Privacy Policy

Last updated: 12 October 2026

Mivela is an iOS app that generates bespoke audio stories where you experience your dream life as if it's already happening. The stories are written for the specific dreams, people, and goals you share during onboarding. This policy explains what data we collect, what stays on your device, what is sent to third-party services to generate your stories, and the choices you have. We do not sell or rent your data.

The short version. Almost everything stays on your device — your reflections, your memory wall photos, your saved affirmations and favourite stories. When you ask Mivela to write a story or anchor, a tailored snapshot of your profile (never your email address or Apple ID, though it can include your first name and the details you chose to share) is sent to our backend, which uses Anthropic and ElevenLabs to write and narrate it. Narrative text is not kept on our servers once your device has it, and the audio we hold for delivery is deleted on a short timer (section 5). We do keep a small account record against a pseudonymous identifier, covering your credit balance, purchase and usage history, and subscription status, and section 5 explains how long. We use Anthropic's and ElevenLabs' commercial APIs, whose published terms (linked in section 4) describe how each handles the inputs and outputs they receive; those terms are governed by the respective providers and may change over time, so check the linked pages for the most current statements. Pseudonymous analytics run only in App Store builds. We use AppsFlyer to learn which of our ads, if any, led to you installing the app; it uses your device's advertising identifier only if you allow tracking when the app asks. Uninstalling the app deletes everything we hold for you locally.

1. Who we are

Mivela is operated by the developer of the Mivela iOS app (the data controller). In this policy, "we", "us", and "Mivela" refer to us, and "you" refers to the person using the app. Once Mivela's operating entity is incorporated, the legal name and registered address of the controller will be listed here.

You can contact us at privacy@mivela.app for any questions about this policy, to request your data, or to exercise any of the rights described below.

2. What we collect

Stored on your device only

The following information is stored on your iPhone. Parts of it are sent with each story, anchor and affirmation request (described below), and we don't store it on our servers:

This data is stored in your device's user defaults and app sandbox. It is not synced to a cloud service controlled by us. Uninstalling the app deletes it.

Sent to our backend to generate a story, anchor, or affirmations

When you ask Mivela to write a story (Today's Moment, a vertical card, or a Custom prompt), generate or refresh your anchor, or refresh your affirmation deck, the app sends the following to our Cloudflare Worker backend, which forwards it to AI models to produce the result:

We do not attach your email address or IP address (beyond standard request logging) to the generation payload. Our backend does, however, key your usage records, quotas and rate limits to your Sign in with Apple user identifier. This is a pseudonymous identifier: it is not your name or email, but it is a persistent identifier that is the same each time you sign in with the same Apple ID, so we treat it as personal data.

Pseudonymous usage analytics

In production builds of the app downloaded from the App Store, Mivela captures usage events through PostHog to understand how the product is used and where to improve it. Examples of events captured:

These events are tied to your Sign in with Apple user identifier, the same identifier our backend and RevenueCat use for your account (see below), so that we can look at retention and conversion across the three. We also attach a few properties to that profile in PostHog: whether you have a subscription, which plan, whether it is a free trial, the month you installed, your chosen voice, whether you have finished onboarding, and how many life goals you picked. We do not send your name, email address, or any free text you have written. PostHog also records app crashes and unhandled errors against the same identifier. TestFlight builds do not send analytics events; our internal development builds send them to a separate test project.

Install attribution (AppsFlyer)

When we advertise Mivela (for example on TikTok or Instagram), we use AppsFlyer to learn how people find the app: which ad, if any, led to an install, and whether that install went on to a subscription. In App Store builds, the AppsFlyer software in the app sends AppsFlyer:

The first time you open Mivela, iOS asks whether Mivela may track you. If you choose "Ask App Not to Track", the advertising identifier is never sent. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking. AppsFlyer never receives your profile, stories, gratitude entries, photos, name or email address. TestFlight builds send nothing to AppsFlyer; our internal development builds send test data.

To report an install to the ad network that showed the ad, AppsFlyer tells that network (for example TikTok or Meta) that the install came from its ad. If you allowed tracking, this can include your advertising identifier.

Subscription and purchase data

Subscriptions and purchases are managed by RevenueCat on top of Apple's in-app purchase system. RevenueCat identifies you by your Sign in with Apple user identifier (in internal development builds, that identifier carries a "dev:" prefix) and receives Apple's purchase receipt data. It does not receive your name, email address, payment method, or Apple ID. Apple handles the actual payment; we never see your payment details. This identifier is pseudonymous rather than anonymous: it is the same one used for analytics and by our backend, which lets us match purchases to your account.

Our backend receives subscription and purchase notifications from RevenueCat and keeps a cached copy of your subscription status (plan, whether it is active, trial status, and expiry date) so it can check your access quickly.

Sparks (credit packs)

As well as subscriptions, Mivela sells "sparks": consumable packs of credits (currently 5, 20 or 50) that you can spend on extra stories or anchors beyond your daily allowance. Sparks are bought through Apple's in-app purchase system and RevenueCat, like a subscription. Your spark balance is kept on our backend against your Sign in with Apple user identifier, because the balance has to be reliable across devices and reinstalls. For each purchase, spend or refund we also record a ledger entry: the amount, the new balance, the type of event, a timestamp, and (for purchases and refunds) RevenueCat's event identifier. The ledger holds no story text and no payment details. See section 5 for how long this is kept.

