Privacy Policy

Last updated September 24, 2026.

Data we collect

Miminic stores account identifiers, your sign-in email and profile name, optional profile image, couple membership, home planning address and coordinates, preferences, saved places, planned and completed dates, ratings, notes you enter, invite status, and optional Google Calendar connection state.

How we use data

We use this data to authenticate you, generate date-night suggestions, sync optional calendar events, import optional past date history, support partner invites, and keep your shared planning space working.

Your linked partner can see shared planning preferences, saved places and notes, scheduled and imported dates, and ratings. Pending Calendar import candidates are private to the importing account until accepted; your partner cannot access your Calendar credentials or browse your calendars through Miminic.

Google Sign-In and Sign in with Apple provide account authentication.
Google Cloud hosts and processes application data, including retained Calendar import candidates and shared history.
Google Maps Platform receives location and place queries to find venues, resolve Calendar event locations, display maps and photos, and calculate travel times.
Google Calendar receives the date-night details needed to create or update events when you enable sync. A partner invitation may share those event details through Calendar.
Gemini can receive your search query, selected preferences, approximate planning area and public venue information to help research and rank recommendations. Calendar matching itself is rules-based, as described below.
Postmark receives the recipient email and invitation information needed to deliver a partner invitation you request.

We use these services to provide Miminic's features, not to sell personal data or use it for third-party advertising. Requests sent to an external service are subject to that service's applicable privacy protections.

Calendar data

Calendar access is optional and separate from signing in. Calendar sync creates and updates date-night events you schedule in Miminic on your primary Google Calendar. It does not edit unrelated events.

Past-date import runs only when you choose Scan Google Calendar. It checks a bounded set of events from the last 24 months across your readable, non-hidden calendars, including calendars shared by your partner. We read titles, locations, start/end times, event identifiers and status, and temporarily compare attendee email addresses with your linked partner. We do not request event descriptions or attachments.

Clearly matched dates become shared couple history. Uncertain candidates stay private until you import them. We retain candidate snapshots and imported dates, not a copy of your calendar; skipped event contents and attendee addresses are not retained. Import never writes to Google Calendar.

Calendar matching is rules-based. Event titles, schedules, attendee details and full calendar contents are not sent to generative AI. Imported venues and ratings you add can inform personalized restaurant recommendations. Calendar access is not used for advertising.

Miminic does not use data obtained through Google Workspace APIs, including Google Calendar, to develop, improve, or train generalized or non-personalized AI or machine-learning models. Miminic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect your data

These safeguards protect sensitive information, including Google account and Calendar data, home locations, preferences, ratings and notes:

Encryption in transit: production app-to-server and Google API communications use HTTPS/TLS. The production database requires encrypted connections and is reached over a private network rather than a public database address.
Encryption at rest: Google Cloud encrypts the production database and its backups at rest, including stored personal information and Calendar import snapshots.
Additional credential protection: Google Calendar OAuth refresh tokens are encrypted with Google Cloud Key Management Service (KMS) before being stored in the database. Access to the encryption key is controlled through Google Cloud IAM. Server credentials are held in Secret Manager with service-identity access controls. Miminic session credentials on iPhone and Mac are stored in the operating system's Keychain.
Access controls: the backend verifies signed-in accounts and checks couple membership for shared resources. Private Calendar import candidates are restricted to their importing account. Infrastructure and credential access is controlled by authorized identities and permissions.
Limited collection and diagnostic exposure: Calendar scanning requests limited fields and discards skipped event contents. Application logging is configured to redact authorization headers, OAuth credentials and sensitive fields such as home coordinates and notes, reducing unnecessary exposure in diagnostic records.

Miminic processes data on its servers to provide these features; this is not end-to-end encryption. No storage or transmission system can guarantee absolute security.

Retention, disconnecting and deletion

We retain account and planning data while needed to provide your account and shared planning history. Retained import candidates and imported dates remain until removed through account/data deletion; the 24-month scan window is not an automatic deletion deadline. We do not retain full scanned calendars or skipped event contents.

Disconnecting Calendar in Settings removes Miminic's stored Calendar token and stops future access through it. It does not delete previously imported history or events already on Google Calendar. You can also revoke Miminic's Google access in your Google Account connections.

You can request account deletion in the app from Settings, or email support@miminic.app from the address associated with your account. Shared couple records may remain available to the other partner; contact us to request removal of personal content from shared records or if you cannot complete deletion in the app. Deleting Miminic data does not delete copies already held in your or your partner's Google Calendar.

Encrypted recovery backups may retain earlier copies after deletion from the active database until those backups expire or are removed. Backup copies are access-restricted and used for recovery, not ongoing recommendations or advertising.

Contact

Email support@miminic.app for privacy or support requests.