Privacy Policy

1. Data we collect

• Account data: email address, and the identifier Apple or Google gives us when you sign in with them; authentication events.
• Purchase data: the coin packs and subscriptions you buy, their price, currency and transaction identifiers, and your coin balance and history. Card and bank details are collected by the payment provider (Whop, Apple or Google) — we never see or store full card numbers.
• Usage data: the series and episodes you watch or listen to, playback progress, episodes you unlock, free episodes and rewards you receive, and how you use the paywall and the Rewards screen.
• Device and technical data: IP address, device model, operating system, app version, a random identifier we store in a cookie on the website, the push notification token when you allow notifications, and — in the apps, only where your device settings allow it — the device's advertising identifier (IDFA on iPhone, Advertising ID on Android).

2. Why we process it

• To provide the Service: your account, the episodes you unlock, your coins, subscriptions and rewards (performance of a contract).
• To process payments through Whop, the Apple App Store or Google Play (performance of a contract).
• To show optional rewarded ads in the apps that earn you coins, and to verify that an ad was watched before coins are credited (performance of a contract; advertising personalisation only as described in section 6).
• To measure which of our ads bring people to Mivius and to improve the Service (legitimate interest, or your consent where the law requires it).
• To keep the Service secure and prevent fraud (legitimate interest).
• To comply with legal obligations, such as tax and accounting records for purchases (legal obligation).

3. Who we share it with

We share personal data with the following providers, each for the purpose given:

• Whop Inc. — checkout and payment processing on the website.
• Apple Inc. and Google LLC — in-app purchases, sign-in with Apple or Google, and push notifications.
• Supabase, Inc. — database, authentication, and file storage.
• Railway Corporation and Cloudflare, Inc. — application hosting and network delivery.
• Google LLC (AdMob) — the rewarded ads in the apps (see section 6).
• AppsFlyer Ltd. — measuring which ads led to an app install, a sign-up or a purchase.
• Meta Platforms, Inc., Snap Inc. and Google LLC (Google Ads) — advertising measurement on the website and for our ad campaigns (pixels and server-to-server events).
• Microsoft Corporation (Clarity) — usage analytics and session recordings on the website.

We do not sell personal data for money. Some of the advertising uses above may count as "selling" or "sharing" under certain US state laws; section 7 explains how to opt out. Some of these providers may transfer data outside the EU/EEA; where they do, they rely on the EU Standard Contractual Clauses or an equivalent safeguard.

4. Retention

We keep account, coin and purchase data for as long as your account is active, plus the period required by French accounting and tax law after closure (generally up to 10 years for billing records). You can delete your account at any time from Settings in the app or at mivius.com/delete-account; billing records we are legally required to keep are retained in anonymised or restricted form.

5. Your rights

Under the GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to certain processing. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or your local supervisory authority.

6. Cookies, advertising and rewarded ads

On the website we use cookies strictly necessary to keep you signed in and operate the Service, and advertising and analytics technologies from Meta, Snap, Google and Microsoft to measure our ad campaigns and understand how the site is used. Some events (such as account creation and purchases) are also sent to Meta and Snap server-to-server; identifying details such as your email address are hashed before they reach any advertising partner.

The apps can show you an optional ad in exchange for coins. These ads are served by Google AdMob, which receives your device's IP address, device and app information, and — where you allow it — its advertising identifier, to deliver and measure the ad and, unless you opt out, to personalise it. We pass AdMob a random ticket and your account identifier so that Google can confirm to us that the ad was watched; your email is never sent. On iPhone the advertising identifier is only used if you allow tracking when the app asks. You can learn how Google uses this data at policies.google.com/technologies/partner-sites.

7. Your US state privacy rights

If you live in a US state with a consumer privacy law (such as California), you can ask to know, correct or delete the personal data we hold about you, and you can opt out of the "sale" or "sharing" of your personal data and of targeted advertising. In the app, turn on Settings → Do not sell or share my data: ads you watch for coins are then requested with Google's restricted data processing and are not personalised. For anything else, email [email protected]. We will not treat you differently for using these rights.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

9. Contact

Data controller: SARL EROKADS, 5 rue Pleyel, Bureau 3, 93200 Saint-Denis, France — [email protected].