Effective Date: May 26, 2026
Last Updated: November 5, 2026
Overview
Medina Apps LLC ("we," "us," or "our") built míto as a voice-based AI companion app for iOS. This Privacy Policy explains what data we collect, why we collect it, how it is used and stored, and your rights regarding that data.
By using míto, you agree to the practices described in this policy.
Special Disclosure: Data Shared with Google Gemini for AI Voice Features
This section provides the specific disclosures required when an app shares personal data with a third-party AI service.
míto’s core feature is real-time spoken conversations with AI characters. To deliver this, we must send certain data to Google’s Gemini API only after you have given explicit permission.
What data is sent to the third party and how we collect it
- Live voice audio: When you start a call (and only after you have given explicit consent in the app), the app collects audio directly from your device’s microphone and streams it in real time over an encrypted connection to Google’s Gemini models. This allows the character to hear you and respond with natural voice. The audio stream is active only for the duration of the call.
- Conversation content (text): Your speech and the character’s replies are transcribed to text by Google’s Gemini service during the call. These transcripts are used to generate the AI’s responses in real time, and (after calls longer than ~30 seconds) to create memory summaries so characters can remember prior conversations with you.
We do not store raw audio recordings on our servers or on your device after the call ends.
We do retain the following in your account, under your control:
- Conversation transcripts — the text of what you and the character said, stored so you can read past conversations in the Messages tab. We keep only the most recent portion of each conversation (currently the latest 300 exchanges per character); older entries are discarded automatically.
- Memory summaries and a character memory profile — short AI-generated notes about your conversations, including personal details you chose to share (for example, that you mentioned a new job or an upcoming event), so a character can refer back to them naturally in later calls.
All of the above is stored against your account, is deleted when you use Clear Memory or delete your account, and is never sold or used for advertising.
Who the data is sent to
- Google LLC (via the Gemini API / Generative Language API).
- Data is processed on Google’s infrastructure solely to provide the voice AI and memory features to you.
- Google acts as a service provider / processor and processes the data in accordance with its published Gemini API Terms and privacy policy, which include commitments to protect the data.
When and how we obtain your permission
We obtain your explicit, informed consent in the app before any voice or conversation data is transmitted to Google.
- New users see a dedicated “Voice AI Processing” consent screen at the end of onboarding. You must actively toggle your agreement and tap “I Agree & Continue”.
- Existing users are shown the same consent screen before they can start any voice call (and on first launch after this requirement was added).
- The consent screen clearly explains what data is sent, that it is sent to Google’s Gemini service, and the purpose.
- You may decline. If you do, you will not be able to use voice call features (other parts of the app remain available).
- Microphone permission (the iOS system prompt) is separate from this AI data processing consent.
- You can review the consent disclosure again at any time in the app under Settings > Legal > AI Voice Data Processing (Consent).
Full details on what data we collect, how we collect it, all uses, and third parties also appear in the sections below.
1. Data We Collect
1.1 Data You Provide
| Data | When Collected | Purpose |
|---|---|---|
| Name and email address | If you sign in with Google or Apple | Account identification and recovery |
| Character names, backstories, descriptions | When you create characters | Character functionality |
| Voice audio (microphone input) | During active calls only (only after you provide explicit consent in the app) | Real-time AI conversation processing via Google Gemini (see Special Disclosure section above) |
1.2 Data Collected Automatically
| Data | Source | Purpose |
|---|---|---|
| User ID (Firebase UID) | Created when you sign in with Apple or Google | Linking your data across sessions and devices |
| Push notification token | If you allow notifications | Sending notifications you asked for, such as when a friend joins with your invite |
| Invite records (your invite code, who invited you, whether the reward was earned) | When you use or share an invite code | Paying invite rewards and preventing abuse |
| Clipboard check (only for a Míto invite link) | Once, after a new account signs in. iOS asks your permission if there's a link to read | Claiming your invite automatically. Anything else on your clipboard is ignored and never stored or sent |
| Apple DeviceCheck status (a yes/no flag held by Apple, not your identity or device identifier) | When you redeem an invite code | Limiting each device to one invite reward |
| Conversation transcripts | Transcribed during each call | Letting you read past conversations; input to memory summaries |
| Conversation history summaries | Generated after each call | Memory and continuity between sessions |
| Character memory profile | Updated after each call | Long-term memory of details you shared, so characters can refer back to them |
| Relationship progress (XP, level, unlocks) | Accrued during calls | Relationship progression features |
| Credits balance and transaction history | In-app purchases and usage | Billing and usage enforcement |
