Miyo Privacy Policy
Miyo is operated by Mehmet Özay under the developer name Keşkül Mobile Apps. Contact support@keskulmobileapps.com about this policy or your data. This policy covers Miyo on Android (Google Play) and on iPhone; where the two differ, both are described.
Using Miyo without an account
Miyo works without signing in. At first launch the app creates a random guest identifier with Firebase Authentication; it contains no name, email address or account details. As a guest, your cats, journal entries, recordings, photos and videos stay only on your phone and are not sent to our servers. Recognising cat sounds while you listen runs on your phone (on Android with Google's YAMNet sound classifier bundled in the app, on iPhone with Apple's sound analysis); recordings are not uploaded for this step.
Under the guest identifier our servers keep only what is needed for purchases. If you buy Miyo Pro as a guest, we keep your subscription state and a keyed digest that links the purchase to this identifier, and RevenueCat keeps a customer record for this identifier. A guest without Miyo Pro cannot use Miyo's AI best guesses; the app asks you to sign in first.
Erasing the journal on this phone in Settings removes everything stored on the phone and asks our server to delete the guest identifier and the records above. If the phone is offline, the local erase still happens and the guest identifier stays.
Signing in
You can sign in to back up your journal and use the AI features. On Android you can sign in with Google or with Apple; on iPhone with Apple. Google or Apple gives us an account identifier and, if you allow it, your name and email address (Apple may give a private relay address). Firebase Authentication manages your sign-in; we never receive your password.
When you are signed in, your cats, journal entries (mood, notes, detected sounds and saved best guesses), your active cat, and the recordings, photos and videos you save are stored in your Miyo account in Firebase (Google Cloud, region europe-west1 in the EU) so they follow you to a new phone. Only your account can read them. Deleting an entry removes it, and files no longer used by any entry, from your account. Device backups may also include this data according to your device backup settings.
AI best guesses
With your explicit AI permission, the selected recording, photo or six still frames taken from a video on your phone, the text you type, your cat's profile (name, personality and, if you entered them, breed description, sex and life stage), short earlier replies in the same conversation, and your language are sent through our server to OpenAI to create a best guess or a spoken reply. The full video and its audio are not uploaded. We send these requests to OpenAI with storage of the response at OpenAI turned off; OpenAI may still keep API data for up to 30 days under its abuse-monitoring policy (openai.com/policies/privacy-policy). Uploaded media is processed in memory and is not saved to our database. The result (text, or the generated speech) is kept with a one-way digest of the request for 24 hours so a repeated request is not charged twice, then deleted automatically; Google's expiry deletion is asynchronous and may occur later. AI permission can be withdrawn in Settings.
Membership and purchases
On Android, Miyo Pro is sold through Google Play Billing; on iPhone, through the App Store. Google or Apple processes the payment and holds your payment details; Miyo never receives card details. RevenueCat (United States) receives your account identifier (guest or signed in), the store's purchase token or purchase records and your subscription status, to validate access and restore purchases (revenuecat.com/privacy). Our server stores your subscription state (Pro status, product, expiry, renewal and billing-issue status) to unlock Miyo Pro. So that one subscription has one daily limit however many accounts it reaches, we keep a keyed digest of the purchase (on Android, of the Google Play order) linked to your account. On iPhone we also keep a record of each original App Store purchase with a keyed digest of the account that owns it, so the same purchase cannot be claimed by another account; this record is kept after account deletion.
Notifications
Daily reminders and cat birthday reminders are scheduled on your phone and do not leave it. If you turn on Miyo updates, Firebase Cloud Messaging creates a push registration token for this installation and subscribes it to a general topic and a topic for your app language, so we can send news about new sounds and features. The token identifies the app installation, not your name or cat. Turning Miyo updates off unsubscribes and deletes the token; signing out does the same.
Camera and microphone
The camera is used only when you choose to take a photo or record a short video, and the microphone only while you record or listen. Nothing is captured in the background. Recordings are kept on your phone until you send, save or discard them.
