Privacy Policy

Last updated: August 25, 2026

Your trust matters to us. This Privacy Policy explains what information Mikci collects, how we use it, and the choices you have. We collect only what we need to run the Service, and we never sell your personal data. Sensitive account content is encrypted at rest in our database, and connections use HTTPS.

1. Information we collect

• Account information — your name, email address, password (stored only as a secure hash), optional profile avatar, invite codes used at signup, optional MFA settings, and your Mikci Personality preference (how Mikci's letters sound).
• Content you create — letters, Promises, memories, and Moments content (captions, optional photos, likes, and notes/comments).
• Financial activity — when you connect through Plaid, Mikci stores the transaction and account metadata needed to learn your spending rhythm, propose Promises, and evaluate ones you accept. Mikci does not store your bank login credentials.
• Sample activity — if you explore with Demo Mode, Mikci may show fictional sample transactions, bills, and payday in the app. Sample activity is not your personal financial information, is not stored as Plaid transactions, and is never mixed with real connected activity.
• Support messages — when you contact Mikci Support, we store your ticket subject, category, conversation messages, optional screenshot attachments, and a small privacy-safe technical snapshot (such as app version, client type, and connection status). We do not include raw transaction history or balances in support tickets.
• Moments preferences — choices such as anonymous posting and what you include in a shared Moment.
• Reports & moderation data — report reasons and details you submit about Moments posts, and admin review actions.
• Notifications — web push subscription details for your device/browser when you enable push, plus your notification preference toggles (including Moments notes).
• Usage & device data — limited technical information (such as approximate location for optional weather, browser type, and event logs) used to operate and secure the Service.

2. How we use information

• To provide, personalize, and improve the Service.
• To style Mikci letter and message wording according to your chosen Mikci Personality. Personality does not change Promise evaluation.
• To operate Moments, including showing content you choose to share to other signed-in users.
• To observe connected financial activity via Plaid (or fictional sample activity while you explore) so Mikci can notice changes and evaluate Promises you accept.
• To generate personalized letter text using limited Promise and letter context when needed to operate the Service.
• To send transactional and reminder emails you have enabled, and optional push notifications (including when someone leaves a note on your Moment — the notification may include a short preview of that note).
• To review reports and moderate Moments content.
• To protect the Service against fraud, abuse, and security threats.

3. Legal bases for processing

Where the GDPR applies, we process your data based on your consent (e.g., optional weather location, push notifications, and marketing emails), the performance of our contract with you (providing the Service, including Moments if you use it), our legitimate interests (security, improvement, and moderation), and legal obligations.

4. Sharing & third parties

We do not sell your personal data. Content you choose to share on Moments is visible to other Mikci users as described in the Terms. We share data with trusted service providers who help us operate Mikci, such as our hosting and database provider, optional personalized-writing provider, and email delivery provider. Limited Promise or letter context may be processed by our writing provider to generate personalized letter text. Push notifications are delivered using browser push infrastructure. These providers process data only on our instructions and under appropriate safeguards.

5. Data retention

We keep your data for as long as your account is active. When you delete your account, we permanently remove your personal data, Moments posts, notes, likes, reports, and uploaded files, except where limited retention is required by law or for legitimate security purposes.

6. Security & what our team can see

We protect your data with encryption at rest for sensitive fields in our database, secure transport (HTTPS), access controls, anti-CSRF protection, rate limiting, and audit logging. No system is perfectly secure, but we take safeguarding your information seriously.

Your private letters, Promise results, memories, and other personal app data are encrypted at rest and are not available to our team as a casual content feed. For community safety, authorized Mikci admins may review Moments content (posts, photos, notes/comments, and reports) — solely for moderation, abuse prevention, and support. We do not sell your personal data.

7. Children

Mikci is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact support@mikci.com and we will remove it.

8. Your choices

You can edit your profile, change your Mikci Personality, manage email and push preferences (including Moments notes), edit or remove your Moments posts and notes, export your data, and delete your account at any time from within Mikci. Anonymous Moments posts hide your display name from other users, but we still associate the post with your account for safety and moderation.

9. Contact

For privacy questions or requests, email support@mikci.com.