Miao Privacy Policy

Effective date: {{effective_date}}

Miao is provided by Splat AI Inc. ("we", "us"). Miao includes the Miao app for Mac and the Miao app for iPhone and iPad. This policy explains what data Miao handles, why, where it is kept, for how long, and how you can delete it.

1. Data that stays on your own devices

• On your Mac: Miao reads the chat logs of the AI command-line tools on your Mac (Claude Code, Codex, Grok) and the text in your terminals, and turns them into cards. Categories, things you marked (such as "Dismiss"), and attached screenshots are stored on that Mac (~/Library/Application Support/ConvoFeed/).
• Sorting cards: Miao for Mac uses the Claude Code command line you are already signed in to on your Mac (Haiku model) to decide whether a reply is asking you something or reporting it's done. This uses your own Claude account; the text is handled by Anthropic under its terms with you and does not pass through our servers.
• On your iPhone or iPad: the Mac's public keys and local network addresses from the pairing QR code; the device's own keys (in the system keychain); and the cards received from your Mac and shown in the app.
• Camera: used only to scan the pairing QR code. The image is processed on your phone and is not saved or uploaded.
• Demo mode: uses sample data built into the app, with no network access.

2. Data that passes through our servers without us seeing the content

• Chats, replies, and images: when your phone and Mac are on the same Wi-Fi, they connect directly and nothing goes through us. Elsewhere, they connect through our relay server. The content is encrypted with keys that only your two devices hold; the relay sees only encrypted data and keeps nothing after forwarding it.
• Notifications: when your Mac needs to alert you, it hands the notification to our server, which passes it to the Apple Push Notification service (APNs). The notification's title and text are encrypted so only your phone can read them. We only see a fixed line ("A chat is waiting for you"), the badge number, and your phone's push token.
• Live Activities on the Lock Screen and Dynamic Island: carry only a few numbers (how many chats are asking you, done, or working) and your Mac's name. We pass them to APNs and don't keep them.
• Connection details: when your phone and Mac connect through the relay, our server sees the Mac's device ID, connection times, and network (IP) addresses in order to connect the two. These are not kept after the connection ends. Our cloud provider may keep short-term access logs for security and operations.

3. Data we store (only if you sign in)

• Account: with Sign in with Apple, the user ID and email address Apple gives us (an Apple relay address if you choose Hide My Email); with Google, your Google user ID and email address. We don't ask for your name or profile photo.
• Your devices: for each iPhone, iPad, and Mac, its device ID (derived from the device's public key), public keys, device name and type, and when it was linked. The device name is the name you gave the device in its settings and may include your name. Purpose: a new device signed in to the same account can connect to your Mac without scanning, and your Mac can check that the new device is really yours.
• Push tokens: used to send notifications to your phone.
• Sign-in credentials: we keep only a hash of the session token we issue to the app. If you use Sign in with Apple, we also keep an Apple token so we can revoke Apple's authorization when you delete your account.

If you email us, we keep the correspondence to answer and resolve your request.

4. What we don't do

• We don't collect contacts, location, your photo library, browsing history, advertising identifiers, or usage analytics.
• We don't include third-party analytics, advertising, or crash-reporting code in the app.
• We don't sell or rent your data, share it with advertisers or data brokers, or use it to train AI models.
• If you turned on "Share With App Developers" under Settings > Privacy & Security > Analytics & Improvements on your iPhone, Apple sends us crash reports. Apple collects and processes these; they don't contain your chats.

5. Service providers

• Cloudflare, Inc. runs our relay, notification forwarding, and account service; account data is stored in Cloudflare's database.
• Apple Inc.: Sign in with Apple and the Apple Push Notification service.
• Google LLC: Sign in with Google, used only to verify who you are.

They process this data only on our instructions. Cloudflare operates servers in many countries, so your data may be processed outside your country, including in the United States.

6. How long we keep data

• Account, devices, push tokens, and sign-in credentials: until you delete your account or remove that device. They are deleted from our database right away; the database provider's built-in recovery history is cleared automatically within 30 days.
• Relayed content and notifications: not kept after forwarding.
• Emails: once your request is resolved, you can ask us to delete them.

7. Deleting your data

• Delete your account in the app: after signing in, go to Settings > Account > Delete Account. This deletes your account, device list, linked Macs, push tokens, and sign-in credentials, and revokes Sign in with Apple. If you used Google, you can also remove Miao under Third-party apps & services in your Google Account. See Delete your account for the steps.
• Never signed in: we have no account data about you. Data on your devices is removed when you delete the app or the Mac app's data.
• Disconnect a phone: in Miao on your Mac, remove it under Settings > iPhone & iPad. It can no longer connect to that Mac.
• By email: write to support@letsplat.com. We will act on it within 15 days after verifying your identity.

8. Your rights

You can ask to access, correct, export, or delete the personal information we hold about you, or withdraw your consent. Email support@letsplat.com and we will reply within 15 days after verifying your identity. We do this wherever you live, including where the EU GDPR or the California CCPA applies. We don't sell your personal information or share it for cross-context behavioral advertising.

9. Security

• Between your phone and Mac: HPKE end-to-end encryption (X25519, ChaCha20-Poly1305), set up fresh for each connection. Each device proves who it is with its own keys, and your Mac only accepts devices it has paired with.
• Between the app and our servers: TLS.
• Session tokens are stored only as hashes.

No method is perfectly secure. If you find a security issue, please email us.

10. Children

Miao is a tool for developers and is not directed to children under 13. We don't knowingly collect personal information from children. If you believe a child has given us personal information, email us and we will delete it.

11. Changes

When we change this policy, we update this page and the effective date above. For significant changes, we will also let you know in the app.

12. Contact

Splat AI Inc.
1312 17th Street Unit #2023, Denver, CO 80202, USA
Email: support@letsplat.com