When you create a Mika account we collect information you provide: your display name, email address, date of birth (to verify you are 18 or older), profile photo, country of residence, communication goals (e.g., building confidence, professional small talk, making friends), and any personal bio you choose to write. If you register via Apple Sign-In or Google, we receive a limited profile dataset authorized by you and that provider.

We automatically collect device model, operating system version, unique device identifiers, IP address, mobile carrier, app version, crash logs, and performance diagnostics to maintain service quality and diagnose technical issues.

When you practice with an AI persona on Mika, we collect the text and (where applicable) voice messages you exchange with the AI, the persona and scenario selected, session timestamps and duration, your responses and reply patterns, and any feedback scores or reflections you submit after a session. See Section 3 for full details on how this data is handled.

When you use Mika's user-matching feature to practice with real people and make friends, we collect matching preferences you set (e.g., topic interests, preferred interaction style), interaction outcomes (accepts, passes, connection requests), conversation session metadata, mutual connection records, and any feedback you provide on real-user interactions. See Section 4 for full details.

We collect your skill progression data, including scores on completed practice sessions, skill badges or achievements earned, and trend data showing improvement over time. See Section 21 for details on how skill data is used and protected.

We record how you use the Service: features accessed, session frequency and duration, content you interact with, and navigation patterns. This informs product improvements and personalization.

If you contact our support team, submit a report, or participate in surveys, we retain the content and metadata of those communications for resolution and service improvement.

All payments are processed exclusively by Apple App Store or Google Play. We do not store your payment card details. We receive only anonymized transaction confirmation tokens and purchase entitlement data to activate in-app features.

We use your information to authenticate your account, operate AI coaching sessions, power user matching, maintain your skill progress records, process purchases, enforce content policies, and deliver all core Service functions.

Session data is used to operate and improve the quality of AI persona responses, adapt the coaching difficulty to your current skill level, and ensure the AI's conversational style remains realistic and beneficial. We do not sell session content to third parties or use it for unrelated AI training without your explicit, separate consent.

Your matching preferences, skill level, communication goals, and behavioral signals are used to connect you with compatible real users for practice sessions and social connection. The matching system is designed to create positive, productive interactions.

Your skill progress, practice history, and goal settings are used to personalize AI scenarios, recommend new skill-building challenges, and adapt the platform experience to your learning journey. See Section 6 for full details.

We process behavioral signals, user reports, and session metadata to detect and prevent harassment, abuse, manipulation, prohibited conduct, and policy violations in both AI and real-user interaction contexts.

Aggregated and de-identified usage and session data is analyzed to improve AI persona quality, matching accuracy, coaching curriculum design, and overall platform performance.

With your consent where required by law, we may send promotional communications about new features, coaching challenges, and platform offers. You may withdraw consent at any time via in-app settings or email unsubscribe.

We process personal data as necessary to comply with applicable laws, respond to valid legal process, enforce our Terms of Service, and protect the safety of our users and the public.

When you practice with a Mika AI persona, your text and voice inputs are processed by our AI systems to generate contextually appropriate responses. These sessions simulate realistic social scenarios — such as starting a conversation at a party, navigating small talk, or building rapport in a professional setting — tailored to your chosen skill goal and AI persona.

Session transcripts (text exchanges between you and an AI persona) are stored on our servers and associated with your account to enable: session review and self-reflection features; skill progress analysis; AI coaching adaptation; and safety monitoring. You may review and delete your session history at any time from your account settings. Deleted session transcripts are removed from production systems within 30 days.

Where Mika offers voice-mode practice sessions, audio input is processed in real time to generate AI responses and is not stored as a raw audio file after processing unless you explicitly activate a session recording feature, which will be clearly disclosed at the point of use. Processed text transcripts of voice sessions may be retained as described in Section 3.2.

Your session conversations with AI personas are not sold to third parties. We do not use the content of your personal coaching sessions to train third-party AI models or share session content with external AI providers for their independent commercial purposes. Where we use session data to improve Mika's own AI systems, we apply aggregation, de-identification, or explicit consent mechanisms before doing so.

You may disable session transcript storage at any time in Settings > Privacy > Session Data. If disabled, session transcripts will not be stored after the session ends, but your skill progress metrics (scores, completion status) will still be recorded as described in Section 21.

