Privacy Policy

This Policy explains what data Mimolet processes, why it is needed, who can see it, how you can manage your data and what security limits exist. It applies to the website, the Telegram bot t.me/mimoletbot, the Android app and the payment and communication features of the service.

1. Who is the operator

The operator of Mimolet is MVP Software Technologies LLC, a company registered in the United Arab Emirates under registration No. (CBLS) 12033186, with its registered office at Shared Desk, Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, United Arab Emirates. For questions about personal data, account deletion, security, payments and legally significant notices, write to mimoletorg@proton.me.

2. Age, legal capacity and age assurance

Registration on Mimolet is permitted only to users aged 16 and over. By registering, signing in or continuing to use the Service, you confirm that you are at least 16. If applicable law sets a higher minimum age for a particular feature, that threshold applies. Users aged 16 or 17 may use the Service only within their legal capacity and with the consent of a parent or legal guardian where required. Paid features may be purchased only where the user has the relevant legal right or consent.

We do not routinely identify every user by passport and do not retain passport copies merely to grant access. Users ordinarily state their own age. Where applicable law or the level of risk requires it, additional proportionate age-assurance or age-estimation methods may be used with data minimization. For users in the United Arab Emirates, age assurance is applied in accordance with the Child Digital Safety legislation, Cabinet Resolution No. 106 of 2026 and its transitional implementation requirements. No method can absolutely guarantee every user's age. We review reports and credible signals, may restrict access during review, and block or delete an account established to belong to a user under 16.

3. What data we may process

Depending on how you use Mimolet, we may process:

• account identifiers: Telegram ID, internal profile ID, email, phone, name, username, authentication and session data;
• profile data: name, age, city, country, gender, dating goal, description, height, weight, interests, artists, music, MBTI, zodiac sign, subcultures, lifestyle and other profile fields;
• user content: photos, videos, avatars, voice intros, messages, chat media, reports and support replies;
• in-service activity: likes, dislikes, matches, views, visitors, filters, blocks, reports, participation in chats, calls and other features;
• payment details: chosen plan, amount, subscription term, payment status, email for the receipt, order and payment identifiers, and recurring-consent information;
• technical data: IP address, date and time of requests, browser, device, operating system, WebView, cookies, session ID, remember token, technical events, errors and abuse signals;
• Android permission data, where you grant access yourself: camera, microphone, photos, videos and files needed for the features you choose.

4. How data is used

We use data to:

• create, display and update your profile;
• recommend profiles, apply filters and show compatibility, interests, photos and videos;
• power likes, dislikes, matches, visitors, conversations, group chats, reports, calls and notifications;
• authenticate you, maintain your session and protect your account from unauthorized access;
• take payment, grant Plus, Premium and Ultra subscriptions, keep a purchase history and process recurring payments;
• moderate content, respond to reports and fight spam, fraud, fakes, harassment and legal violations;
• handle support, account-deletion, refund and legal requests;
• keep the service running, fix errors, improve the interface and prevent abuse;
• comply with the law, court orders and lawful requests from authorized bodies.

5. What other users can see

Mimolet is a dating service, so part of your profile data is deliberately shown to other registered users: name, age, city, photos, videos, description, interests, goals, activity signals, likes, matches and the messages you choose to send.

You decide what information to add to your profile and messages. Do not put identity documents, your home address, banking details, intimate material or other sensitive information into your profile or chats if you do not want other people to see it.

6. Telegram bot, website and Android app

Mimolet is available as a Telegram bot t.me/mimoletbot, as a web service and as an Android app. The Android app may act as a shell that opens Mimolet functionality inside the app, and may request device permissions only for features you can clearly understand: uploading photos and videos, recording media, voice and video features.

Telegram, the Android operating system, the app store, your browser, your bank or a payment system may process your data independently under their own rules. Mimolet does not control their internal policies but uses them only where needed to run the feature you have chosen.

7. Recurring payments and subscriptions

Mimolet offers paid Plus, Premium and Ultra subscriptions. When buying a subscription you may consent to recurring payments, that is, automatic renewal. Until auto-renewal is turned off, Mimolet may initiate further charges in line with the chosen plan, the published price and the terms shown on the payment page.

