Privacy Policy
Updated October 14, 2026
This policy explains how the Mimi app and the mimi-app.com.br website handle your personal data, under Brazil’s General Data Protection Law (Law 13,709/2018, the LGPD). The data controller is XISTO EMPREENDIMENTOS DIGITAIS LTDA - ME (CNPJ 65.338.562/0001-95), a company registered in Brazil. For anything about privacy, including reaching our data protection officer, write to contato@mimi-app.com.br.
1. Data we collect
- Account: your email and, if you give it, your name. When you sign in with Apple or Google, we receive from them your account identifier, your email and, if available, your name and profile photo. We also keep your sign-in sessions (to keep you signed in).
- Dog profile: name, sex, birth date or approximate age, breed, weight, size, whether neutered, activity level, body condition score, health conditions, allergies, sensitivities, medications, supplements, diet type, meals per day, goal, the weight range your vet recommends (if you enter it) and the photo (if you add one).
- Diary: meals, treats, water, stool (consistency and signs such as blood or mucus), weight, notes, photos and the time of each entry.
- App usage: the foods you look up each day (for the free plan’s limits) and the foods you suggest to us. Searches with no result are counted in aggregate, without identifying you.
- Subscription: if you subscribe to Mimi Premium, we receive from the App Store the plan, the dates, the renewal and the status of the subscription. We never receive your card details: Apple handles the payment.
- Technical data: as with any internet service, our providers log IP addresses and request data for a few days, for security and to run the service.
Mimi shows no ads and uses no third-party tracking or analytics tools.
2. What we use it for, and the legal basis
- Providing the service (performance of a contract, art. 7, V): creating and keeping your account, storing the profile and the diary, tailoring the answers about food and showing your dog’s progress.
- Sending your sign-in code by email (performance of a contract).
- Managing your Mimi Premium subscription (performance of a contract).
- Security and abuse prevention, such as limiting code attempts (legitimate interest, art. 7, IX).
- Improving the content, from searches with no result and from suggestions (legitimate interest).
- Meeting legal obligations (art. 7, II).
Notifications (such as the daily tip) are scheduled on your own device, with your permission, and you can turn them off at any time in the app’s Settings.
3. Who we share it with
We don’t sell your data. We share only what’s needed with the providers that run the service for us:
- Cloudflare: hosting, database and photo storage.
- Resend: sending the email with your sign-in code.
- Apple: Sign in with Apple and App Store purchases.
- Google: Sign in with Google, if you choose it.
We may also share data when the law requires it or when ordered by a competent authority.
4. International transfers
The data is stored on servers outside Brazil, mainly in the United States. These transfers follow art. 33 of the LGPD, with providers that offer adequate safeguards.
5. How long we keep it
- For as long as your account exists.
- When you delete your account, we delete the account, your dogs, the diary and the photos. Food suggestions you sent stay with no link to you.
- Sign-in codes are valid for 10 minutes and are deleted within a day.
- Ended or expired sessions are kept for 60 days, to detect misuse of an old sign-in, and then deleted.
- The foods looked up each day (the free plan’s limits) are deleted after 3 days.
- We may keep some data for as long as the law requires.
6. Your rights
Under the LGPD (art. 18), you can:
- confirm that we process your data and access it;
- correct incomplete or outdated data, right in the app;
- take your data with you: in the app, under Settings → Export my data;
- delete your account and your data: in the app, under Settings → Delete Account;
- know who we share it with and withdraw consent;
- complain to Brazil’s National Data Protection Authority (ANPD).
For any request, write to contato@mimi-app.com.br.
7. Security
Connections are encrypted (HTTPS). Sign-in codes and sessions are stored irreversibly (hashed), and photos sit in private storage, reachable only through signed, short-lived links. No system is completely secure; if a significant incident happens, we’ll notify you and the ANPD as the law requires.
8. Children
Mimi is made for adult dog owners and isn’t directed at children. We don’t knowingly collect data from minors.
9. Changes to this policy
If we change this policy, we’ll update the date at the top and, for important changes, let you know in the app.