Privacy Policy

The controller or business responsible for personal information is the legal entity operating TryMitali, identified in the operator details below. Contact the operator using the privacy contact listed there. If that identity or contact is missing, do not treat this draft as a complete statutory privacy notice.

• Account and sign-in details provided through Google, such as your email address, display name, and profile image.
• Prompts, chat messages, generated code, app files, project names, settings, uploaded references, build and preview records, and support information you submit.
• Connected-provider status and credentials. Provider credentials are stored encrypted and used server-side to perform the actions you request; secret values are not intended to be shown again in the interface.
• Operational data such as security events, request identifiers, usage records, error diagnostics, and device/browser information contained in standard server logs.
• Cookie preferences and language settings. Optional analytics or advertising data is processed only after the relevant consent is granted and only if the corresponding integration is configured.

We use information to authenticate you; provide project generation, file storage, previews, builds, and integrations you request; secure the workspace; prevent abuse; troubleshoot failures; and meet legal obligations. Depending on your location and the activity, these uses rely on contract or pre-contract steps, legitimate interests such as security and service reliability, or legal obligations.

Optional analytics and advertising pixels are off until you opt in. Where consent is required, we rely on your consent for those optional technologies. You may withdraw or change that choice through Cookie preferences; withdrawal does not undo processing that occurred before withdrawal.

We use infrastructure and service providers to host and secure TryMitali and to deliver features you request. When you connect a third-party account, the necessary prompts, code, metadata, or API requests may be sent to that provider. Relevant providers can include Google authentication, OpenAI model services, Expo/EAS, Supabase, database, queue, object-storage, and malware-scanning infrastructure. The exact providers and locations depend on deployment and your choices.

Providers may process information in countries outside your own. Where applicable, transfers rely on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism. Each provider’s terms and privacy notice also apply to its processing.

We keep data for as long as needed to provide the service, maintain security and records, resolve disputes, or meet legal obligations. Retention periods depend on the data type, backups, and legal requirements; the operator must publish a concrete retention schedule once its deployment and jurisdiction are finalized. We use access controls, encryption for provider credentials, private project storage, scanning, and isolated preview infrastructure, but no online service can promise absolute security.

TryMitali is not directed to children and is not intended for people below the minimum age required to use online services in their location. If you believe a child has provided personal information, contact the operator.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, withdraw consent, and complain to a supervisory authority. California residents may also have rights to know, correct, delete, and opt out of sale or sharing, subject to legal limits. TryMitali does not currently state that it sells personal information; if advertising pixels are enabled, the operator must assess whether disclosures qualify as ‘sharing’ under applicable law and honor required opt-outs and browser signals.

Use Dashboard → Security to delete your TryMitali account, or contact the operator for other privacy requests. We may need to verify your request and can retain information where law permits or requires. We do not make legally significant decisions solely by automated processing through this workspace.

We may update this policy as the service, providers, or applicable law changes. We will update the effective date and provide notice where required. This notice must be reviewed against the actual production data flows before launch.