Privacy Policy

1. Introduction

This Privacy Policy applies to the Miri mobile app, website, and related services provided by Foshan Xinghang Trading Co., Ltd. It explains how we collect, use, share, and otherwise process personal data.

Our operating headquarters are in China, but core personal data, especially user content and face-related data, may be processed and stored on secure servers in Singapore and other jurisdictions.

2. Information We Collect

2.1 Information You Provide

• User Content, including photos, images, generated results, and prompts you submit.
• Communications Data when you contact us for support, feedback, or other inquiries.
• Account Data such as username, email address, or third-party sign-in details when you register.

2.2 Automatically Collected Information

• Technical Data such as device model, operating system, system language, identifiers, and IP address.
• Usage Data such as feature usage, session duration, crash logs, and editing activity.

2.3 Information From Other Sources

If you sign in with Apple, Google, or another third-party provider, we may receive profile details that the provider is authorized to share with us.

3. How We Use Information

• To provide and operate image editing, liquify, and AI generation features.
• To process face geometry and landmarks only for feature delivery, not for identity verification.
• To improve our product on an aggregated or anonymized basis, fix bugs, and develop new features.
• To detect fraud, abuse, attacks, and other safety or security issues.
• To comply with legal, regulatory, and compliance obligations.

4. How We Share Information

We do not sell personal data. We disclose necessary information only in the following situations:

4.1 Service Providers

• Cloud infrastructure providers, including AWS Singapore and Google Cloud Singapore.
• AI technology partners such as BytePlus and affiliates for inference only, without independent model training rights.

4.2 Legal Obligations

We may disclose information when we believe in good faith it is necessary to comply with law, enforce our Terms, or protect the safety and rights of users, the public, or our company.

4.3 Business Transfers

If our business is involved in a merger, restructuring, bankruptcy, or asset sale, your information may be transferred as part of that transaction.

5. International Data Transfers

Personal data is primarily stored in Singapore and may also be processed in countries where our vendors operate, including the United States. We use safeguards such as Standard Contractual Clauses where appropriate.

6. Data Retention

• User Content and face-related data are generally deleted from cloud storage within 24 hours after processing completes.
• Usage logs and technical data are retained only as long as necessary to improve the service, resolve disputes, and meet legal obligations.

7. Data Security

We use administrative, technical, and physical safeguards, including encryption in transit and at rest, to reduce the risk of unauthorized access, loss, misuse, or alteration. No internet transmission is fully secure.

8. Your Rights

• Access: learn what personal data we hold about you.
• Deletion: request deletion of your personal data.
• Correction: request correction of inaccurate or incomplete data.
• Withdrawal of Consent: withdraw consent where processing is based on consent.

To exercise these rights, contact us at:

Email: support@miriai.app

9. Children's Privacy

The Services are not directed to children under 13, or a higher minimum age required in your jurisdiction. If we learn that we collected such data, we will delete it.

10. Policy Updates

We may update this Privacy Policy from time to time. We will notify users of material changes through an updated date on this page or through in-app notice where appropriate.

11. Contact Us

Email: support@miriai.app

12. Annex: Region-Specific Supplements

• EEA and UK: we rely on contract performance, legitimate interests, and legal obligations, and use SCCs where needed.
• United States: we do not sell personal data or share it for cross-context behavioral advertising; Illinois face-geometry data is generally destroyed within 24 hours.
• Brazil: LGPD rights include confirmation, access, correction, and withdrawal of consent.
• Singapore: we comply with the PDPA and require comparable overseas protection.
• South Korea: personal data is destroyed after the collection purpose is fulfilled unless retention is legally required.