mimzie. Their own privacy policies apply.

1. The short version

• Your work syncs to Mimzie so you do not lose it. When you are signed in, your documents, files, chats, and related records are stored in our cloud so you can recover them, keep history, and use them on other devices.
• Your agents talk to their providers, not to us. Claude Code, Codex, Google Antigravity, and other agents you bring run on your device under your own provider account. Your prompts and files go from your device to that provider under its terms. We never receive your provider credentials.
• We use your information to run and improve Mimzie, including to develop and train models. You can ask us not to train on your content.

2. Information we collect

Account information

When you sign in, our authentication provider gives us your name, email address, a user ID, and how you signed in (for example, Google or email).

Your workspace content

When you are signed in, the Services store the following so they can sync, recover, and show your work:

• Documents, spreadsheets, presentations, and other files you add or create, including their revision history and text we extract from them so you and your agents can search and read them.
• Folders, file names, and organization.
• Chats and messages with agents, the records of each agent run (such as status, the agent and model used, progress, and results), and proposed edits and reviews.
• Sources, citations, highlights, annotations, and comments.
• Built-in browser records: open tabs, a limited history, bookmarks (including bookmarks you import from Chrome), and comments on pages.
• Device identifiers that keep each device's records separate.

Payment and usage information

If you buy a paid plan or turn on usage billing, our payment processor collects your payment details. We receive a customer ID, billing status, plan, and invoice records, not your full card number. For hosted Mimzie agent usage, we record usage metadata such as the model, token counts, cost, and time, to enforce limits and bill you.

Product analytics

Packaged versions of the app send a small set of product events, such as the app opening, sign-in and sign-out, onboarding steps, agent installation and sign-in outcomes, and agent runs starting and finishing. Events include app version, platform, and where relevant the provider and outcome. Account and installation identifiers are hashed before they are sent. Product events are designed to exclude prompts, responses, document content, file paths, and provider credentials.

Crash and error reports

When the app crashes or hits an error, it sends an error report with the error message, stack trace, app version, and platform. Before sending, we try to remove request data and redact common credentials, URLs, home folder paths, and email addresses from messages.

Information you send us

If you contact support, send feedback, or post on our feedback board, we receive what you send and your contact details.

Website

mimzie.com does not use cookies or analytics. Our hosting provider processes standard request information, such as IP address, browser, and pages requested, to serve and protect the site and app downloads.

3. What stays on your device

These are stored on your device unless a feature you use needs to send them:

• Your sign-ins and credentials for Claude Code, Codex, Google Antigravity, and other agent providers.
• Cookies and website sign-ins in the built-in browser, including sign-ins you import from Chrome.
• Dictation audio, dictation settings, your dictionary and snippets, and dictation history, which you can set to expire.
• Local working copies, recovery checkpoints, and app settings.

4. AI providers and other services you choose

Agents you bring. When you use an agent, Mimzie runs it on your device and gives it the context you select, such as the documents you attach and your messages. The agent sends that content to its provider (for example, Anthropic, OpenAI, or Google) under your account with that provider. Each provider's terms and privacy policy govern that data, including whether it is used for training. Check your settings with each provider.

Integrations. Integrations and plugins you connect through your agent's own account are managed by that provider. Mimzie stores only which integration you selected for a run, not its credentials or configuration.

The Mimzie agent. In free and bring-your-own-key modes, the Mimzie agent sends your requests to the model provider you choose, under that provider's terms. On paid Mimzie plans, Mimzie sends the information needed for each request through OpenRouter to one or more model providers. This may include your prompt, chat history, relevant document text, selected sources, and file contents you ask the agent to read. OpenRouter and each model provider have their own retention and training practices, and we cannot promise that every provider handles data the same way.

Dictation. On supported Macs, Chime transcribes and cleans up speech entirely on your device. On other systems, transcription runs on your device, and cleanup and translation are sent to the agent you choose for Chime. To clean up text, Chime may read text near your cursor in the app you are typing into. You can exclude apps from this in settings.

Academic search and the web. When you or an agent searches for sources, the search terms are sent to public scholarly services such as OpenAlex, Crossref, Semantic Scholar, and arXiv. Websites you visit in the built-in browser receive the information any browser sends, under their own policies.

