MIMICORE - PRIVACY POLICY
Version 2026-11-05
SHORT VERSION
In the Mimicore app, your voice never reaches us. Live voice, cloning, effects, speech and on-PC training run on your PC. If you choose the optional cloud training, your recordings go only to YOUR OWN Google Drive and a Google Colab session in YOUR OWN Google account, never to our servers. The optional Mimicore Web page (audiobooks in the browser) is different: it processes your recording and your text on our servers and deletes them as described in "Mimicore Web" below. We keep only what is needed to run your account: your email address, your plan, simple usage counters (which features you use, how often and for how long: see "Usage statistics" below, you can switch them off in stable builds), technical performance diagnostics (linked to your account while you are signed in) that are ON by default in the Windows app and can be switched off under Settings > Privacy & data (see "Technical performance diagnostics" below), your name if you sign in with Google or Discord or enter it yourself, the feedback you choose to send (see "Feedback" below) and, if you use the Support tab, your support tickets (see "Support assistant and tickets" below).
WHAT STAYS ON YOUR COMPUTER
- Microphone audio is processed in memory while the live voice runs and is not stored.
- When you create a voice, the voice sample and the voice's data are saved in %LOCALAPPDATA%\Mimicore\voices.
- Generated speech is saved in %LOCALAPPDATA%\Mimicore\outputs; converted files go where you choose.
- Settings and logs are kept in %LOCALAPPDATA%\Mimicore. Logs contain technical events (device names, timings, errors), never audio or the text you type.
- Uninstalling the app does not delete this folder, so your voices are kept. Delete the folder yourself to remove everything.
YOUR ACCOUNT (stored by us, hosted on Supabase)
- Email address, sign-in method (Google, Discord or email code), plan, subscription status and dates, how many free live minutes you used today, and a record of your payments (Razorpay payment id, plan, amount and time).
- To give one free trial per PC and to protect your plan, the app sends a random install id and a one-way hash of your Windows machine id (not the id itself) when it checks your plan. We keep the hash with your account.
- For the Studio plan: the PCs on your account (the PC name as Windows reports it, a one-way hash of its machine id, and when it was first and last used), to show your PCs and enforce one active use at a time. Free accounts store no PC list.
- When you connect the app, the name of your PC (as Windows reports it) is kept for up to 15 minutes to show it on the confirmation page.
- Your name. If you sign in with Google or Discord, they tell us your name and profile picture address together with your email. We keep your name in your account record so we can greet you personally in emails from us and recognise you when you write to us; you can change or remove it under Settings > Account > "Your name" (also on the website account page). We do not use or store the picture. If you sign in with an email code we have no name for you unless you enter one.
- When you are signed in, the app also reports the model of your graphics card (for example "NVIDIA GeForce RTX 4060") and, with the usage statistics below, how long you used Live, so we can see which PCs the app runs on and how much it is used. Only administrators can see this.
The app never sends us your audio, voices, recordings or the text you type. We do not sell personal data. You can export your account data and delete your account yourself in the app (Settings > Your data) or on the website account page. Payment records are kept for accounting, without a link to a live account, and the trial record for a PC is kept so a deleted account cannot be used to claim the trial again. You can also write to [email protected].
PRICES AND LOCATION
To show prices in your currency, our server looks up the country of your IP address with a geo-IP service when you open the pricing or account page. When the app starts or you check out, we also save the COUNTRY (a two-letter code such as IN or US) in your account so we can understand where our users are and what to build for them. Your IP address itself is not stored. You can see this in the data export (Settings > Your data) and it is deleted with your account.
When you create an account on our website, we also save a short label for where your first visit came from (for example the search engine or site that linked to us, or a campaign tag) and the page you landed on. No IP address and no full web address is stored.
USAGE STATISTICS (YOU CAN SWITCH THIS OFF)
So we can see what people use and what to build next, the app sends a small summary about once a day, linked to your account: which features you used (for example live voice, Speak, Dub, voice cloning, training, the soundboard), how many times and for how long, the kind of voice (instant, trained, gallery or effect), the language chosen for Speak or Dub, which gallery voices you added, which free-plan limit you ran into or which upgrade button you pressed, your graphics card vendor and quality tier, how long you used Live, and the app version. These are counters and labels only. They never contain audio, voices, recordings, the text you type, file names or the content of anything you make. In stable builds, turn this off in the app under Settings > Privacy & data > "Share usage statistics"; nothing is sent after that. The counters are kept for up to 400 days, appear in your data export (Settings > Your data) and are deleted with your account.
INVITES
If you use or share an invite code, we store who invited whom (account to account) so that bonus days can be given when a friend makes a first purchase. Nothing else about the friend is shown to the person who invited them except that they joined and subscribed.
PAYMENTS
Subscriptions and purchases are processed by Razorpay, which handles your payment details under its own privacy policy. We receive only the payment or subscription status and period, linked to your account. If a payment fails, we also keep Razorpay's reason for the failure, the amount, the payment id and the email entered for that payment for 30 days, to help you and to fix payment problems. When you ask the Support assistant about a payment, or open a support ticket about one, these failure reasons can be passed to the AI providers named under "Support assistant and tickets".