| Seconds of call time used | During calls | Trial limits and credit deduction |
| App open events and screen views | Session activity | Product analytics |
| Crash reports and error logs | On app crash or error | Stability and debugging |
| Device and OS version | On launch | Compatibility and debugging |
1.3 Data We Do NOT Collect
- We do not store raw audio recordings of your voice
- We do not send voice or conversation data to Google (or any third party) without your explicit consent (see Special Disclosure section above)
- We do not sell your data to third parties
- We do not collect precise location data
- We do not track you across other apps or websites unless you tap Allow on Apple's tracking prompt (see Advertising Measurement below)
- We do not collect payment card details (handled entirely by Apple)
2. How We Use Your Data
- To provide the service — process voice input (sent to Google’s Gemini API only after you give explicit consent — see Special Disclosure section above), generate AI responses, maintain conversation memory, and track relationship progression
- To manage your account — authenticate you through Apple or Google and restore your data on new devices
- To process purchases — verify subscriptions and credit purchases through RevenueCat and Apple
- To improve the App — analyze usage patterns, diagnose crashes, and understand how features are used
- To send notifications — deliver re-engagement push notifications (you can opt out at any time in iOS Settings)
- To enforce our Terms — detect abuse, enforce usage limits, and protect other users
3. Voice and Conversation Data
See the Special Disclosure: Data Shared with Google Gemini for AI Voice Features section above for the complete required information on what voice and conversation data is sent, to whom (Google), how we obtain your explicit permission before sending it, how the data is collected, and all uses.
Microphone
míto requests microphone access to capture your voice during calls. When you have provided the required in-app consent, audio is streamed in real time to Google’s Gemini API for processing.
We do not store raw audio recordings.
Microphone access is only active while a call is in progress and can be revoked at any time in iOS Settings.
Conversation Transcripts
During a call, Google’s Gemini service transcribes both your speech and the character’s replies to text. We store these transcripts in Firestore under your user ID so you can read past conversations in the Messages tab.
We retain only the most recent portion of each conversation — currently the latest 300 exchanges per character. Older entries are automatically discarded.
Conversation Summaries and Character Memory
After each call (≥ ~30 seconds), we use the Gemini API to generate a brief text summary of the conversation. That summary is then merged into a character memory profile — a short, continuously updated record of what a given character knows about you.
This profile may contain personal details you chose to mention during a conversation (for example, your job, your plans, or something you said was worrying you). It exists so characters can refer back to those things naturally instead of starting over each call.
Summaries and profiles are stored in Firestore under your user ID. They are never sold, never used for advertising, and are not used to train any AI model.
You can delete all memories with a character at any time via the Clear Memory option in the Messages tab (or by deleting your account).
4. Third-Party Services
míto relies on the following third-party providers. Each processes data under their own privacy policies, which we encourage you to review.
For the Google Gemini API, we obtain your explicit consent in the app before sending any voice audio or conversation data, as fully described in the Special Disclosure section at the top of this policy.
Google Firebase
- Services used: Authentication, Firestore (database), Analytics, Crashlytics
- Data processed: User ID, account data, conversation transcripts and summaries, analytics events, crash logs
- Privacy policy: https://firebase.google.com/support/privacy
Google Gemini API
- Services used: Real-time voice conversation (live bidirectional audio via Gemini Live API) and text generation (for character responses and memory summarization)
- Data processed (sent to Google): Live microphone audio stream (your voice) during active calls and text content of the conversation for response generation and post-call memory summaries — only after you provide explicit consent via the in-app consent screen. See the Special Disclosure section above for full details on what is sent, when, how consent is obtained, and the purposes.
- Recipient & processor: Google LLC. Data is processed under Google’s Gemini API terms and privacy policy. Google provides protections in accordance with its published privacy commitments and applicable data protection laws.
- Consent: Explicit user consent is obtained in the app (see Special Disclosure section) before any data is transmitted.
- Privacy policy / terms: https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy
AI Character Portraits (Google Gemini and OpenAI)
- Services used: Generating an AI portrait when you create a character and choose an AI-generated image
- Data processed: The character details you entered for the portrait — name, archetype, gender and appearance description, plus the chosen visual style. No voice audio, conversation content, account details or photos you upload are sent.
- Recipients & processors: Google LLC (Gemini image models). If Google's image service is unavailable, the same character details are sent to OpenAI, L.L.C. (OpenAI image API) as a backup so your portrait can still be created.
