Privacy Policy
Mimovo ("the Service") lets you create an original AI-generated character and insert it into short videos you upload. This policy explains what data we process, why, with whom it is shared and how you can delete it. It applies to the website and the mobile apps.
1. Data we collect
| Data | Why | Kept |
|---|---|---|
| E-mail address | To sign you in (one-time codes) and to answer support requests. No password is stored. | Until you delete your account. |
| Content you upload: photos, selfies, video clips | To generate characters and videos at your request. If you choose "Make a character of myself", the photos you upload show your face and are used only to create your character. | In your sessions until you delete the session or your account. |
| Generated content: character images, character sheets, videos, and the text description of your character | To show your results, to let you reuse a saved character in later videos. | Until you delete them or your account. |
| Chat with the assistant | To carry out your instructions and keep context within a session. | Until you delete the session or your account. |
| Token balance and transaction history | To run your account, credit purchases and show what was spent. | Account data until deletion; anonymised purchase records for the period required by tax and accounting law (up to 10 years). |
| Technical data: IP address, request timestamps, device/browser type, error logs | Security, abuse prevention (rate limits), fixing failures. | Server logs: up to 30 days. |
We do not use advertising or tracking SDKs, do not sell personal data and do not profile you for advertising.
2. Third parties that process your content
Generation is performed by AI providers acting as our processors. Your uploaded and generated content (and the instructions we write for the models, which may contain the description of your character) is sent to them only to produce your results:
- fal.ai — image generation and background removal (privacy policy).
- OpenAI — the assistant that guides you and writes generation instructions; it receives your chat messages and reduced previews of your images (privacy policy).
- Higgsfield AI — video generation; receives your source clip and your character's images (privacy policy).
- Paddle.com Market Ltd — sells token packs on the website as Merchant of Record and processes the payment; Paddle receives your e-mail, country and payment details under its own privacy policy; we receive the order confirmation and never your card details.
- Apple App Store / Google Play — process payments in the mobile apps; we receive only the purchase confirmation, never your card details.
- Amazon Web Services (EU, Frankfurt) — hosting and e-mail delivery of sign-in codes.
Some providers process data outside your country, including in the United States. For users in the EU, UK and Switzerland such transfers rely on the providers' standard contractual clauses or an adequacy decision (for example the EU–US Data Privacy Framework where the provider is certified).
3. Your face and other people
You may create a character with your own face. You must not upload photos or videos of other identifiable people without their permission, nor of minors. We do not use face data for identification or for training models. Face data is processed only to generate the content you request and is deleted together with your sessions.
4. Legal basis (EU/UK users)
Performance of our contract with you (providing the Service), our legitimate interests (security, abuse prevention, improving reliability), our legal obligations (accounting) and your consent where required (processing of your facial images, which you give by choosing "Make a character of myself" and can withdraw by deleting the session or your account).
5. Your rights
You can access, export or correct your data and delete your account at any time: in the app via Delete account, on the web via the same button, or through this page. Deletion removes your e-mail, sessions, uploads, characters and chats; anonymised purchase records are kept for accounting. You may also lodge a complaint with your data-protection authority.
6. Children
The Service is for adults (18+). We do not knowingly collect data from children; if you believe a minor has created an account, contact us and we will delete it.
7. Security
Data is transmitted over HTTPS, sign-in uses one-time codes, your files are accessible only to your account, API keys are kept on our servers only. No system is perfectly secure; tell us immediately if you suspect misuse of your account.
8. Changes
We will post changes here and update the date above; material changes are announced in the app.