WHAT ELSE GOES OVER THE INTERNET
- Model files you install (about 1.1-1.8 GB per quality tier) are downloaded from Hugging Face and GitHub, which see your IP address and which files were requested.
- The app contacts our account server to sign in, check your plan and record free live minutes. If you are offline, usage is recorded on your PC and sent the next time you are online.
- Update checks contact GitHub.
- Cloud training (only if you use it): Google Drive, Google sign-in and Google Colab, as described above.
- If the Microsoft Edge WebView2 runtime is missing, the installer downloads it from Microsoft.
- Links you click open in your web browser.
OPTIONAL CLOUD TRAINING (YOUR OWN GOOGLE ACCOUNT)
Only if you choose "Cloud" when training a voice (in the app or on our website):
- You connect your Google account. Mimicore asks only for Google's "drive.file" permission: it can see, create and delete only the files Mimicore itself creates (the "Mimicore Cloud Training" folder). It cannot see any other file in your Drive, your photos or your email. It also reads your Google email address to show which account is connected.
- The app or website uploads your recordings directly from your device to that folder in your Drive. They never pass through, and are never stored on, Ribanix Labs servers. We cannot access your Drive: the access token stays on your PC (in %LOCALAPPDATA%\Mimicore\cloud.json) or, on the website, only in your browser tab's memory.
- Training runs in our open-source notebook (github.com/ribanixlabs/mimicore-app/tree/main/colab) in a Google Colab session under your Google account. Colab asks for its own Google Drive permission; that is Google's service, and the notebook opens only the Mimicore Cloud Training folder. Google deletes the temporary Colab machine when the session ends. Google's own terms and privacy policy apply to Drive and Colab.
- When the trained voice is installed, Mimicore moves the job folder (recordings, checkpoints, voice) to your Drive trash, unless you chose to keep the recordings. You can delete the folder yourself at any time.
- Disconnect in Settings or on the website, or remove "Mimicore" at myaccount.google.com/permissions.
- Mimicore's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use it for advertising, do not sell it, and no human at Ribanix Labs reads it.
ERROR REPORTS (OFF UNLESS YOU TURN THEM ON)
In stable builds, if you switch on "Send error reports" in Settings, then when Mimicore crashes or hits an unexpected error it sends a short technical report to our server (hosted on Supabase): the error message and where in the code it happened, the app version, the Windows version and a random installation ID that is not linked to your account. Your user name is removed from file paths. Reports never include audio, voices, recordings, the text you type, your email or your account. Reports are kept for up to 90 days and used only to fix bugs. Switch it off at any time.
SUPPORT ASSISTANT AND TICKETS (SIGN-IN REQUIRED)
The Support tab has an assistant that answers questions about Mimicore and can open a support ticket for you.
- What you type to the assistant is sent over the internet to our server (hosted on Supabase) and, to write the answer, to a third-party AI provider that serves language models (currently Groq; the provider can change). Please do not type passwords, payment details or other secrets. The assistant does not receive your audio, voices or recordings.
- Chat messages are not stored on our servers, except (a) in a ticket, when the assistant creates one or you press you press "Create a support ticket", and (b) as a short rating record if you press Yes or No under an answer. The server also keeps, per account, only the time of each message to enforce daily limits.
- The Support tab shows what will be sent with a ticket before you press Send: the app log and system details are included automatically when the app has captured them (you can switch that off), and you may add up to 3 files (images, audio or text, 8 MB each). Attachments are stored privately, are only opened by our support staff, and are deleted 45 days after the ticket was last updated. Do not attach anything you do not want us to see (passwords, payment cards, identity documents).
- A ticket contains the conversation, your account email and name, the app version and, only if you approve it on screen, the part of the app log around the problem and basic system details (Windows user name, email addresses and tokens removed; it records the pages and buttons you used and technical events, never audio or the text you type elsewhere). Tickets are used to fix the problem and to email you about it. Tickets are analysed automatically by an AI model from a third-party provider (currently Anthropic) that receives only the ticket text, the log you approved and, for a ticket about a payment, the reasons of your recent failed payments, to find and fix the problem; no audio is ever included. Tickets, ratings and their logs are deleted when you delete your account. Ratings and answer caches older than 90 and 30 days are removed automatically.
- Frequently asked questions and the answers to them are cached (without your identity) to answer repeated questions faster.
- Fixes for reported problems may be offered as early builds by email; you install them yourself.
