A little clarity

Privacy

Mimo is operated by Roman Bryl, a sole trader trading as Mimo. Business and correspondence address: 5 Brayford Square, London, E1 0SG, United Kingdom. Contact hello@sendamimo.com for help or privacy enquiries.

Your film choice, sender and recipient names, occasion and personal message stay in your browser while you create and preview your Mimo. They are sent to our Cloudflare database when you continue to checkout, together with order state, creation/expiry dates and private-link details. Temporary browser session storage lets an interrupted checkout recover.

We use buyer information to perform our contract and handle steps you request before buying. We process recipient names and messages supplied by the sender for our legitimate interest in delivering the requested personal Mimo. Recipients can contact us about this processing. Please only provide information you are entitled to share.

Receiving a Mimo? Your sender supplied your name and message to make this private greeting. We ask senders to pass on this Privacy notice when arranging or sharing a Mimo. We do not need your email address or phone number to provide it. You can contact hello@sendamimo.com to ask about your information, object to this use or request deletion; we may need proportionate checks to protect someone else’s private message. Senders should leave out private health, financial or other sensitive details and only include information they are entitled to share.

Payment and refund records support our legal accounting obligations. Necessary security, abuse prevention, support and proportionate contract evidence serve our legitimate interests in running a reliable service and handling disputes. We do not treat buying, viewing or accepting Terms as consent to marketing.

An unpaid draft expires after 24 hours. Paid Mimos last 18 calendar months from payment unless access ends sooner after refund, dispute or justified revocation. Expiry blocks access immediately. Bounded daily cleanup removes content after a seven-day grace period; outages or backlogs can delay physical deletion.

Stripe processes card and wallet payments under its own privacy terms. Mimo does not collect full card details. Stripe supplies the checkout email for your order confirmation and recovery. Resend receives that email, film name, order details, expiry, agreed terms and a secure recovery link, but not your personal message, recipient name or recipient viewing link. Google Workspace handles human support replies.

Each new paid order has one combined confirmation email. Its secure access link works once and expires after 15 minutes; opening the page alone does not consume it. Find my Mimos can send a fresh sign-in link. Recovery sign-in and original-purchase browser proof each last up to 24 hours. Recovery never sends the Mimo to your recipient or extends its availability.

Recovery associations end with the Mimo’s availability. Obsolete recovery records have a 24-hour cleanup target. Queued email payloads become eligible for clearing after 24 hours, in bounded maintenance. We retain minimal purchase dates, amounts/currency, payment/refund references, terms version and agreement time separately from Mimo content. These records are linkable through payment systems, not anonymous. Accounting records normally remain for at least five years after the relevant tax year’s 31 January filing deadline; retention is reviewed for applicable legal obligations and disputes. This does not extend personal-message retention or create a permanent archive of full emails.

Support correspondence is kept while needed to resolve the enquiry and for proportionate follow-up or legal claims, then reviewed for deletion. Avoid including unnecessary private content. Provider recovery copies and messages in your own inbox have separate lifetimes.

Cloudflare, Stripe, Resend and Google Workspace and their subprocessors may process information outside the UK. Resend’s primary processing is in the United States. Provider data-processing terms provide transfer safeguards, including standard contractual clauses and the UK Addendum where applicable. Contact us for details or copies of relevant safeguards. On the current Resend Free plan, email/log data is retained for 30 days and backups for seven days; Cloudflare D1 Free-plan recovery copies last seven days. These copies do not extend link validity.

For launch, optional browser analytics on Mimo's sender pages run only when Cloudflare identifies the request as coming from the UK. Recipient viewing is not measured. Outside the UK, or when location is uncertain, sender-page measurement stays off. The country check is approximate, is not kept as a location history, and does not restrict buying or viewing a Mimo. Essential payment, refund, security and recovery processing remains separate.

Mimo disables stored Cloudflare Worker request logs and traces to avoid retaining private links in that troubleshooting system. Aggregate platform metrics, operational health panels and service alerts remain available. This does not erase older logs immediately or remove Cloudflare’s separate infrastructure/security processing and recovery copies.

We count sender-page activity to understand which films people consider and where Mimo needs improvement. The statistics are daily totals by film, action and sharing method, not a history of your visits. They cover previews, purchases and sharing-button use. Since 1 October 2026, Mimo does not count recipient opens, playback, message reveals or return clicks. Earlier grouped recipient counts remain until their normal deletion date. We do not use advertising pixels, browser fingerprints, analytics session cookies or links that track a recipient into a later purchase. Names, personal messages, private links and payment identifiers are not stored in the statistics. Stripe processes payment and device information under its own privacy terms; it receives the opaque Mimo token and film identifier, not the personal message.

You can turn optional sender-page browser analytics off using the control below or on the homepage. It stops further sender-page browser activity being counted without affecting Mimo. If cookies are allowed, a simple on/off preference remembers your choice for 90 days in that browser; it contains no unique identifier. If cookies are blocked, your choice works on this page but may need to be set again after a reload. Essential purchase, refund, security and recovery records still work, and server-confirmed purchase/refund totals remain. Previously grouped statistics cannot be linked back to you for removal.

Daily statistics are eligible for deletion after 90 days. Automatic cleanup runs in bounded daily batches; outages or a backlog can delay physical deletion, and database recovery copies have a separate lifetime. The owner activity report combines completed UTC weeks and withholds small-group breakdowns rather than displaying them as zero. Earlier recipient counts are historical and will age out. Exact payment and refund records are handled separately for business administration. Minimal payment/refund counting flags prevent duplicate payment notifications being counted twice. Earlier detailed analytics and recipient viewing flags were removed from the active database when the grouped statistics model began; recovery copies expire separately. We do not keep a separate longer-term analytics archive.

Depending on the circumstances, you can ask to access or correct your information, request erasure or restriction, object to legitimate-interest processing, and request portability. If processing relies on consent, you may withdraw it. Contact hello@sendamimo.com; we may need proportionate identity checks so we do not disclose someone else’s private Mimo.

You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint without waiting for our permission. Payment/security checks are automated; contact us if you think access has been blocked incorrectly. We do not use your personal message for solely automated decisions producing legal or similarly significant effects.

Last updated 13 September 2026.