Mika's user matching feature connects you with real users for live practice conversations and potential friendships. Matching considers your stated communication goals, skill level, topic interests, preferred interaction style, and compatibility signals derived from your coaching history. The system is designed to connect users who are likely to have productive and positive interactions, filtered through our trust and safety eligibility layer.

Conversations between real users on Mika are stored on our servers for the purpose of delivering the messaging experience, enabling skill feedback after sessions, and supporting safety enforcement. Conversation content between real users is handled with heightened care: it is not used to train AI models, is not shared with third parties for advertising, and is subject to the same retention and deletion rights as other personal data. See Section 9 for retention periods.

Matching preferences you set are used exclusively to operate and improve the matching system and are not shared with advertisers or data brokers. You may update or reset your matching preferences at any time in your profile settings.

If you and another user mutually agree to connect after a practice session, a connection record is created linking your accounts. Your display name and profile are visible to your connections. You may remove connections at any time from your connections list.

Each account carries an internal trust and compatibility score based on behavioral history, user feedback received, and safety reports. This score affects matching eligibility and is not shared externally or visible to other users.

You may block or report any user at any time. Blocking prevents future matching. Reports are reviewed by our safety team. Your identity as the reporting user is kept confidential from the reported party.

Any profile content, community posts, skill achievement shares, or other content you publish publicly on Mika constitutes User-Generated Content. By submitting UGC, you grant Mika a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, display, and distribute your content within the Service and in connection with promoting the Service, subject to your privacy settings. You retain ownership of all original content you create.

UGC and user-to-user conversation content is subject to automated screening and human review for compliance with our Community Guidelines. Content depicting harassment, hate speech, sexual material, or other prohibited conduct will be removed. Accounts responsible for violations are subject to enforcement action.

You may delete your public UGC at any time. Deleted content is removed from public view within 48 hours and from production servers within 30 days. Private conversation histories may be deleted from account settings; deletion from backup archives occurs within 90 days.

Mika personalizes your experience using your skill progress data, declared communication goals, practice history, session performance patterns, and behavioral signals. The system adapts AI scenario difficulty, recommends new practice challenges, and surfaces users or community content aligned with your learning journey.

Your skill data, coaching session history, and communication goal profile are used exclusively for in-app personalization and product improvement. They are not shared with external advertising networks or used to target you with third-party advertising.

You may disable personalized recommendations in Settings > Privacy > Personalization. Core coaching and matching functionality is not significantly affected, though scenario recommendations may become less tailored to your specific skill level.

We share personal information with trusted third-party service providers supporting our operations: cloud infrastructure, AI inference providers, analytics platforms, customer support tools, payment processors, and content moderation systems. All providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.

We do not sell your personal information. We do not share your coaching session data, skill profiles, communication goals, or personal data with third-party advertisers, data brokers, or social skills platforms for their independent commercial use.

To deliver AI coaching functionality, your session inputs are transmitted to our AI model infrastructure providers for inference processing. These providers act as data processors under our instructions and are contractually prohibited from retaining, reusing, or independently processing your session content. We carefully vet AI infrastructure partners for data security and privacy compliance.

In the event of a merger, acquisition, or asset sale, your data may transfer to the acquiring entity. We will notify you in advance before your data becomes subject to a materially different privacy policy, giving you the opportunity to request account deletion.

We may disclose your information to law enforcement or government authorities when required by applicable law, valid legal process, or where necessary to protect the safety of any person. Where legally permitted, we will notify affected users prior to such disclosure.

Your display name, profile photo, and any publicly shared skill achievements are visible to other Mika users. You may set your profile to a more restricted visibility mode in account settings.

Mika's AI persona and coaching functionality is powered by AI language model infrastructure. Your session inputs are processed by these models to generate coaching responses in real time. AI inference providers are engaged as data processors under data processing agreements that prohibit them from retaining your personal session data for their own purposes.

Mobile analytics SDKs measure app performance and feature engagement, configured with privacy-preserving settings including anonymized event collection and suppression of advertising identifiers absent your consent.