3. How we use your data

4. Who we share data with

Mivela uses the following third-party processors to operate. Each is contractually limited to processing your data solely for the purposes described below:

We do not sell or rent your data to anyone. We do not use your profile, stories or anything you write for advertising. The only data that reaches advertising companies is the install attribution described in section 2: AppsFlyer telling an ad network that an install came from its ad, with your advertising identifier only if you allowed tracking.

5. How long we keep data

Story and anchor content works as a delivery buffer: it is held briefly so your device can collect it, then removed on a timer. Some small account records are different, though. We keep them for longer (in some cases with no automatic expiry), and we set them out below so you can see exactly what they are. Specifically:

Short-lived delivery data

Account records we keep against your Sign in with Apple identifier

These records are keyed to your pseudonymous Sign in with Apple user identifier. They contain no story text, audio, or payment details.

We keep these records on the basis of legitimate interest (preventing abuse and cost-cycling, resolving disputes, and supporting you) and, for purchase records, to meet accounting obligations. Section 6 explains what happens when you delete your account.

Held by other companies

6. Your rights

Depending on where you live, you may have some or all of the following rights:

To exercise any of these rights, email privacy@mivela.app. If you want us to delete data held by our processors (for example, to have your story requests (which carry no account identifier) removed from Anthropic's or ElevenLabs' retention windows), include enough context (approximate dates, device type) that we can identify which records to remove.

Deleting your account from inside the app

You can delete your account in Settings → Account → Delete account. Before you confirm, the app tells you how many sparks you will lose. Sparks cannot be restored after deletion.

What we delete: your account record; everything Mivela holds on your device (profile, stories, anchor, affirmations, gratitude entries, memory wall photos, cached audio and the local encryption key); your profile; your spark balance; your subscription status record; and your Sign in with Apple token, which we revoke with Apple. We also ask RevenueCat to delete its customer record for you.

What we keep, and for how long:

Subscriptions. Apple bills your subscription. Deleting your account does not stop it. Cancel it first in your App Store subscriptions.

Analytics and attribution. Deleting your account in the app may not yet remove your data from PostHog, and does not yet remove it from AppsFlyer. We keep this data as set out in section 5. To have it deleted, email privacy@mivela.app.

Temporary delivery data (job records and audio) is not deleted at that moment. It expires on its own timers, as set out in section 5. Uninstalling the app also removes everything held on your device.

7. Lawful basis (for users in the UK, EU, and similar jurisdictions)

Where GDPR or a similar law applies, we process your data on the following lawful bases:

If you prefer not to participate in analytics at all, contact us to request an opt-out.

We don't ask for, and don't intend to process, special-category data. That means information about your health, religious or philosophical beliefs, sexual orientation, and similar sensitive topics. Please don't include it in the free-text fields (for example, your self-description, your dream, or your "never include" list). If you do choose to share something like this, it is used only to write the story you asked for, and it is handled in the same way as everything else you write in the app. You can edit or delete it at any time in Profile.

8. Age requirement

Mivela is intended for users aged 18 and over. By creating an account or using the app, you confirm that you are at least 18 years old. We chose this threshold because Mivela is a recurring paid subscription, which requires the capacity to enter a binding contract. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has used the app or that we hold data about them, contact us and we will take appropriate steps, including deletion of any applicable data and termination of the account.

9. Security

Communication between the app and our backend is encrypted over HTTPS/TLS. Data held on our backend sits on Cloudflare's infrastructure; delivery data expires automatically, and the account records in section 5 stay until deleted. The Sign in with Apple identity token is verified cryptographically against Apple's public keys on every request. No internet-connected system is perfectly secure; we do our best to protect your data.

Notifying you of a data incident

Because we deliberately do not collect email addresses or other direct contact information (see section 2), we cannot send you a personal message if a data incident occurs. If we become aware of an incident that affects you, we will notify you through:

Where the law requires us to notify a supervisory authority (for example, under GDPR Article 33, which requires notification of qualifying breaches within 72 hours), we will do so within the required time window. Where the law allows public communication as an equivalent measure to direct notification (GDPR Article 34(3)(c)), we rely on the combination of in-app banner, Settings → Notices archive, and public notice on this site as that equivalent measure.

10. International transfers

Our processors (Anthropic, ElevenLabs, Cloudflare, Apple, RevenueCat, PostHog, AppsFlyer) operate globally. Your data may be processed in the United States, the European Union, or other jurisdictions depending on the processor and your location. Each processor maintains its own safeguards for international transfers, typically via Standard Contractual Clauses or equivalent.

11. Changes to this policy

We may update this policy when we add features, change processors, or clarify how we handle data. The "Last updated" date at the top of this page reflects when the current version took effect. Material changes will be announced in the app or by email where we have one.

12. Contact

For any questions about this policy, to exercise your rights, or to report a concern, email privacy@mivela.app.