Privacy Policy

Last updated: 31 July 2026

This policy explains what personal data Miav collects, why we collect it, who we share it with, and what you can do about it. We have tried to write it in plain language rather than legalese.

1. Who is responsible for your data

Miav is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS] ("Miav", "we", "us"). We are the data controller for the personal data described here. You can reach us at [CONTACT EMAIL].

2. What we collect

Information you give us

• Account details — your email address, username and password. Passwords are stored only as a salted hash; nobody at Miav can read your password.
• Profile information — display name, biography, avatar image, and any optional details such as country or language you choose to add.
• Content you create — posts, 24-hour stories, comments, chat messages, room and live-stream activity, and any photos or video you upload.
• Reports you submit — when you report content or a user, we keep the report, what it referred to, and any note you added.

Information created as you use Miav

• Your social graph — who you follow, who follows you, and who you have blocked.
• Wallet and purchases — your coin balance and a permanent, append-only record of every transaction (purchases, gifts sent and received, unlocks). We keep this ledger because it is financial history; it is never edited or deleted in place.
• Approximate location — we look up the rough country your connection comes from using your IP address. We do not request or use your device's precise GPS location.
• Push notification token — an anonymous device identifier that lets us deliver notifications, if you allow them.
• Safety and moderation records — if you are warned, restricted, suspended or banned, we record the action, the reason, and who took it.

3. Why we use it

• To provide the service — to run your account, deliver your messages, show your feed, and connect your calls and streams.
• To keep Miav safe — to investigate reports, enforce our Terms, and act against spam, harassment and illegal content.
• To handle payments — to credit coins you buy and to record gifts.
• To communicate with you — service emails such as confirming your address or resetting your password, and push notifications you have opted into.
• To meet legal obligations — including keeping financial records and responding to lawful requests.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers that make Miav work:

• Supabase — hosts our database, file storage and authentication. All of your account data and content lives here.
• Cloudflare — serves the website and app to your browser.
• Agora — carries real-time audio and video for calls and live streams while they are happening.
• Google Firebase — delivers push notifications.
• RevenueCat and the relevant app store — process coin purchases and subscriptions.
• ipapi.co — resolves your IP address to an approximate country.

We may also disclose data where the law requires it, or where it is necessary to protect the safety of our users.

5. What other people can see

Miav is a social app, so some data is public by design. Your username, display name, avatar, biography and public posts can be seen by anyone using Miav. Private messages are visible to the people in the conversation. Media you lock or send as view-once is restricted as you specify. Staff moderators can access content that has been reported to them.

6. How long we keep it

We keep your account data for as long as your account exists. Stories are removed automatically 24 hours after posting. When you delete your account (section 8) we remove your profile and content. Two things outlive deletion: financial ledger entries, which we must keep for accounting and fraud-prevention purposes, and safety records of serious enforcement actions, which we keep to stop a banned user simply making a new account. Both are kept in a form that is separated from your public profile.

7. Security

Data is encrypted in transit. Access to production data is restricted to staff who need it, protected by mandatory two-factor authentication, and every administrative action against a user account is written to an audit log at the moment it happens.

8. Your rights and choices

• Access and correction — you can view and edit your profile in the app at any time.
• Deactivation — you can temporarily deactivate your account and reactivate it later by signing back in.
• Deletion — you can permanently delete your account and its content. See how to delete your account.
• Notifications — you can turn push notifications off in the app or in your device settings.
• Depending on where you live, you may also have the right to a copy of your data, to object to certain processing, or to complain to your local data-protection authority. Contact us at [CONTACT EMAIL] to exercise any of these.

9. Children

Miav is not intended for children under [MINIMUM AGE], and we do not knowingly collect data from them. If you believe a child has created an account, please contact us and we will remove it.

10. International transfers

Our service providers operate globally, so your data may be processed outside your own country. [TO COMPLETE: name the transfer safeguard relied on — e.g. Standard Contractual Clauses — once the operating entity and hosting region are fixed.]

11. Changes to this policy

If we change this policy materially we will update the date above and notify you in the app before the change takes effect.

Questions about this policy? Write to [CONTACT EMAIL], or see our support page.