Mimi

Privacy Policy

Mimi: Sleep Pet with Friends

Last updated: November 2, 2026

Mimi is a sleep-accountability game. It reads how long you slept, turns that into a little character (“Mimi”), and lets you compare your sleep with a small group of friends you choose. This policy explains exactly what data Mimi handles and why.

What we collect

• Sleep from Apple Health (HealthKit), read-only. Mimi reads recent sleep-analysis samples to work out how many hours you slept each night. The raw Health samples stay on your device; only figures worked out from them leave it (last night’s total and your streak), and only with your consent (see below). Mimi never writes to Health.
• Your nickname. A display name you choose. No real name, email, or password is required.
• An anonymous account identifier. Mimi signs you in anonymously (via Supabase Auth), which creates a random account tied to your device. There is no username or password.
• Your sleep summary. Last night’s hours, the date of that night, whether you told Mimi about it yourself, your streak, and your character’s state, so friends can see where you stand.
• What Mimi is wearing, if you have Mimi Plus and have dressed her.
• Which steps of Mimi’s first run you reached, including whether you started Mimi Plus or made an invite, plus the app version and the time, linked to your anonymous account and sent only once you’ve given consent, so we can tell whether the first run is working. Never a sleep figure, and never your answers.
• Your group. Which group you belong to and when you joined, and any invite codes you create — including when each was used and by whom.
• Nudges you send and receive. A nudge is one of three fixed reactions (“go to bed”, “nice night”, “rough one”) sent between members of your group. Mimi records who sent which one to whom, when, and whether it has been seen. There is no free text — you cannot type a message to another user anywhere in Mimi.
• A push notification token, if you allow notifications, so a friend’s nudge can reach your device. It identifies the device, not you.
• A record of your consent to sharing your sleep summary with your group.
• Technical information. When the app connects to our server, our hosting provider records standard details such as your IP address, the app and device information your phone sends with each request, and when you signed in. These are used to keep the service secure and running, and are not used to track you. If you have chosen to share analytics with app developers in iOS Settings, Apple may also send us anonymous crash reports.

On your device. Mimi keeps your nickname, your consent, your bedtime and reminder times, your answer about what’s hardest at bedtime, the nights you told her about, your cookies and what you’ve bought for Mimi’s room, whether you have Mimi Plus, your rest days, and your character’s current state (including the hours and date of the last night it counted) on your iPhone, so the app keeps working without a connection. Your bedtime answer, and the times you tell her you fell asleep and woke, stay on your iPhone; for a night you tell her, your group gets the hours and the word “logged”. Like any app’s data, these are included in your iPhone’s backups if you have backups turned on.

Your room, on your account. Since 1.3 Mimi also keeps a copy of your cookies, what’s in Mimi’s room and what she’s wearing with your anonymous account on our server, including which cookie packs you have bought, so a reinstall gets them back. Only you can read that copy: it is not shared with your group or anyone else, and it goes when you delete your data. Friends do see the outfit itself, as above.

Purchases and Mimi Plus. These are handled by Apple, and Mimi never sees your payment details. Whether you have Mimi Plus is read from Apple on your iPhone and is not stored on our server. If you start a free trial, the reminder before it ends is a notification set on your iPhone.

We do not collect your name, email address, phone number, contacts, precise location, or advertising identifiers.

How we use and share it

• Your data is stored by our backend provider, Supabase, in a PostgreSQL database hosted in the United States — not in iCloud. It is encrypted in transit and at rest.
• Group members can see your nickname, last night’s hours, which night they’re from, whether you told Mimi about it yourself, your streak, your character’s state, and what she’s wearing. People outside your group cannot. Access is enforced in the database itself, row by row, for every request.
• Nudges are visible only to the two people involved — the sender and the recipient. Other members of the group cannot see them. Your nickname appears in the notification the recipient gets.
• Your push token is never shared with other users. It is read only by Mimi’s own server when it needs to deliver a nudge to you, and is passed to Apple’s push notification service for that delivery.
• We use your data only to provide Mimi’s features and to tell whether her first run is working. We never use your sleep data to decide when to show you an offer. We share it with no one else — no advertisers, data brokers, or analytics vendors — and we never sell it. The only outside services involved are Supabase (our database, sign-in, and server) and Apple (Health on your device, and push notifications).

HealthKit-specific commitments

In line with Apple’s requirements, data obtained through HealthKit:

• is used only to provide the app’s sleep features;
• is never used for advertising, marketing, or data-mining;
• is never sold or disclosed to third parties (your chosen group is not a third party in this sense — it’s the feature you opted into);
• is never stored in iCloud by Mimi.

Consent and your choices

• Before any sleep-derived value leaves your device, Mimi asks you to opt in. The steps of her first run wait for that too.
• You can turn off Mimi’s access to Health at any time in iOS Settings → Privacy & Security → Health → Mimi. Mimi then stops reading new nights.
• Leaving your group (gear → Leave group) stops sharing your summary with its members.
• Deleting your data (gear → Delete my data) withdraws your consent completely and removes everything we hold about you.

Data retention and deletion

• We keep your data for as long as you have an account, and delete it when you ask.
• Gear → Delete my data permanently removes your account, your profile and sleep summary, what Mimi was wearing, your group memberships, the invite codes you created, the nudges you sent and received, your push token, your saved room and cookies, and the record of your first-run steps. Cookies you bought go with it. If you own a group, it carries on under its longest-standing remaining member; your data leaves with you.
• Deleting your data does not cancel Mimi Plus. Apple handles your subscription, so cancel it in Settings → your name → Subscriptions. Collections you bought come back with Restore purchases.
• Deleting the app does not delete your account or the data on our server — use Delete my data first. Reinstalling Mimi on the same iPhone may reconnect you to the same account.
• Deleted data may remain in our hosting provider’s backups for a limited time before it is overwritten.
• We may also delete accounts that have been inactive for a long time.

Children

Mimi is not directed to children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy; the “Last updated” date above will change accordingly.

Contact

derkwho@gmail.com

Questions about this policy or your data — that address reaches us.