Privacy Policy

1. General

This Privacy Policy (the "Policy") describes what data the Mimolet Service collects, how we use it, with whom and on what grounds we share it, how we store and protect it, and what rights you have.

The data operator (controller) is ООО "Дейтинг" (Russian Federation). Full details of the operator are provided at the end of this document.

Mimolet is a social platform for users aged 14 and older, built around a vertical video feed and communication. This Policy applies to every version of Mimolet: the Android app on Google Play, the iOS app on the App Store, the Mimolet web app, and Mimolet in Telegram (Telegram Mini App). By using any version of the Service, you agree to this Policy.

Key safety rules

• Objectionable content is prohibited.
• Abusive and aggressive behavior is prohibited.
• Mimolet applies a zero-tolerance policy to such content and users.

2. Age and the 14+ minimum

The Service is intended for users aged 14 or older. By registering and continuing to use Mimolet, you confirm that you are at least 14 years old. If applicable law sets a higher minimum age for the Service or a particular feature, that higher threshold applies.

Users aged 14 to 17 may use the Service only within their legal capacity and with the consent of a parent or legal guardian where applicable law requires it. They may purchase subscriptions or other paid features only if they have the legal right to use the relevant funds or the necessary consent of a legal guardian.

We do not routinely identify every user by passport and do not retain passport copies merely to grant access to the Service. Users ordinarily state their own age. Where applicable law or the level of risk requires it, additional proportionate age-assurance or age-estimation methods may be used while minimizing the data processed.

No method can absolutely guarantee every user’s age. We review reports and other credible signals. If we establish that a user is under 14 or has not reached a higher age required by applicable law, the account is blocked or deleted. Access may be restricted while a report is reviewed, and the user may be asked for information reasonably necessary to resolve substantiated doubts.

3. Data we process

Account identifiers

Profile ID, email address, phone number (if provided), Telegram ID and username (for Telegram login), internal username, authentication and session data.

Profile data

Name, age, country and city, gender, dating goal, description, height, weight, interests, favourite artists and music, MBTI, zodiac sign, subculture and other fields you fill in yourself.

User-generated content

Photos, videos, avatars, voice greetings, messages and chat media, reactions, complaints, support requests.

Activity in the Service

Likes, dislikes, matches, views, visitors, applied filters, blocks, participation in chats, places, events and calls, interaction with AI characters and Tarot.

Payment data

Selected plan and period, amount, payment status, receipt email, order and payment identifiers, recurring-payment consent. We do not store full bank card data - it is processed by payment systems.

Technical and device data

IP address, request timestamps, browser type, device, operating system, cookies and technical identifiers, device identifier (for native apps), tokens, technical events, errors, abuse signals.

Device permissions

Access to camera, microphone, photos, videos and files, location and notifications - only if you grant the relevant permission. Permissions can be revoked in your device settings.

4. Purposes and legal bases

We process data for the following purposes:

• creating, displaying and matching profiles; running the feed, filters, likes, matches and recommendations;
• messaging, calls, participation in groups, places and events;
• authorization, session management and account security;
• processing payments and subscriptions (Plus, Premium, Ultra), boosts and additional features;
• moderation and prevention of fraud, spam, abuse and manipulation;
• user support and responding to requests;
• operating AI features (AI companions, chat suggestions, text correction, voice transcription, Tarot);
• analytics, improvement and stability of the Service;
• compliance with applicable law.

Legal bases (depending on your jurisdiction): performance of a contract with you, your consent, our legitimate interests (security, abuse prevention, service development), and compliance with legal obligations.

AppsFlyer analytics and attribution

The Mimolet mobile app uses AppsFlyer for analytics and attribution: measuring installs and sessions, identifying acquisition sources and evaluating promotion effectiveness. Data sent to AppsFlyer may include the device advertising identifier (such as GAID or IDFA when available under device settings and permissions), the AppsFlyer install identifier, the IP address used to derive an approximate region, and limited technical events including install or launch, login or registration, selected feed actions and purchase. Events do not contain message text, profile content, photos, videos, media, email address, phone number, authentication tokens or the internal user ID. A purchase event may contain the amount, currency, service category and a technical order identifier, but not bank-card details. We use this data only for analytics, attribution and promotion measurement and do not sell it.

5. What other users see

Mimolet is a public social platform for a vertical video feed and communication. Other users can see your name, age, city, photos and videos, description, interests, goal, activity indicators, and your likes, matches and messages to the people you talk to.

You decide what to publish. Do not post passport data, home address, banking information, intimate materials or other sensitive information in your profile or chats.

6. AI features

The Service includes AI features: AI characters and assistants (marked with a special icon so they cannot be mistaken for a human), "what to write" suggestions, spelling correction, voice-to-text transcription, and Tarot readings.

To power these features, the relevant text or voice message may be processed by our own language models or, as a fallback, by trusted AI infrastructure providers. We aim to minimize and depersonalize the data sent. AI responses are for entertainment and are not professional advice.

