MiMi Privacy Policy

中文版本

Effective date: July 16, 2026

MiMi is a collection database and personal collection tracker for character goods and game collectibles. This policy is prepared for App Store readiness. Review with legal counsel before public launch.

Data We Collect

Some MiMi data is stored only on the user's device. Some data is sent to the backend only when the user signs in, syncs, uploads, submits, or purchases. Some service data is generated automatically when the app accesses MiMi network services.

Data Stored Locally on the Device

When a user is not signed in and does not manually sync, upload images, submit contributions, or purchase MiMi Points, collection entries, wishlist items, photos, memories, notes, shelves, tags, and local caches generally remain on the user's device.

Data Users Actively Send or Sync

MiMi may collect and store the following data when the user uses the corresponding feature:

• Account data: Apple Sign In identifier, MiMi Trainer ID, username, display name, email address when Apple provides it, avatar, language preference, and account role.
• Cloud sync data: owned items, wishlist items, sold/archive records, shelves, groups, tags, notes, purchase details, memories, and sync metadata that the user manually uploads or restores.
• User-uploaded content: collection photos, memory photos, hang tag submissions, field correction evidence, feedback text, and related links the user submits.
• Catalog contributions: suggested aliases, item corrections, series corrections, image submissions, hang tag data, reports, and reviewer/admin action history.
• Purchase data: StoreKit product identifiers, Apple transaction identifiers, purchase environment, MiMi Points grant status, point ledger entries, and related support metadata. MiMi does not receive or store your payment card information.

Automatically Generated Service Data

When the app accesses MiMi network services, the backend may automatically log API request metadata, timestamps, error logs, backup/restore status, media delivery health, and operational logs needed to run the service, troubleshoot problems, prevent abuse, and protect accounts.

If MiMi later enables automatic cloud sync, automatic media backup, crash diagnostics, or other new features that continuously upload data, we will update this privacy policy and App Store privacy information before or when those features are enabled, and provide in-app explanation or controls as appropriate.

MiMi does not currently collect precise location, contacts, health data, payment card data, advertising identifiers, or data for third-party advertising.

How We Use Data

We use collected data to:

• Provide collection tracking, catalog browsing, search, filtering, memories, shelves, and statistics.
• Sync your collection data across your devices when you manually use cloud sync.
• Store and deliver user-uploaded images and approved catalog media.
• Review catalog corrections, hang tag submissions, reports, and community contributions.
• Process optional MiMi Points purchases and maintain the related account ledger.
• Maintain account security, enforce permissions, prevent abuse, debug service problems, and operate backups.
• Respond to support and account deletion requests.

We do not sell personal data. We do not use collected data to track you across other companies' apps or websites.

Image Hosting

MiMi stores canonical catalog images locally on the backend and may deliver catalog images through a public image hosting provider. User-uploaded photos are currently uploaded to PicUI as public media URLs. Do not upload images containing sensitive personal information.

Approved hang tag images and verified catalog media may become part of the shared catalog database. Personal collection photos and memory photos remain associated with your account data unless you explicitly submit them as catalog evidence.

Third-Party Services

MiMi currently uses:

• Apple Sign In for authentication.
• Apple StoreKit and App Store commerce for optional in-app purchases.
• PicUI for public image hosting and delivery.
• Hosting, logging, storage, and backup tools used by the backend operator.

These services process data only as needed to provide MiMi features and operate the service.

Data Retention and Deletion

Local device data remains on your device until you delete it from the app or remove the app. Cloud sync snapshots, user media manifests, and account profile data that the user actively syncs or uploads remain on the backend until you delete cloud account data or request removal.

You can request deletion of server-side account data through the in-app account deletion action or by contacting support. Deletion covers profile data, cloud collection snapshots, and user media manifest records. Public catalog contributions, approved verified records, and moderation/audit records may be retained when required for database integrity, abuse prevention, or legal reasons.

Security

MiMi uses HTTPS for remote API access in production-shaped environments, avoids exposing the database directly, and keeps database backups for recovery. No system can guarantee absolute security, so avoid uploading sensitive personal documents or private information as collection photos.

Children

MiMi is a collection management tool and is not intended to knowingly collect personal data from children. If you believe a child provided personal data, contact support so it can be reviewed and removed where appropriate.

Changes

We may update this policy as MiMi adds features such as new catalog categories, additional media providers, or production hosting. The effective date will be updated when material changes are made.

Contact

Support email: willkyu@qq.com

Support page: /MiMi/support/