- Privacy policies / terms: https://ai.google.dev/gemini-api/terms, https://openai.com/policies/privacy-policy and https://openai.com/policies/business-terms
RevenueCat
- Services used: Subscription and in-app purchase management
- Data processed: User ID, purchase receipts, subscription status
- Privacy policy: https://www.revenuecat.com/privacy
Apple
- Services used: App distribution, billing, Sign in with Apple
- Data processed: Payment information, Apple ID (if used to sign in)
- Privacy policy: https://www.apple.com/legal/privacy
Advertising Measurement (Meta, TikTok, Apple Search Ads)
We advertise Míto on Meta (Facebook and Instagram), TikTok and Apple Search Ads, and measure which ads lead to installs and subscriptions.
- What is shared: that the app was installed or opened, that onboarding was completed, that a paywall was shown, that a first call was made, that a first relationship level was unlocked, that a character was shared, and subscription events (trial started, subscribed, renewed) sent by RevenueCat. With your permission, your device's advertising identifier (IDFA) is included.
- Your choice: iOS asks whether Míto may track you. If you choose Ask App Not to Track, no advertising identifier is shared and only aggregated, anonymous attribution provided by Apple (SKAdNetwork and Apple Search Ads attribution) is used. You can change this any time in Settings › Privacy & Security › Tracking.
- What is never shared: your voice, your conversations, transcripts, character memories or anything you say to a character.
- Privacy policies: https://www.facebook.com/privacy/policy · https://www.tiktok.com/legal/privacy-policy · https://www.apple.com/legal/privacy
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account and user data | Until you delete your account |
| Conversation transcripts | Most recent 300 exchanges per character; older entries discarded automatically. Removed entirely when you use “Clear Memory” or delete your account |
| Conversation summaries and character memory profiles | Until you use “Clear Memory” or delete your account |
| Analytics events | 14 months (Google Firebase default) |
| Crash logs | 90 days (Firebase Crashlytics default) |
| Subscription records | As required by Apple / RevenueCat |
When you delete your account through Profile > Settings > Delete Account, we permanently delete all Firestore data associated with your UID, including conversation history, memories, relationship data, and credits.
Your Firebase Authentication record is also deleted.
This action cannot be undone.
6. Push Notifications
We may send push notifications to re-engage you with the App (e.g., “Your companion is waiting”).
We request permission before sending notifications.
You can withdraw permission at any time in:
iOS Settings > Notifications > míto
We do not send marketing emails or SMS messages.
7. Children’s Privacy (COPPA)
míto is intended for adults aged 18 and over and is not directed to children.
We do not knowingly collect personal information from children under 13.
If we become aware that a user is under 18, we will immediately delete their account and associated data.
If you believe your child has used míto and provided personal information, please contact us at:
8. Your Rights
All Users
- Access — You can view your data within the App (credits, call time, character data)
- Deletion — You can delete all your data by deleting your account in Profile > Settings > Delete Account
- Opt out of notifications — Manage in iOS Settings at any time
European Users (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights including:
- The right to access, correct, or erase your personal data
- The right to restrict or object to processing
- The right to data portability
- The right to lodge a complaint with your local supervisory authority
To exercise these rights, contact us at:
We will respond within 30 days.
California Users (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used
- Request deletion of your personal information
- Opt out of the sale of your personal information (we do not sell personal data)
- Non-discrimination for exercising your privacy rights
To submit a CCPA request, contact:
9. Data Security
We implement industry-standard security measures to protect your data, including:
- Firebase Security Rules restricting data access to the account that owns it
- Data transmission encrypted via TLS
- No storage of raw audio recordings
- Sign-in through Apple or Google only — míto never handles or stores a password
- Firebase App Check, which verifies that requests to our backend come from a genuine copy of the app
No method of electronic transmission or storage is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
10. Data Transfers
Your data may be processed and stored on servers located in the United States and other countries where Google and RevenueCat operate.
By using míto, you consent to the transfer of your data to these locations.
Where required by law, we ensure appropriate safeguards are in place for international data transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
We will notify you of material changes by updating the “Last Updated” date at the top of this document and, where appropriate, through an in-app notice.
Your continued use of the App after any changes take effect constitutes acceptance of the updated policy.
12. Contact
For privacy questions, data requests, or concerns:
Email: info@valethero.org
Company: Medina Apps LLC
App: míto
We aim to respond to all privacy-related inquiries within 30 business days.