Apple Sign-In and Google authentication are governed by their own terms and privacy policies. Our use of data from these services is limited to account creation and basic profile population.

User data and session content are hosted on cloud infrastructure with internationally recognized security certifications under data processing agreements. Details available at service@mika.rocks.

We retain your personal information for as long as your account is active. Accounts with no login activity for 24 consecutive months will receive a dormancy notice; inactive data may subsequently be anonymized or deleted.

AI coaching session transcripts are retained for up to 12 months by default to enable self-review and progress analysis. You may delete session history at any time from account settings. If you disable session transcript storage in privacy settings, transcripts are discarded at session end.

Real-user conversation histories are retained for the life of your account. You may delete individual conversations or your full conversation history from account settings. Deleted conversation data is removed from production servers within 30 days.

Skill progress records (scores, badges, level history) are retained for the life of your account to enable long-term progress tracking. You may request deletion of skill history along with your account or as part of a data deletion request.

Financial transaction records are retained for a minimum of seven years to comply with applicable accounting, tax, and consumer protection obligations.

Records of user reports, moderation actions, and enforcement decisions are retained for up to 36 months after account closure.

We implement TLS 1.2+ encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict role-based access controls, and automated anomaly detection. AI session data in transit to and from inference providers is transmitted over encrypted channels.

Data access is restricted on a need-to-know basis, requires multi-factor authentication, and is comprehensively audit-logged. All personnel with data access receive regular data protection training and sign confidentiality agreements.

We conduct regular security assessments and third-party penetration testing. Report security vulnerabilities responsibly to service@mika.rocks.

In the event of a personal data breach posing risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours where required by law and inform affected users without undue delay.

Mika uses session tokens, local storage, and analytics SDKs (not traditional browser cookies) to maintain your session, remember preferences, and measure feature engagement.

On iOS, we request ATT consent before accessing your IDFA. On Android, we respect your opt-out via device advertising settings. Advertising identifiers are used only to measure our own user acquisition campaigns and are not shared for third-party behavioral advertising.

Our website may use standard browser cookies for session management and analytics, manageable via browser settings.

Mika operates AI inference and cloud infrastructure across multiple regions to deliver low-latency coaching sessions globally. Your personal data and session content may be processed in countries other than your country of residence, which may have different data protection standards.

For transfers from the EEA, UK, or Switzerland to countries lacking an adequacy decision, we rely on EU Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum (IDTA). These safeguards apply to transfers to AI inference infrastructure providers as well as other service providers.

Where applicable national laws impose mandatory data localization requirements, we take reasonable steps to store and process the required data categories within the mandated territory.

Request a copy of personal data we hold about you (including skill progress data and session metadata) via in-app settings or by emailing service@mika.rocks with subject "Data Access Request."

Correct inaccurate information directly in account settings or by contacting us. We action corrections within 30 days.

Request deletion via Settings > Account > Delete Account or by emailing us. See Section 20 for full deletion details.

Object to or request restriction of processing in certain circumstances. We pause relevant processing while assessing your objection.

Where processing is based on consent or contract and automated, request your data — including skill progress records and session metadata — in a structured, machine-readable format.

Withdraw consent for marketing or personalization at any time via in-app settings or by contacting us, without affecting prior lawful processing.

Email service@mika.rocks with "Privacy Rights Request" in the subject, your registered email, and a description of your request. We verify your identity and respond within applicable legal timeframes.

For EEA and UK users, Mika acts as the data controller of your personal information under the GDPR and UK GDPR respectively.

We process your data under: (a) contractual necessity (to provide the Service); (b) legal obligation (regulatory compliance); (c) legitimate interests (safety, fraud prevention, service improvement), where not overridden by your rights; and (d) consent (for marketing, optional AI data use, and personalization features).

You may lodge a complaint with your national data protection supervisory authority if you believe your data has not been handled lawfully. We encourage you to contact us first.

California residents have rights under the CCPA as amended by the CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. Mika does not sell personal information and does not share it for cross-context behavioral advertising.

Exercising your California privacy rights will not result in denial of services, different pricing, or reduced quality of experience.

California residents may designate an authorized agent by providing written proof of authorization. We verify both agent and resident identity before processing any request.

