Privacy Policy

1. Introduction

MIA AI Holdings Inc. (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use MIA AI (“the Service”).

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

• X account ID, username, and profile picture (via OAuth)
• Legacy username and password (for migrated accounts, stored securely hashed)
• Language preferences
• Account creation and last active timestamps

2.2 Conversation Data

• Text messages exchanged with MIA
• Voice chat transcripts (text only, audio is processed but not stored)
• X DMs and mentions with @miaaibot
• Chat metadata (timestamps, session information)

2.3 Memory & Emotion Data

• Personal memories MIA creates about you (stored privately)
• Public memories you consent to share (subject to admin approval)
• Emotion and trust metrics for your relationship with MIA
• Interaction history and patterns

2.4 Technical Data

• IP address (hashed for privacy, used for rate limiting and security)
• Browser type and version
• Device information
• Usage analytics and error logs

3. How We Use Your Information

• Provide the Service: Enable conversations, maintain memories, and personalize your experience with MIA
• Improve the Service: Analyze usage patterns to enhance features and fix issues
• Security: Detect and prevent fraud, abuse, and unauthorized access
• Communication: Send service-related notifications (we don't send marketing emails)
• Legal Compliance: Comply with applicable laws and regulations

4. Third-Party Services

We share data with the following third-party services to provide the Service:

5. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt with salt
• OAuth tokens are encrypted at rest
• All data transmission uses HTTPS/TLS encryption
• IP addresses are hashed before storage
• Access to user data is restricted and logged
• Regular security audits and bug bounty program

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

• Account data: Retained while your account is active
• Conversation history: Retained indefinitely unless you delete it
• Memories: Retained until you or we delete them
• Analytics data: Retained for 12 months
• Security logs: Retained for 90 days

Legacy accounts that are not migrated to X authentication will be deleted 30 days after the migration deadline.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (“right to be forgotten”)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain data processing activities
• Restriction: Request limited processing of your data

To exercise these rights, contact us at [email protected]

8. Children's Privacy

MIA AI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance.

11. Contact Us