Legal

Privacy Policy

Last updated: September 6, 2026

This policy explains what personal data Mimusa collects, why, and what rights you have over it. It's written to be accurate to how the app actually works today, not generic template language.

Who's responsible for your data

Mimusa (mimusa.app) is the data controller for the personal data described here. Mimusa is operated by Julián Ballén.

Contact for anything privacy-related: support@mimusa.app.

What we collect

  • Account data: your email and password (Supabase handles authentication; we never see or store your raw password), or your name, email, and profile photo if you sign up with Google.
  • Profile: an optional profile photo you upload.
  • Content you upload: photos of your garments, photos you save as style inspiration, and any notes you add to a piece.
  • AI-derived data: category, color, season, and a short description generated automatically for each photo you upload, used to catalogue your closet and match outfits.
  • Usage data: how many pieces you've uploaded and how often you use certain features, to apply plan limits (Basic vs Essentials).
  • If you choose to share a saved look publicly in Discover, that photo and its AI-generated description become visible to other users. This is off by default and only happens per item, when you choose it.

What we use it for

  • Running the actual service: cataloguing your closet, matching pieces to looks you save, showing you what to wear.
  • Authenticating you and keeping your account secure.
  • Applying the limits and features of your plan.
  • Automated moderation: every photo you upload (garments and inspiration alike) is screened for policy violations before it's stored, and reports on anything shared publicly in Discover are reviewed the same way.

We don't use your data for advertising, and we don't sell it to anyone.

Legal basis for processing

  • Performance of a contract: processing needed to actually give you the service you signed up for (cataloguing, matching).
  • Consent: for signing in with Google, and for sharing any item publicly in Discover.
  • Legitimate interest: account security, abuse prevention, automated content moderation, and responding to content reports. For content shared publicly in Discover, repeated genuine policy violations are logged against your account and may lead to it being limited.

Who we share it with

We use a small number of processors to run the service. Each only receives what it needs to do its specific job:

  • Supabase: database, file storage, and authentication. Hosted in the EU (eu-west-3, Paris).
  • Anthropic (Claude): analyzes photos you upload to identify what they are (category, color, season, description).
  • OpenAI: turns those descriptions into vector embeddings so we can match similar pieces and looks.
  • Photoroom: if you choose "Clean it up for me" when uploading a piece, that photo is sent to Photoroom to remove the background.
  • Google: only if you choose to sign in with Google.
  • Apple, via RevenueCat: on iOS, Essentials subscriptions are purchased and billed through Apple's in-app purchase system; RevenueCat syncs the resulting subscription status to Mimusa so your plan updates. Apple, not Mimusa, handles your payment details. Not yet active as of this policy's date; nothing is billed today.

Some of these providers are based in the US. Where that applies, transfers are covered by Standard Contractual Clauses as required under GDPR.

How we use AI, and what it does to your photos

Mimusa uses AI for three things: automatically classifying garment and inspiration photos you upload, removing the background from a photo if you ask it to, and matching pieces in your closet against looks you've saved. This is automated. No one manually reviews your photos as part of the normal product experience.

None of these features generate photos from scratch or create synthetic ("deepfake"-style) imagery. The AI only analyzes or edits real photos you upload yourself.

How long we keep your data

For as long as your account is active. If you delete your account (Account, then Cuenta, then Delete account), we permanently remove your uploaded photos from storage and delete your account and all associated data immediately. This isn't a soft delete or a grace period.

Your rights

You can access, correct, export, restrict, or object to the processing of your data, and you can delete your account and data at any time. Deletion is self-service today (Account, then Cuenta, then Delete account); for anything else, email support@mimusa.app and we'll handle it directly.

If you're in the EU, you also have the right to lodge a complaint with your local data protection authority. In Spain, that's the Agencia Española de Protección de Datos (AEPD).

Cookies

We only use strictly necessary cookies: keeping you signed in, and remembering your language preference. We don't use analytics, advertising, or tracking cookies of any kind. Unlike most sites, we don't show you a cookie consent banner, because none of our cookies legally require one.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top and, for significant changes, notify you directly.