Brazilian users have rights under the Lei Geral de Protecao de Dados (LGPD) including confirmation, access, correction, anonymization, deletion, portability, and withdrawal of consent.

We process Brazilian users' data based on contract performance, legal obligation, and consent where applicable.

Brazilian users may lodge complaints with the Autoridade Nacional de Protecao de Dados (ANPD) where they believe data processing violates the LGPD.

Mika is designed exclusively for users who are 18 years of age or older, in part due to the nature of social skill coaching and real-user interaction features. We implement date-of-birth verification at registration and apply additional detection measures to accounts suspected of being operated by minors. Confirmed underage accounts are immediately and permanently terminated with all associated data deleted.

If you are a parent or guardian and believe a minor has created a Mika account, contact us immediately at service@mika.rocks. We will investigate and, where confirmed, permanently delete the account and all associated data without delay.

All in-app purchases are processed exclusively through Apple App Store or Google Play. Mika does not store your payment card details. We receive only anonymized transaction confirmation tokens and entitlement data.

If Mika offers virtual currency or premium coaching features: (a) they have no cash value; (b) are non-transferable between accounts; (c) are non-refundable except as required by applicable law or app store policy; (d) may expire per terms disclosed at purchase; and (e) may be forfeited upon account termination for cause.

Transaction records are retained for a minimum of seven years to satisfy applicable accounting, tax, and consumer protection requirements.

Mika may send push notifications for: new matched user practice requests; messages from connections; skill milestone achievements; new coaching scenarios; platform announcements; and account security alerts.

Control notification types in Settings > Notifications or via your device OS settings. Disabling all notifications may cause you to miss important security alerts.

Transactional emails (account confirmations, purchase receipts, security alerts) are essential for Service operation. Marketing emails are optional and may be unsubscribed from at any time.

Delete your account at any time via Settings > Account > Delete Account, or by emailing service@mika.rocks with subject "Account Deletion Request."

Your profile, session history (if stored), conversations, and public content are removed from view within 48 hours. Personal data is deleted from production servers within 30 days. Backup archives are purged within 90 days of the next rotation cycle.

Certain data is retained where required by law: transaction records (up to 7 years); safety and moderation records (up to 3 years); data subject to a legal hold. All retained data is isolated and processed only for the specific purpose requiring its retention.

Mika maintains a skill progress record for each user including: performance scores on completed AI coaching sessions; skill badges and certifications earned; progression level history; scenario completion records; and aggregate feedback received from matched users (anonymized and averaged). This data is the core of your Mika learning journey.

Your skill data is used to: display your learning progress in-app; adapt AI scenario difficulty to your current level; power personalized coaching recommendations; enable skill-based matching with compatible practice partners; and where you choose to share, display your achievement level publicly on your profile. Skill data is not shared with employers, educational institutions, or third-party assessment platforms without your explicit consent.

You may choose whether to display skill badges and progress levels publicly on your profile from Settings > Profile > Skill Visibility. Setting this to private hides skill data from other users while preserving its use for your personal coaching experience.

We may use aggregated, de-identified skill progression data to conduct research on social skill development patterns and to improve coaching curriculum design. This research uses only anonymized data that cannot be used to identify individual users and is conducted under our internal data ethics guidelines.

This Policy is governed by applicable international data protection law and the laws of the jurisdiction in which Mika is incorporated, except where mandatory local law in your country of residence imposes higher standards that cannot be contractually excluded.

If our response to a direct complaint has not resolved your concern, you retain the right to escalate to the relevant data protection supervisory authority in your country of residence.

Material changes are communicated at least 14 days before taking effect via in-app notice, push notification, and/or email. Non-material corrections may be made without advance notice.

Continued use of Mika after any revised Policy's effective date constitutes acceptance. If you do not agree, delete your account before the changes take effect.

Prior versions are available upon request at service@mika.rocks.

For questions, data rights requests, or privacy concerns:

• Email: service@mika.rocks
• Subject: "Privacy Inquiry — [Your Name]"

We acknowledge inquiries within 5 business days and respond within 30 days.

Use the in-app Report function on any content, conversation, or user profile, or email service@mika.rocks immediately with subject "CSAE Report." These are our highest-priority safety matter, actioned without delay.