TECHNICAL PERFORMANCE DIAGNOSTICS (ON BY DEFAULT, YOU CAN SWITCH THEM OFF)
Mimicore sends technical performance data so we can make the app faster and more stable on different PCs and find the cause of problems you report. This is on by default in the Windows app, with no pop-up, and you can turn it off at any time under Settings > Privacy & data: nothing more is sent after that and anything waiting to be sent is discarded. What is sent: processing times and timing statistics of live voice and other features, error counts and short technical error messages from which file paths, web addresses, email addresses and credentials have been removed, the names of the app features that ran, the app and Windows versions, the full name of the graphics card, the power source (charger or battery), the battery level and whether Battery saver is on, fixed Live settings such as block size, and a PC id. When you are signed in, the short technical fingerprint of an app crash is sent the same way. The PC id is the random id of your Mimicore installation, not derived from your hardware or account; it stays the same until you reinstall. When you are signed in, the reports are linked to your account, so we can look into a problem you report and they are exported or deleted with your account; reports from a PC that is not signed in are not linked to an account. What is never sent: audio, recordings, scripts or text you type, voice names, file or folder names, your name or email address, passwords or tokens, or the contents of your projects. Since version 2.9.1, stable builds send the same as early (beta) builds always did. Stable version 2.9.0 sent its reports without the account, with the graphics card family instead of its name, without the battery details and with a PC id that changed every month. How long it is kept: detailed records 3 days (reports made while signed in, reports with errors or late Live blocks, and a small share of other PCs, within a daily limit); summed-up statistics per app version and graphics card, without any PC id or account, 60 days; per-PC daily counters 35 days. Only authorised administrators can look at them. Limits apply per request, per PC and per day. A small local outbox retries reports after an offline session. This is separate from the optional local testing ZIP, which is never uploaded automatically. Why: to operate and improve the service (legitimate interest). The data is not used for advertising and is not sold. You can object at any time by turning the switch off or by writing to [email protected].
FEEDBACK
You can send feedback from the app (Support page, Settings > About) or from the website (/feedback). We store the message you write, the kind and rating you choose, the app version, release channel, Windows version and language, and a random key for your PC or browser that we use only to limit spam. If you are signed in we link the message to your account. If you enter an email address and tick the box, we keep it to answer you and clear it after 90 days. If you choose "Attach technical details" we also store your graphics card type and, while Live is running, its speed numbers. We never collect audio, recordings, file names, logs or your IP address through this form. Feedback is read by the Mimicore team, kept for 12 months, deleted with your account and included in your data export. You can ask us to delete a message earlier at [email protected].
WINDOWS: OPTIONAL LOCAL TESTING LOG
You can start and stop a testing session in Settings > Privacy & data. It records application events, command names and durations (without their arguments/results), errors, system and driver details and Live processing timings. It does not attach audio or include typed scripts. Credentials, account identifiers, URLs and e-mail addresses are scrubbed; device, voice and file names can remain, so review the exported ZIP before sharing it. Nothing is uploaded by this feature. An active session resumes after restarting the app. Each session stops at 128 MiB and up to four session files are retained locally without automatic deletion. Detailed logging can add processing overhead. Export and move older sessions elsewhere when making room. This is separate from opt-in online error reports.
MAC BETA: DIAGNOSTIC LOGS (AUTOMATIC, YOU CAN SWITCH THEM OFF)
This section describes raw application-log uploads by the Mac beta. Windows beta technical samples are described above.
- While the Mac version is in beta, the app automatically uploads its application log to our server (a database hosted by Supabase) every few minutes, and right after a benchmark or when live voice stops, so that problems on Macs we cannot test ourselves can be found and fixed. It is on by default in the beta. You can switch it off any time in Settings > Your data > "Send diagnostic logs (Mac beta)". Nothing is uploaded while it is off.
- The log can contain: your Mac model and macOS version, the app version, audio device names, timings and benchmark results, error messages, the names of your voices and files, and a random install ID. Before upload the app removes your user name, e-mail addresses and token-like strings. Other text in a log can still identify you, for example a voice or a device named after you.
- It never contains audio, recordings, the text you type, or passwords.
- Only Ribanix Labs reads these logs, only to find and fix problems, and possibly with the help of automated tools including AI models. They are not sold or shared for advertising. Logs are deleted automatically after 30 days. To have the logs of your Mac deleted earlier, email us the "Install ID" from Settings > Your data > Copy support info.
- By downloading and using the Mac beta you agree to this, as shown in the download step.
MIMICORE WEB (AUDIOBOOKS IN THE BROWSER)
Mimicore Web at mimicore.pages.dev/web/ is an optional service for people who cannot install the app. Unlike the app, it does process your audio and text on servers we operate (including cloud machines):
- What you upload: a short voice recording (about 20-40 seconds) and the text you want read aloud. You must confirm that the voice is yours or that you have the speaker's permission, and that you have the right to use the text.
- Where it goes: private storage that only our service can read, and one worker machine that renders the audiobook. Nothing is published, shared or used to train any model.
- When it is deleted: the recording and the text are deleted from our storage the moment the audiobook is ready (and also if the job fails or you press "Delete everything now"). The finished audio stays until you delete it or for about 24 hours, whichever comes first. "Delete everything now" removes it immediately.
- What is kept: a job record with counts only (state, characters, language, plan, audio length, timestamps) for up to 30 days, then deleted. It contains no audio and no text. If you are signed in, the record is linked to your account; visitors are anonymous. To enforce the daily limits we store a one-way hash of your IP address that changes every day - never the address itself - and anonymous counters (visits, jobs, minutes, button clicks) without cookies.
- The audiobook is AI-generated speech in your voice. You must label it as such when you share it.
CHILDREN
The Software is not intended for anyone under 18.