Privacy Policy
Last updated: 15 August 2026
This policy explains the personal information MIMO collects, how it is used and disclosed, how long it is kept, and the choices available to users. It applies to the MIMO website, browser application, and any MIMO mobile application that links to it.
Who we are
MIMO is operated by Jaylen Bell. General enquiries go to contact@iridescent.gg, privacy questions to support@iridescent.gg, and suspected security issues to security@iridescent.gg.
MIMO’s complete solo-provider toolkit and all customer features are free. Optional paid plans add shared access only for businesses and teams that need multiple business users; buying a plan does not change how MIMO handles personal information under this policy.
Two roles, and why the difference matters
MIMO has two kinds of user, and our responsibility for data differs between them.
- Service providers use MIMO to run their business. For their own account data, this policy governs how it is used.
- Customers use MIMO to find providers and book work. The same applies to their account.
- Customer records that a provider creates are different. When a provider adds someone to their address book — including people who have never used MIMO — that provider decides what to record and why. We store and protect it on their behalf, but it is their data. Requests about those records go to the provider, and we will help them respond.
What we collect
| Data | Why |
|---|---|
| Email and password | To create and secure your account. Passwords are stored only as salted hashes by our authentication provider and are never visible to us. |
| Name | To identify you to the people you work with. |
| Phone number (optional) | So a provider and customer can reach each other about a booking. |
If you are a service provider we also store your business name, time zone, public description, the services you offer with their durations and prices, your service area, the jobs you schedule with their status history, notes and photos, your MIMO plan, and whether Stripe has approved your connected account to accept customer payments.
If you are a customer we also store the service requests and messages you send, your bookings and their payment status, reviews you submit after verified work, and a search location used to find providers near you.
Turning on discovery makes your business name, description, services, prices, city and region publicly visible to customers searching. Your exact base coordinates are never returned to customers; they are used server-side only to calculate distance.
Location, photos and notifications
- Location is requested only to search for nearby providers or set a provider service base, and only while the app is open. It is never collected in the background and no movement history is built. You can decline and choose a suggested town instead. Typed towns are matched against MIMO's private index of official U.S. Census Bureau place data. A one-time foreground coordinate is used server-side to choose the nearest town label and is not sent to an outside map provider.
- Photos attached to a job are stored privately and are readable only by members of the business that owns the job. They are not public and not indexed.
- We store the notifications sent to you and whether you have read them. If you allow push notifications we store a device token so messages can be delivered; it identifies a device, not a person, and is removed when you sign out or uninstall.
What we do not collect
- No advertising identifiers, and no third-party advertising or tracking SDKs.
- No background location.
- No contacts, calendar or microphone access.
- No full card numbers or bank credentials. Stripe collects payment and payout details directly through Stripe-hosted forms and payment components; those details do not pass through MIMO servers.
How we use it
To run the service: showing your schedule, matching customers to providers, delivering booking updates, keeping accounts secure, and answering support requests. We do not sell personal information and we do not share it for advertising.
Who else processes it
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, file storage and realtime updates. |
| Vercel | Hosting for the website and account-confirmation pages. |
| Zoho / ZeptoMail | Sending account emails such as confirmation and password reset. |
| Expo push service | Delivering push notifications, if you enable them. |
| Stripe | Customer payments, provider connected accounts and payouts, MIMO provider-plan billing, refunds and payment disputes. |
Town suggestions use the U.S. Census Bureau's public Gazetteer place data stored inside MIMO; the Census Bureau does not receive your search. Choosing to navigate to a job opens Google Maps or Apple Maps, which hands the destination address to that provider and makes its own privacy policy apply.
How it is protected
- Access rules are enforced in the database itself, so one business cannot read another’s data even if application code were wrong. This is checked by automated tests that actively attempt cross-account access.
- Traffic is encrypted in transit and data is encrypted at rest by our hosting provider.
- Job photos are stored in a private bucket with per-business access rules.
- Access tokens are never written to logs.
No system is perfectly secure, but security issues are treated as urgent. Please report them.
How long we keep information
- Account, profile, service, booking, message, and business-operation records are generally kept while the account or relevant business remains active.
- After account deletion, operational records are deleted or de-identified unless they must be retained for a legitimate legal, security, tax, accounting, payment, refund, or dispute purpose.
- Payment, refund, dispute, fraud-prevention, and tax records may be retained for the period required by law or reasonably needed to establish, exercise, or defend legal claims.
- Public contact requests are normally deleted after 180 days. A request may be kept longer when needed to complete the request, comply with law, or preserve a legal hold.
- Local drafts stay on the user’s device until submitted, discarded, cleared, or removed by signing out or deleting application data.
Deleting your account
You can delete your account from inside the app, under Settings for providers or Profile for customers. Deletion is permanent and takes effect immediately.
- Your sign-in, profile, notifications and device tokens are deleted.
- If you are the only owner of a business, that business is deleted along with its services, jobs, photos and customer records.
- If a provider holds a record of you as their customer, their business record of the work remains theirs, but it is unlinked from your MIMO account. Ask that provider directly if you want it removed.
- We may retain limited payment, refund, dispute and tax records where the law requires or where they are needed to protect users and resolve financial claims. These records are detached from deleted operational profiles where possible.
Your rights
You can request a copy of your data, correct it, or have it deleted through the secure form at https://www.iridescent.gg/contact or by emailing support@iridescent.gg. Depending on where you live you may also have the right to object to certain processing or to complain to a data protection authority. Much of your data can be edited directly in the app.
Children
MIMO is intended only for adults who can enter a binding contract. Users must be at least 18 years old. We do not knowingly allow anyone under 18 to create an account. Tell us if you believe a minor has provided information to MIMO and we will investigate and remove it where appropriate.
Changes
We will update this page and the date at the top when our practices change. When a change materially affects users’ rights or how personal information is handled, we will provide notice in the app, by email, or through another reasonable method before the change takes effect when the law requires it.