This notice is written for you if you use Miki from India. It says in plain words what personal data Miki keeps, what each piece is used for, who receives it, how long it stays, and how to say no, take your consent back, use your rights or complain. The Privacy Policy has more detail on how the app works and covers other countries too; if the two ever differ for a person in India, this notice is the one to follow.
Miki is published by Ajit Bhandary, who decides why and how your data is used. You can reach us at privacy@getmiki.app.
You are asked to agree where the law asks us to ask. For things you do yourself (adding a trip, uploading a booking, sending a message) we use the data only for that purpose.
| Your data | What we use it for | Who receives it | How long | Your choice |
|---|---|---|---|---|
| Email address, name, and your password (kept scrambled, never readable). With Apple or Google sign-in, the name and email they share | Create your account, sign you in, send sign-in codes and account emails | Supabase (database and sign-in, Japan); Resend (email, United States) | Until you delete your account | Delete your account in the app |
| Username, profile photo, country, and that you confirmed your age (which minimum and when, never your date of birth) | Show your profile to other people as you choose; apply the age rule (18 or over in India); show a flag | Other Miki users, as the Privacy Policy describes; Supabase | Until you delete your account | Change in Settings, or delete your account |
| Trips, itinerary, bookings, documents and screenshots you upload (and each file's name) | Build and keep your itinerary, read your uploads, keep it in step across your devices | Supabase; Anthropic (the AI provider, United States) reads uploads and messages once you have agreed; people you invite to the trip; the activity places go to LocationIQ as place names only | Documents are removed after the trip ends; the rest until you delete the trip or your account | Delete a trip or document, or your account; switch off AI features |
| Your chats with Miki, reminders you set | Answer you and remind you | Supabase; Anthropic (after you agree) | Chats are deleted after 90 days of inactivity; reminders until you delete them or your account | Delete a chat; switch off AI features in Settings |
| "What Miki remembers": the preference notes you type or confirm. For people aged 18 or over only | Tailor Miki's answers to you | Anthropic, sent with your chat messages while the switch is on; never shown to other people | Until you delete the note or your account | You say Yes to each suggestion; switch it off or delete notes in Settings |
| Your location, when you use Miki chat with location on | Suggest real places near you, work out the country for emergency numbers, and (for the lead of a trip about to start or under way) tell us only whether you are near the trip's destination: a yes or no, never where you are | Overpass (OpenStreetMap places lookup) | Not kept as a history; the yes or no is replaced each time and deleted with the trip | Switch location off in your phone's settings |
| A device token, device type and time zone | Send notifications you allowed (trip alerts, reminders, invitations); never marketing | Expo, then Apple or Google to deliver them | Until you sign out, the token stops working, or you delete your account | Switch notifications off in your phone's settings |
| Trips you publish, follows, comments, wall posts, private chat messages, blocks | Run the social features you use. The places in a trip you publish, without your name and only when the published trips of at least two different travellers to the same place share them, also help Miki suggest ideas to other travellers (you can switch this off in Settings > Privacy > Your choices) | Other Miki users as you choose (a private account limits who sees what); Supabase; Anthropic, only as that anonymous summary | Until you delete them or your account | Delete the item, set your account to Private, block, or delete your account |
| Trip links and requests to join a trip | Let a trip's lead bring people onto the trip: the lead sees your name and Miki handle when you ask to join and approves or declines | The trip's lead; Supabase | A link: 7 days from the last time it was shared, then deleted 30 days later. A request: while it waits, then 30 days after it is answered; or until the trip or your account is deleted | Don't ask to join; the link expires by itself; delete the trip or your account |
| Your approximate position, when you ask Miki for places near you (typed in the Miki box) | Find the best matches around where you are (restaurants, bars, attractions, a pharmacy, a hospital and so on) with a web search, and answer in the chat. Your phone sends its approximate position right now (to about 1 km) and the name of the area (district, city and country) with that one message only | Supabase; Anthropic (the AI provider, United States), once you have agreed to AI features, searches the web for it. We do not store the position. a search is never passed on to anyone else: Miki no longer tells the people who follow you what you looked for | The answer stays in your chat history for 90 days, and the latest answer for each search stays on your phone until you ask the same thing again or sign out | Switch location off in your phone's settings, do not ask about nearby places, or switch off AI features |