5. Sensitive information

Mimzie is not designed for protected health information, government identification numbers, financial account credentials, or confidential third-party information you are not authorized to share. The Services are not HIPAA compliant. Please do not submit this information.

6. How we use information

We use personal information to:

• Provide the Services, including sign-in, sync, storage, recovery, revision history, and search.
• Process payments and enforce plan limits.
• Keep the Services secure, prevent fraud and abuse, and enforce our Terms.
• Fix bugs and understand which features are used, using product events and error reports.
• Develop and improve the Services and our other products, including training and evaluating models.
• Conduct research and create aggregated or de-identified data.
• Communicate with you about Mimzie, including product updates and offers.
• Respond to support requests and feedback, and send service messages about your account, security, billing, and changes to our terms.
• Comply with law.

7. How we share information

We may share personal information as follows.

Service providers that process data for us under contract:

Providers you choose. As described in section 4, your agents and chosen model providers receive content directly from your device or through the Mimzie agent at your direction.

Affiliates. With companies under common control with Mimzie.

Aggregated or de-identified information that cannot reasonably identify you, which we may use and share for any lawful purpose.

Legal and safety. We may disclose information if we believe in good faith it is required by law or legal process, or needed to protect the rights, safety, or property of you, Mimzie, or others, or to prevent fraud or abuse.

Business transfers. If Mimzie is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Your organization. If you use Mimzie through a school or employer arrangement, that organization may have access to information as described in its agreement with us.

With your consent or at your direction.

8. Retention

• Account information is kept while your account is active.
• Workspace content is kept until you delete it or your account. Deleted items may stay recoverable in the app for a limited period before they are removed.
• Billing records are kept as long as required for tax, accounting, and legal purposes.
• Product events, error reports, and support messages are kept as long as reasonably needed to operate and improve the Services.

We also keep information as long as we have a legitimate business need, including to resolve disputes, maintain security, and meet legal or financial obligations. We may keep aggregated or de-identified data indefinitely. Information already used to train or evaluate models may not be removable from those models. Retention can depend on backup schedules and a provider's own policy. When you delete your account, we may retain limited records when the law requires it or when needed to prevent fraud and enforce our agreements. Deleting your Mimzie account does not delete data held by AI providers you used, or working copies on your device.

9. Your choices and rights

• Your content. You can delete files, chats, and other content in the app.
• Your account. To delete your account or get a copy of your data, email info@mimzie.com.
• Model training. To ask us not to train models on your content, email info@mimzie.com. This applies to content you submit after we process your request, and not to feedback you send us or content flagged for safety or abuse review.
• Product analytics and error reports. You can turn both off in the desktop app by setting MIMZIE_TELEMETRY_ENABLED=false in its environment.
• Dictation. You can turn off dictation, set how long dictation history is kept, and exclude apps from context reading.
• Emails. You can unsubscribe from non-essential emails using the link in each message. We will still send service messages.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of the sale or sharing of personal information or targeted advertising. To exercise these rights, email info@mimzie.com. We may need to verify your identity. An authorized agent may act for you with written permission. We will respond within the time the law requires, usually 30 to 45 days. If we deny your request, you may appeal by replying to our response, and you may contact your local data protection authority or attorney general. We will not treat you differently for exercising your rights.

Legal bases (EEA, UK, and Switzerland). We process personal information to perform our contract with you (providing the Services and billing), for our legitimate interests (security, fraud prevention, fixing bugs, and developing and improving the Services, including training models), to comply with legal obligations, and with your consent where required.

10. Security

We use encryption in transit, access controls, scoped credentials, and private storage for file revisions. Provider credentials stay on your device. No system is perfectly secure. Protect your device and your account sign-in. If we learn of a breach affecting your personal information, we will notify you as the law requires.

11. International transfers

Mimzie is based in the United States, and our service providers may process information in the United States and other countries. Where required, we use safeguards such as standard contractual clauses for transfers out of the EEA, UK, and Switzerland.

12. Children

The Services are not for anyone under 18, and we do not knowingly collect personal information from them. If you believe someone under 18 has given us personal information, contact info@mimzie.com and we will delete it.

13. Changes to this policy

We may update this policy as the Services change. Changes take effect when we post them, unless we say otherwise. We will post the new effective date here and give additional notice when required by law.

14. Contact