Privacy policy

This explains what Mimic collects, why, and who it is shared with. In short: we keep only what we need to run your account and your builds, we don't show ads, and we don't sell your data.

What we collect

• Your account: you sign in with your Flodit account (flodit.com). Flodit tells Mimic your email address, your Flodit account ID and whether you signed in with Google. Mimic doesn't store a password.
• What you build: the links and descriptions you give, your screenshots, the builds Mimic makes and your chat with it. These are saved to your account so you can come back to them. Screen recordings are turned into a few still pictures in your browser; the video itself isn't uploaded.
• Credits and plans: your plan, when it renews, and how many credits each build used.
• Payments: Dodo Payments handles your card or UPI details; we never see them. We receive the payment and customer IDs, what you bought and whether it went through.
• Technical: one cookie that keeps you signed in. Our hosting keeps normal server logs (such as IP address and browser) for security and fixing problems. We don't use advertising or tracking cookies.

Who it's shared with

Only the companies that help run Mimic, and only for that:

• Anthropic (Claude): your description, pictures and the current build are sent to make and change your build.
• Vercel hosts the website, and Neon hosts the database.
• Flodit (flodit.com) handles signing in; your Flodit account is covered by Flodit's own privacy policy.
• Resend sends the emails with your codes.
• Dodo Payments takes payments and handles tax on them.

When you give a link, our server opens that public page to read it, the same way a visitor's browser would. We may also share data if the law requires it.

If you use your own AI

If you connect your own AI key, it is kept in your browser, not in our database. Requests go from your browser to that AI provider. When a provider doesn't accept requests straight from a browser, they pass through our server on the way, without being stored or logged. That provider's own privacy policy applies to what you send it.

Inside your builds

Previews run in your browser. Anything saved inside a preview (for example items in a to-do app you built) stays in your browser.

How long we keep it

• Your account and builds are kept while your account is open. Deleting a build from the home page removes it from our database.
• To delete your whole account, email us at support@flodit.com. We delete your account and builds within 30 days. Payment records may be kept for as long as tax law requires.

Your rights

You can ask to see, correct or delete your personal data, including under India's Digital Personal Data Protection Act, 2023. To do that, email us at support@flodit.com.

Keeping it safe

Everything travels over HTTPS, sign-ins from Flodit use signed one-time passes, and the sign-in cookie can't be read by scripts on the page. No system is perfectly secure, but we work to protect your data.

Children

Mimic isn't meant for anyone under 18 without a parent or guardian's permission.

Changes

We may update this policy. The date at the top shows the latest version, and we'll email you about important changes.