| The names of places Miki mentions in a chat answer or a drafted plan | Show a free picture of the place where Wikipedia has one, with who made it and its licence | Wikipedia and Wikimedia Commons (Wikimedia Foundation), which receive only the place's name and area from Miki's server, never anything about you. Your phone then loads the picture from Wikimedia's servers, so Wikimedia can see your device's network address | We store nothing: the picture address is kept in the app's memory while it is open | Do not ask Miki about places, or switch off AI features |
| Your approximate position, when you tap a category on the Nearby tab (restaurants, attractions, pharmacy, forex, ATM, emergency services) | Show the places of that kind nearest to you, with a rating, price band, whether they are open, the distance, a photo and directions. Your phone sends its approximate position right now (rounded to about 100 m) with that one search | Supabase, and Google (Places and Maps), which finds the places, with your approximate position, and later supplies each place's photo from its own servers, so Google can see your device's network address; the directions icon opens Google Maps. We do not store the position or the results; only Google's ID for a place is kept | The results stay in the app's memory while it is open and are asked for again after 15 minutes. Google place IDs are kept for a few weeks | Switch location off in your phone's settings, or do not tap the thumbnails |
| Followers nearby, if you switch it on for a trip (18 or over) | Show your name, photo and the date your trip ends to people you follow who follow you back and have a trip within about 50 km at the same time. It is never your phone's location | Those followers | Until your trip ends | Your Yes for each trip; switch it off for the trip at any time |
| Payments you record between travellers on a shared trip (amount, who, when, optional screenshot) | Work out who owes whom. Miki never moves money | People on the trip see the amounts; only the two people in a payment see the screenshot | With the trip; orphaned screenshots are removed within about two days | Reopen a payment, or delete the trip or your account |
| The activities you tick when you tap Find booking links | Search the web for sellers and show you up to three links. Obvious personal details are removed first | Anthropic; Supabase | While the plan exists | Delete the plan or activity; switch off AI features |
| A daily "opened the app" record, and counts of the screens and features you use | Count how many people use Miki and decide what to improve. Anyone reading them sees totals only | Supabase | Up to 400 days | Off until you turn it on: the privacy choices screen after sign-in, or Settings → Privacy (Share anonymous usage statistics) |
| Crash and error details from your phone, only if you turn it on (what failed and where, the device type), never trip content, messages or documents. Errors on our own servers are logged separately to keep Miki running and secure | Find and fix problems | Sentry (European Union) | About 30 days | Off until you turn it on (Send crash reports in Settings → Privacy) |
| A travel persona Miki suggests from your trips and chats | Tailor what you see | Supabase; Anthropic (after you agree) | Until it is replaced, you turn the suggestion off and choose to delete it, or you delete your account | Off until you turn on Suggest a travel persona; turning it off offers to delete it |
| The network address of a sign-up request | Stop automated and abusive sign-ups | Supabase; Cloudflare's security check if one is shown | A few hours | Not optional: it protects every account |
| A privacy request or complaint you send (what you write, your account email, the kind of request, when we received it and when we answered) | Answer you, and show that we answered on time | Resend delivers the email to us; Supabase | One year after the request is closed. The words you wrote, your email and our answer are removed if you delete your account; only the kind and the dates stay until then | You decide whether to send one |
| Feedback and reports you send, with your account email | Reply to you and act on reports | Resend delivers them to us | A closed report is deleted 12 months after it was filed | Delete your account |
You can use any of these in the app: Settings → Privacy → Privacy requests & complaints. We confirm by email, the request shows in the app with the date we will answer by, and our answer appears there too. You can also write to privacy@getmiki.app.
We may need to check it is really you before we act. If you give false information or pretend to be someone else, the Act may treat that as a breach of your own duties.
You can complain to the Data Protection Board of India. The Act asks you to raise the complaint with us first and wait for our answer. The Board's complaint process was not open when this notice was written; we will add where to send it here when it is published.
In India a person under 18 is a child under the Act. Miki asks every person in India to confirm they are 18 or over and does not collect a parent's consent, so it is not for people under 18. If you think a child is using Miki, write to us and we will delete the account.
If you would like this notice in Hindi or another Indian language, write to privacy@getmiki.app and we will provide it. If we change what we do with your data in a way that matters, we will tell you in the app and, where the Act needs your consent, ask again. The version number at the top changes each time.