Analytics and crash reports
Miyo uses Firebase Analytics and Firebase Crashlytics (Google) to understand which features are used and to fix crashes. Analytics events name the feature and a count (for example that a recording was saved or a game was opened) together with your Firebase account identifier (guest or signed in), device model, OS version, app version and country; they never include your recordings, photos, text or your cat's name. Crash reports contain the technical state of the app at the time of a crash and your Firebase account identifier. This information is not used for advertising and is not shared with data brokers. Miyo does not use the Android advertising ID. See firebase.google.com/support/privacy.
Security and abuse prevention
Every request to our server must come with a valid sign-in and a Firebase App Check token, created on Android with Google Play Integrity and on iPhone with Apple's App Attest, which lets our server confirm the request comes from the genuine Miyo app on a real device; it does not identify you. On Android the app also checks on the phone whether it runs on a rooted, emulated or debugged device or in a modified copy of the app, and may refuse to run there; only yes/no results of this check are recorded in analytics. At start-up the app reads a public settings document (for example the minimum supported version or a maintenance notice); this sends no personal data.
To keep limits fair, we keep: daily usage counters stored under a keyed digest of your account identifier, deleted after 7 days (deleting and recreating an account does not reset them); timestamps of your requests in the last hour, deleted after 24 hours; per-minute purchase-check counters, deleted after 24 hours; a daily count of your requests, deleted after 2 days; a daily usage counter for the network you connect from, stored under a keyed digest of your IP address (for IPv6 its /64 range), never the address itself, deleted after 2 days; the purchase digest described above, deleted with your account; and daily totals for the whole service, which contain no personal data. Infrastructure logs can include request time, IP address, path, status and technical identifiers and are kept for 30 days; our code does not log recordings, photos, generated text, passwords or keys.
Deleting your data
Signed in: Settings › Delete my account & data. Google or Apple asks you to confirm it is you, then our server deletes your RevenueCat customer record, everything in your Miyo account (cats, entries, saved files and cached AI results), your subscription state, your purchase records and your sign-in account, and the app removes this account's data from your phone. Guests: see “Using Miyo without an account” above. You can also email support@keskulmobileapps.com to request deletion, and remove Miyo's access in your Google account settings (Security › Third-party apps) or in your Apple ID's Sign in with Apple settings.
What remains after deletion: a deletion marker with your former account identifier, kept for 30 days so requests still in progress cannot recreate deleted data; on iPhone, the purchase token itself without any link to your account and the purchase-ownership records described above; daily usage counters until they expire; webhook event identifiers and processing times, deleted after 30 days; infrastructure logs until they expire; analytics and crash data under Google's retention periods; and the transaction records Google or Apple keep for legal and accounting purposes. Deleting your account does not cancel a subscription; manage or cancel it in Google Play › Payments & subscriptions, or in your Apple Account subscription settings.
Sharing and tracking
We do not sell your personal data, show ads or track you across other companies' apps or websites. Sharing a card or video uses the destination you choose in the system share sheet; that destination's privacy policy applies. Our service providers (Google, OpenAI, RevenueCat, Apple) may process data outside your country.
Entertainment
Miyo provides AI-assisted observations and uncertain interpretations. Best guesses, sound interpretations and reference sounds are not validated animal-language translations or veterinary advice. Breed, sex and life-stage details you enter only shape the tone and background of replies; Miyo never determines them from a photo or sound. Avoid uploading sensitive personal content or recordings of other people without permission.
Children
Miyo is not directed to children under 13. If you believe a child has supplied personal data without appropriate permission, contact us to request deletion.
Your rights
You can ask to access, correct or delete your data, object to its processing or withdraw consent by writing to support@keskulmobileapps.com. Depending on where you live, you may also complain to your local data protection authority.
Changes
We may update this policy when functionality or providers change and will revise the date above. The current version is available in the app and at this address.