Privacy Policy

Last updated on: 06/06/2025

Welcome to Mimair ("Company", "we", "our", or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website https://mimair.com (the "Service"). This policy is designed to comply with the General Data Protection Regulation (GDPR).

Data Controller

For the purpose of GDPR and other applicable data protection laws, the data controller is:

Mimair AB

Panelgatan 42, 236 37, Oxie Sweden

Email: privacy@mimair.com

Personal Data We Collect

We may collect and process the following types of personal data:

  • Username - Chosen by you during registration.
  • Email Address - Provided during account creation.
  • User-Uploaded Files - Documents or files you upload to the Service.
  • API Calls to LLMs - Any data you input when sending API calls to LLMs through the Service.

We do not intentionally collect sensitive personal data unless you voluntarily include such information in files or messages.

How We Collect Your Data

We collect personal data directly from you through:

  • Registration - When you signup for an account.
  • File Uploads - When you upload PDFs or other documents.
  • Flashcard Use - When you interact with flashcards.
  • API Interactions - When you submit prompts or inputs to AI models.

We do not use third-party tracking services or advertising cookies. Data is only sent to third parties when necessary for platform functionality (e.g., API processing).

Why We Collect Your Data

We process your personal data for the following purposes:

  • Account Management - To create, maintain, and manage your user account.
  • Platform Functionality – To operate core features such as document upload, flashcard usage, and AI interactions.
  • User Support and Feedback – To communicate with you and improve the Service.

Legal Basis for Processing

Our lawful basis for processing your personal data under GDPR include:

  • Consent (Article 6(1)(a)): You have given clear consent for us to process your personal data for specific purposes.
  • Performance of a Contract (Article 6(1)(b)): Processing is necessary to provide you with the services you request.
  • Legitimate Interests (Article 6(1)(f)): We have a legitimate interest in improving and maintaining the security and performance of our platform.

International Data Transfers

Some data (such as API inputs) may be processed by service providers outside the European Economic Area (EEA). When this occurs, we ensure that such transfers are protected by safeguards like the European Commission's Standard Contractual Clauses or similar mechanisms.

Data Retention

We retain your personal data only as long as necessary for the purposes stated in this policy or to comply with legal obligations. You may request deletion of your data at any time by contacting us at privacy@mimair.com.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

  • Access – Request access to your personal data.
  • Rectification – Correct inaccurate or incomplete data.
  • Erasure - Request deletion of your data ("right to be forgotten").
  • Restriction – Request limits on how we use your data.
  • Portability – Receive your data in a machine-readable format.
  • Objection – Object to certain processing activities.
  • Withdraw Consent – Withdraw consent at any time, where applicable.
  • Lodge a Complaint – File a complaint with your local Data Protection Authority. For Sweden, the supervisory authority is IMY (Integritetsskyddsmyndigheten): Website: https://www.imy.se

Data Security

We take data security seriously and implement appropriate technical and organizational measures, including:

  • Secure HTTPS connections
  • Access controls and authentication
  • Regular backups and platform monitoring
  • Secure hosting

However, no internet-based service is completely secure. Please use caution when submitting sensitive information.

Cookies and Tracking

We do not use cookies for tracking or advertising purposes. Any use of cookies is strictly limited to essential service functionality.

Data Sharing and Disclosure

We do not share your personal data with third parties, except in the following circumstances:

  • API Calls to ChatGPT: Data shared to process your requests.
  • Legal Obligations: If required by law or valid public authority requests.

Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

E-mail: privacy@mimair.com