Privacy Policy

Our Promise

At Mikage ("we," "our," or "us"), we understand you're sharing deeply personal thoughts and feelings with us. We take the protection of your data seriously. This Privacy Policy explains what information we collect, why we collect it, and how we protect it. We've written this in plain English because you deserve clarity.

Information We Collect

Information You Provide

• Account Information: Your name, email address, and password when you sign up
• Coaching Sessions: The text and voice conversations you have with Mikage
• Reflections & Goals: The thoughts, reflections, and goals you document
• Mood Data: How you're feeling when you start sessions (if you choose to share)
• Payment Information: Processed securely through Stripe (we never see your card numbers)

Information Collected Automatically

• Usage Data: When and how often you use Mikage, session duration
• Technical Data: Browser type, operating system, IP address (for security)
• Session Metadata: Timestamps, session types (reflection, goal-setting, etc.)

How We Use Your Information

To Provide Your Coaching Experience

• Generate personalized coaching responses based on your history
• Build and maintain your personal library of insights
• Recognize patterns in your thinking and provide relevant frameworks
• Convert text to voice (if you use voice features)

To Improve Mikage

• Understand how founders use the platform (in aggregate, anonymized)
• Fix bugs and improve performance
• Develop new features based on usage patterns

To Communicate With You

• Send account-related emails (password resets, billing)
• Notify you of important changes to our services
• Send product updates (only if you opt-in)

Who We Share Information With

Service Providers (Carefully Selected)

• Supabase: Database and authentication (encrypted storage)
• OpenAI: AI coaching responses (conversations are not used for their training)
• ElevenLabs: Voice synthesis (if you use voice features)
• Stripe: Payment processing (PCI-compliant)
• Vercel: Website hosting and delivery

Legal Requirements

We may disclose information if required by law, court order, or government request. We'll notify you unless legally prohibited from doing so.

How We Protect Your Information

• All data is encrypted in transit (TLS/SSL) and at rest
• Row-level security ensures you can only access your own data
• Regular security audits and updates
• Strict access controls (only essential personnel)
• No passwords stored in plain text (bcrypt hashing)

Your Rights & Choices

You Have the Right To:

• Access: Request a copy of all your data
• Correct: Update inaccurate information
• Delete: Request deletion of your account and data
• Export: Receive your data in a portable format
• Object: Opt-out of certain data uses

To exercise any of these rights, email us at privacy@mikage.club

Data Retention

We keep your account data as long as you maintain an active account. Your coaching library is yours—we preserve it so you can return to insights from months or years ago. If you delete your account:

• Personal data is deleted within 30 days
• Anonymized aggregate data may be retained for improvements
• Backups are purged within 90 days
• Legal records kept as required by law (typically 7 years for financial records)

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete personal information (with some exceptions)
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at privacy@mikage.club or call 1-800-MIKAGE-1 (coming soon).

International Users

Mikage is based in the United States. If you're accessing our services from outside the US, please be aware that your data may be transferred to, stored, and processed in the US. We use standard contractual clauses for international transfers where required.

GDPR Rights (EU Users)

If you're in the European Union, you have additional rights under GDPR, including:

• Right to data portability
• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with supervisory authorities

Children's Privacy

Mikage is not intended for anyone under 18. We don't knowingly collect information from children. If you believe we have inadvertently collected information from someone under 18, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email and post a notice on our website. Continued use after changes means you accept the updated policy.

Contact Us

If you have questions, concerns, or feedback about this Privacy Policy or our data practices: