Privacy Policy
Welcome to Mivory. Protecting your privacy is our top priority. This Privacy Policy outlines how we collect, use, and protect your information in compliance with:
- Canada: PIPEDA & Law 25 (Quebec)
- United States: CCPA/CPRA, COPPA, and other applicable state privacy laws
- European Union: General Data Protection Regulation (GDPR)
1. Information We Collect
- Personal Information: Email, username, and details provided during registration.
- Usage Data: Interactions with the app, including saved bookmarks, collections, and visited pages.
- Device Data: Operating system and device model.
- Cookies & Tracking Data: Analytics tools like PostHog.
2. How We Use Your Information
- To provide, maintain, and improve our services.
- To personalize your experience and enhance functionality.
- To send updates, notifications, and security alerts.
- To comply with legal and regulatory obligations.
3. Your Rights
You have the right to:
- Access and review your personal data.
- Request corrections or deletions.
- Withdraw consent for data collection.
4. Data Storage and Security
We implement industry-standard security measures, including encryption and access controls, to protect your personal data. Our infrastructure partners are SOC 2 compliant, ensuring that data is handled with the highest security and privacy standards.
While we take all reasonable measures to secure your information, no online platform is completely risk-free. We recommend users take precautions such as using strong passwords and enabling two-factor authentication where possible.
5. Data Retention
We retain personal data only as long as necessary. If you delete your account, your data will be removed within 30 days unless required for legal or fraud prevention purposes.
6. Third-Party Services
We integrate with third-party services like:
- Supabase: Authentication & database (U.S. servers).
- PostHog: Analytics for app improvements.
7. Cookies & Tracking
We do not use any 3rd party cookies. We use cookies for authentication and functionality purposes. All data tracking is anonymized and aggregated for analytics purposes only.
8. International Data Transfers
We retain personal data only as long as necessary. If you delete your account, your data will be removed within 30 days unless required for legal or fraud prevention purposes.
If you are located in the European Union (EU), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to object to data collection.
Quebec Users (Law 25 Compliance): We apply security measures comparable to Canadian standards.
9. Age Restrictions
Our services are intended for users aged 13 and older. If we discover a child under 13 has provided personal data, we will delete their personal data in compliance with COPPA.
10. Updates to This Policy
We may update this policy periodically. Changes will be communicated via in-app notifications or email.
11. Contact Us
If you have questions or wish to exercise your rights, contact us at:
Last updated: April 2025