7. Payments and subscriptions

Subscriptions and features are paid through payment systems and app stores (App Store, Google Play, bank cards, Telegram Stars). Card data is handled by the payment provider under its own security standards; we receive only the result and the minimum payment information needed.

Subscriptions may renew automatically if auto-renewal is enabled. You can turn off auto-renewal in your profile settings or in your app store. Previously paid periods remain available unless the account is blocked for violations.

8. Sharing with third parties

We do not sell personal data. Limited access to data is available to:

• other users - within the scope of your public profile and conversations;
• infrastructure providers: hosting, file storage, media delivery, email, analytics;
• payment systems, banks, app stores, fiscal operators;
• moderators and authorized staff/contractors of the operator;
• government authorities and courts - where required by law or to protect rights.

All engaged providers process data under our instructions and are required to keep it confidential.

9. Cross-border data transfers

Because users and Service infrastructure may be located in different countries, processing may involve cross-border data transfer. In such cases we apply reasonable legal and organizational safeguards and transfer data only to the extent needed to operate the Service.

10. Retention

We keep data no longer than necessary for the purposes of processing. Your active profile is kept while you use the Service. After account deletion, the active profile is deleted or depersonalized within a reasonable time.

Some data may be kept longer: backups, payment and accounting records (as required by law), security logs and complaint materials (to protect rights and investigate), and messages already delivered to other users.

11. Cookies and technical identifiers

We use cookies, sessions, a remember-token and similar technical identifiers for authorization, stability and detection of suspicious activity. You can delete cookies in your browser, after which you may need to sign in again.

Web analytics may be used to measure traffic. You can disable cookies in your browser or device settings.

12. Security

We apply reasonable technical and organizational measures: access segregation, authorization, storage on secured servers, encryption of transport channels, logging of significant events, protection against mass abuse, moderation and restriction of suspicious actions, and secure payment processing.

Mimolet has zero tolerance for objectionable content and abusive or aggressive users. Objectionable content is removed, and users who threaten, harass or otherwise harm others may be restricted or blocked without prior notice.

No service can guarantee absolute protection. Keep your email, Telegram account, devices and payment methods secure.

Any attempts to gain unauthorized access to data and accounts that belong to other people are strictly prohibited. This includes enumerating identifiers and exploiting IDOR-type vulnerabilities (accessing objects that belong to other users by their direct identifiers), as well as automated collection, scraping and parsing of data that belongs to other users, mass messaging and spam. We apply technical limits and protections against such actions but, like any service, cannot fully (100%) guarantee protection from them.

Users who break these rules or use the Service to harvest the data of other users, to spam, or to harm other people bear full responsibility for their actions under applicable law. We may block the offender, retain and hand over the necessary information to authorized authorities, and take other measures to protect users and the Service.

13. Automated processing

The feed and recommendations are generated automatically based on your actions (likes, dislikes, filters) and other signals to show more relevant profiles. This does not produce legally significant decisions about you. On request we will explain the general matching logic within reasonable limits.

14. Your rights

Depending on your jurisdiction, you may have the right to:

• access your data and obtain a copy;
• correct inaccurate data;
• delete your data / account;
• restrict or object to processing;
• data portability;
• withdraw consent previously given;
• lodge a complaint with a supervisory authority.

Many actions are available directly in the app: editing your profile, deleting media, turning off auto-renewal, deleting your account. For other requests, contact info@mimoletbot.ru. We may ask you to verify your identity and may decline where data must be retained by law or to protect the rights of others.

15. Regional disclosures

European Economic Area and United Kingdom (GDPR / UK GDPR)

You have the data-subject rights listed above and the right to complain to a data protection supervisory authority. The legal bases for processing are set out in section 4.

California, USA (CCPA / CPRA)

You have the right to know which categories of data we collect, to request their deletion, and to opt out of the "sale" or "sharing" of data. We do not sell personal data. We do not discriminate against you for exercising your rights.

United Arab Emirates (PDPL)

Processing is carried out with regard to UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

For users in the United Arab Emirates, UAE Federal Decree-Law No. 26 of 2025 Regarding Child Digital Safety and Cabinet Resolution No. 106 of 2026 Regarding Children’s Access to Social Media Platforms also apply. Full access to the Service is available from age 16; age-assurance and child-protection requirements are applied in accordance with the statutory transitional period.

Kazakhstan

Processing is carried out with regard to the Law of the Republic of Kazakhstan "On Personal Data and Its Protection".

Other countries

Users in other countries are granted rights to the extent of applicable local law.

16. Changes to this Policy

We may update this Policy when the Service, features, payments, legal requirements or security approaches change. The current version is always published on this page. By continuing to use the Service you accept the updates to the extent permitted by law.

17. Contact

For privacy, data access, deletion, complaints, security and payment questions: info@mimoletbot.ru