Privacy Policy

Last updated: August 25, 2026

Your trust matters to us. This Privacy Policy explains what information Mikci collects, how we use it, and the choices you have. We collect only what we need to run the Service, and we never sell your personal data. Sensitive account content is encrypted at rest in our database, and connections use HTTPS.

1. Information we collect

• Account information — your name, email address, password (stored only as a secure hash), optional profile avatar, invite codes used at signup, optional MFA settings, and your Mikci Personality preference (how Mikci's letters sound).
• Content you create — letters and Promises, and Promise responses.
• Financial activity — when you connect through Plaid, Mikci stores the transaction and account metadata needed to learn your spending rhythm, propose Promises, and evaluate ones you accept. Mikci does not store your bank login credentials.
• Sample activity — if you explore with Demo Mode, Mikci may show fictional sample transactions, bills, and payday in the app. Sample activity is not your personal financial information, is not stored as Plaid transactions, and is never mixed with real connected activity.
• Support messages — when you contact Mikci Support, we store your ticket subject, category, conversation messages, optional screenshot attachments, and a small privacy-safe technical snapshot (such as app version, client type, and connection status). We do not include raw transaction history or balances in support tickets.
• Notifications — web push subscription details for your device/browser when you enable push, plus your notification preference toggles.
• Usage & device data — limited technical information (such as approximate location for optional weather, browser type, and event logs) used to operate and secure the Service.

2. How we use information

• To provide, personalize, and improve the Service.
• To style Mikci letter and message wording according to your chosen Mikci Personality. Personality does not change Promise evaluation.
• To observe connected financial activity via Plaid (or fictional sample activity while you explore) so Mikci can notice changes and evaluate Promises you accept.
• To generate personalized letter text using limited Promise and letter context when needed to operate the Service.
• To send transactional emails and optional push notifications when a Promise letter or result is ready.
• To protect the Service against fraud, abuse, and security threats.

3. Legal bases for processing

Where the GDPR applies, we process your data based on your consent (e.g., optional weather location, push notifications, and marketing emails), the performance of our contract with you (providing the Service), our legitimate interests (security, improvement,), and legal obligations.

4. Sharing & third parties

We do not sell your personal data. We share data with trusted service providers who help us operate Mikci, such as our hosting and database provider, optional personalized-writing provider, and email delivery provider. Limited Promise or letter context may be processed by our writing provider to generate personalized letter text. Push notifications are delivered using browser push infrastructure. These providers process data only on our instructions and under appropriate safeguards.

5. Data retention

We keep your data for as long as your account is active. When you delete your account, we permanently remove your personal data, uploaded files, except where limited retention is required by law or for legitimate security purposes.

6. Security & what our team can see

We protect your data with encryption at rest for sensitive fields in our database, secure transport (HTTPS), access controls, anti-CSRF protection, rate limiting, and audit logging. No system is perfectly secure, but we take safeguarding your information seriously.

7. Children

Mikci is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact support@mikci.com and we will remove it.

8. Your choices

You can edit your profile, change your Mikci Personality, manage email and push preferences, export your data, and delete your account at any time from within Mikci.

9. Contact

For privacy questions or requests, email support@mikci.com.