Privacy
Mitta keeps what it needs to be a companion who remembers you, and nothing else. This is what that means.
- Mitta is run by Stringlearning ApS (CVR 35673539), Sankt Annæ Plads 13, 3., 1250 København K, Denmark — the company behind Seier AI — which is the data controller for everything below.
- You make your account yourself, with your name and email address; we send one link to that address to confirm it, and nothing else is asked. A sign-up that is never confirmed is deleted after a week.
- Conversations are kept as text so that Kalyāṇa can remember you across them. No audio is ever stored or logged — not yours, not its.
- What it remembers about you is written as short attributed notes you can read on your Memory page, download, and delete. Deleting a conversation deletes what was learned from it.
- Speech is transcribed and spoken by ElevenLabs, and answers are written by a language model reached through OpenRouter. They receive the text of the exchange to do their work. OpenRouter is set to keep nothing and train on nothing. We ask ElevenLabs on every request to keep nothing; on our current plan it does not honour that, and may keep what it hears and says for its own operations under its privacy policy. We are working on closing that gap.
- Data is stored in the European Union. Logs carry identifiers, counts and timings, never the content of a conversation.
- What you say is sealed at rest: conversations, memories, titles, the note before a meditation and your feedback are encrypted in the database under a key held only by the servers, so a backup, a dump or anyone with access to the database sees nothing readable. The servers open the text to answer you; the speech and language-model providers receive it to do their work. We do not read your conversations. Because the servers hold the key this is not end-to-end encryption — we are able to open the text, and a valid legal order from a public authority or a court can require us to disclose it; short of that, no one at Stringlearning ApS reads what you say. The data is stored in the EU and kept at most ninety days.
- The app sets a session cookie, and a cookie holding your language if you chose one before signing in. Nothing else is stored in your browser about you.
- If a conversation shows signs of crisis, the app shows helplines for your country. It never contacts anyone on your behalf.
- Everything you have said — conversations, memories, meditations — can be deleted by you at any time under Settings, keeping your account; and so can the account itself, with everything in it. Both are done at once, not on request.
- We send a short mail now and then when something new is in the app. It is on by default and off with one tap under Settings. Feedback you send from inside the app reaches the people who build Mitta, with your address so they can answer.
- What you post on the board is visible to everyone with a Mitta account, under your name, until you delete it, and so is a thank-you you give; we may remove a post and will say so where it stood. A post the safety net holds back is never published and stays with you alone.
- A link you add to the library is opened by our server and judged by a language model before it is published; what was judged is kept in one line for the people who run Mitta, never the page itself. It is visible to everyone with an account, under your name, until you delete it; we may remove a link and will say so where it stood.
- Credits are bought on Stripe's own payment page. Stripe receives your email and the amount; Mitta never sees your card and is told only that the payment went through. A receipt of each purchase is kept with your account.
- In Meditate together, the microphone is on only when the person leading opens the floor. What is said then is transcribed like any conversation and kept in that person’s account, never as memory about anyone, and no audio is stored.
- Why we may: the account, the conversations, the memory, the meditations and the purchases are processed to provide what you asked for (the contract); what you say can reveal your beliefs and your health, and that is processed on the explicit consent you give once, at your first sign-in, and withdraw by deleting; the safety net, the counters that keep the service running and the short mail about releases rest on our legitimate interest in running Mitta well, and the mail is off with one tap.
- How long: conversations, memories and meditations stay until you delete them or the account; a sign-up request stays ninety days; a message to support stays ninety days; purchase records stay as long as the account, and the bookkeeping copy for five years as Danish law requires; logs without content stay ninety days.
- Where it goes: the text of an exchange reaches ElevenLabs (speech) and, through OpenRouter, the language model that answers, and a payment reaches Stripe — companies in the United States, under the EU–US Data Privacy Framework or the EU's standard contractual clauses; Supabase (the database) and Fly.io (the servers) run this in the EU; Postmark carries our mail. Each works for us under a data-processing agreement and may not use what it handles for itself.
- The voice is synthetic: Kalyāṇa is a language model spoken by a generated voice, and the app says so. The helplines card is shown automatically when a conversation shows signs of crisis; no person reads your conversation to decide it, and nothing is sent anywhere.
- Your rights: to see, receive, correct and delete what is kept — the Memory page, the export and the two deletions do this without asking us; to object, and to withdraw consent, which deletion does; and to complain to Datatilsynet, the Danish data protection authority (datatilsynet.dk), if you think we have got something wrong. Write to us through the support form at mitta.seier.ai/help for anything the app itself does not do.