Mymiks
Mymiks
Privacy policy
This policy covers both the Mymiks app for Android and iOS, the Mymiks plush toy, and www.mymiks.com.
Last updated: 29 July 2026 · Version 1.0
The short version.
Your child's conversations with their Mymiks are generated on your own phone and are not sent to us. We never see them.
The only personal data we hold on a server is what a parent types into the reservation form on this website. The app itself sends us only one thing: A random code that ties your toy to your app. It is not linked to a name.
Mymiks AS is the data controller for the processing described here.
| Company | Mymiks AS |
|---|---|
| Organisation number | 937 865 422 |
| Address | Rosenlundveien 22C, 3150 Tolvsrød, Norway |
| Contact | post@mymiks.com |
We are a small family company in Tønsberg, Norway. Write to the address above and you will reach one of the founders directly.
The Mymiks app runs its AI language model locally, on your phone or tablet.
The following never leaves the device, and we have no ability to retrieve it:
You can erase all of it at any time by deleting the Mymik in the app, or by uninstalling the app.
The toy is fabric and filling. It has no microphone, no camera, no battery, no Bluetooth and no memory. It cannot record anything. The coin inside its pouch only has a printed QR-code, not a chip. It carries no electronics and stores nothing.
When you scan the QR-code, the app sends the code from the coin and a random device identifier to api.mymiks.com, and receives your Mymik's personality file in return. The random identifier is generated on your phone the first time the app runs. It does not contain your phone's serial number, advertising ID, or any other hardware identifier, and it cannot be traced back to your device or to you. It exists so that one QR-code activates one app, which is what stops a code being copied and reused.
We store the code, that random identifier, and the time of activation. We do not ask for or receive a name, email, or age at this step.
On first launch the app downloads the language model and the voice files (about 3 GB) from models.mymiks.com. These are files travelling to you. As with any download, our hosting provider processes your IP address in order to deliver the file and to protect the service from abuse. We do not use it to build a profile of you.
When your child presses the talk button, their speech is turned into text by the phone itself, using the phone's own offline speech recognition. The audio does not leave the device, and it never reaches us.
Not every phone can do this in every language. If the phone has no offline recognition for the language your Mymik speaks, the app asks you first and explains what the alternative means: the speech is then sent to the speech service of the platform maker to be turned into text, the same way your phone's own dictation works. That means Google on an Android phone and Apple on an iPhone. If you choose that, the recording goes from the phone straight there — it does not pass through us, and we neither see nor store it. The platform maker handles it under its own terms with you as the user of the phone.
This never happens on its own. The app does not use network recognition unless you have said yes, the choice can be changed again, and while the microphone is used that way it says so on screen as you speak. If you say no, everything else works as before — your Mymik understands everything you write.
The socialise feature uses Bluetooth to detect other Mymiks in the same room. This is a direct, short-range connection between two phones. Nothing is sent to us, and no location data is collected or derived. Google requires us to declare that we do not use Bluetooth scanning to work out where you are, and we do not.
Mymiks is made for children. We treat that as a reason to collect as little as possible.
The account relationship, such as it is, is with the parent or guardian who buys the toy and makes the reservation.
The app includes a way to report a reply from a Mymik that you find inappropriate. Reports are how we find and fix problems in the AI's behaviour. See section 7 for what a report contains.
Your child is talking to a computer program. The app says so, and we think you should tell your child so too. The Mymik's replies are generated by an AI language model and can be wrong, odd, or made up. It has been shaped together with a clinical psychologist and tested thoroughly against a safety policy of our own, but no AI is perfect, and it is not a substitute for a parent, a teacher, or a professional.
When you fill in the reservation form we collect your name, email address, country, and your companion and personality choice. We use it to hold your reservation, to tell you when your Mymik is ready, and to work out how many of each to make. We do not send you anything else, and we do not pass your address to anyone.
The form is protected by Cloudflare Turnstile, which checks that a submission comes from a person. It processes your IP address and some technical signals from your browser. Cloudflare states that Turnstile does not track users across sites or use the data for advertising.
This site is served by Cloudflare, which processes IP addresses and request metadata to deliver pages and block attacks. The site loads typefaces from Google Fonts, which means your browser contacts Google's servers and Google receives your IP address when you load a page.
We set no analytics or advertising cookies. We do not use Google Analytics, Meta Pixel, or any similar tracker. Cloudflare may set strictly necessary cookies for security.
| What | Legal basis |
|---|---|
| Reservation details | Consent (Art. 6(1)(a)) — the box you tick on the form. Withdraw it any time. |
| Coin code and random device ID | Legitimate interest (Art. 6(1)(f)) — verifying that a toy is genuine and activated once. It is not linked to a person. |
| IP address when downloading | Legitimate interest (Art. 6(1)(f)) — delivering the file and keeping the service up. |
| Order and payment records, once you buy | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) — Norwegian bookkeeping law. |
| Data | Kept for |
|---|---|
| Reservation details | Until your reservation becomes an order, you ask us to delete it, or 24 months of no contact, whichever comes first. |
| Activation record (code + random ID) | For the life of the product, so a toy can be transferred to a new phone. |
| Server and CDN logs | Short-term, per our hosting provider's retention; typically days. |
| Content reports from the app | Up to 24 months. A report contains the Mymik's reply and the surrounding exchange, so we can reproduce the problem. Send one only if you are comfortable with us reading that exchange. |
| Accounting records | 5 years, as Norwegian law requires. |
| Conversations and relationship memory | Never held by us. On your device, for as long as you keep them. |
We use a small number of service providers, and only as processors acting on our instructions:
If you turn on network speech recognition (section 3c), the platform maker's speech service is added to this list — Google on Android, Apple on iPhone. It sits differently from the others: it is not our processor, and it does not act on our instructions. The audio goes from your phone straight there, the same way it does when you use the dictation key on your keyboard, and they handle it under their own terms with you. We are not in the middle, and we get no copy.
Some of these are US companies, so data may be transferred outside the EEA. Those transfers rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses. We do not sell or rent personal data to anyone, ever, and we do not share it with advertisers or data brokers.
Under GDPR you can ask us to:
Write to post@mymiks.com. We will answer within 30 days, and we will not ask you why. If you are a parent asking about your child, say so and we will treat it as the child's request.
If you think we have got it wrong, you can complain to the Norwegian Data Protection Authority (Datatilsynet), or to the supervisory authority where you live. We would rather you told us first.
Traffic to our servers uses HTTPS. The parts of the product that matter most, namely your child's speech, their conversations and their relationship with their Mymik, are protected by not existing on any server we run. Data we do hold is kept on access-controlled infrastructure. No system is perfect; if we ever suffer a breach affecting your data we will tell you and Datatilsynet as the law requires.
If we change this policy we will update the date at the top. If a change materially affects what we collect or why, we will tell reservation holders by email before it takes effect, rather than quietly editing the page.
Questions, deletion requests, or anything you think is wrong here: post@mymiks.com.
Mymiks AS · Tønsberg, Norway