For Plus on 1, 3 and 7 days, the next period after the first short period is charged as Plus for 30 days unless you turn off auto-renewal before the next charge. For Premium and Ultra, the term and price are shown before payment. You can turn off auto-renewal in your profile, menu and settings at any time; after that, future recurring charges under that consent should no longer be made, and an already paid period remains available until it ends, unless the account is blocked for a rules violation.

8. Data sharing and third parties

We do not sell personal data and do not pass it to third parties for their own advertising, resale or independent use. However, certain data may become available to:

• other users, when this is part of profiles, likes, matches, messages, reports and communications;
• providers of infrastructure, hosting, file storage, media delivery, email, security analytics and payment organizations, where needed to run the service;
• payment systems, banks, fiscalization operators and other participants in the payment chain for payment, receipts, refunds, anti-fraud and legal compliance;
• moderators and authorized Mimolet staff or contractors, to the extent needed for support, security and handling reports;
• government authorities, courts or other persons, where disclosure is required by law, a lawful request, or to protect rights, user safety or the interests of the service.

Where we engage a data processor, it must use data only for the assigned operation and may not deal with it as its own. Because Mimolet is an international service, data may be transferred and stored in countries other than your own; such transfers are made only with the safeguards required by applicable law.

9. Scraping, IDOR, workarounds and offender liability

Mimolet does not itself hand user data to third parties for unlawful collection. However, no public or semi-open service can guarantee absolute protection against people who try to scrape profiles, automate data collection, bypass the interface, exploit IDOR, authorization flaws, other people's accounts, malware or other unlawful means.

Such actions are prohibited. Anyone who obtains, copies, distributes or uses Mimolet data through workarounds, without the user's consent and/or without Mimolet's permission, acts on their own and is liable under the law, including rules on unlawful access to information systems, breach of data protection law and of database rights, damages and other consequences. Mimolet may block such actions, restrict accounts, contact hosting providers, payment systems and law enforcement, and seek compensation.

10. Data storage and retention periods

Mimolet stores and processes data in line with applicable data protection law. Cross-border data transfers are made only with appropriate safeguards and only to the extent needed to run the service. Retention depends on purpose: an account is kept while you use the service; payment and accounting records are kept for the periods required by law; reports, security logs and records of violations may be kept longer where needed to protect users, investigate, resolve disputes, prevent fraud or comply with the law.

After an account is deleted, the active profile is deleted or anonymized within a reasonable period. Technical backups, security records, payment documents, report records and already delivered messages may be retained for a limited time where required for technical, legal, accounting or protective reasons.

11. Cookies, sessions and technical identifiers

Mimolet uses cookies, PHP sessions, a remember token and similar technical identifiers to keep you signed in, keep the service stable and detect suspicious activity. You can delete cookies in your browser, but you may then need to sign in again.

12. Data security

We apply reasonable technical and organizational measures: access controls, authorization, server-side storage, logging of important events, protection against mass abuse, moderation, limits on suspicious activity and secure payment handling through payment partners. No website, bot, app, communication channel or database is absolutely secure. You should also protect your Telegram account, email, device and payment methods.

13. Your rights

You can:

• edit your profile data in the Mimolet interface;
• delete photos, videos and other media available to you;
• turn off subscription auto-renewal in your profile, menu and settings;
• request deletion of your account and related data;
• raise questions about data processing, correction, restriction of processing or deletion;
• report other users, content, minors, fraud or violations.

To handle a request we may ask for data needed to confirm account ownership. Where a request concerns data we must keep by law, for payments, security, a dispute or to protect other users, we may refuse it in whole or in part to the extent permitted by law, explaining the reason. Depending on your country of residence, you may also have rights before a competent data protection authority.

14. Changes to this Policy

We may update this Policy when the service, features, payments, the law or our security approach change. The new version is published on this page. Continued use of Mimolet after publication means you accept the updated version to the extent permitted by law.

15. Contact

For questions about privacy, personal data, account deletion, reports, security, payments and recurring charges, write to mimoletorg@proton.me.

This Policy does not override mandatory rights you may have under applicable data protection and consumer law, including in your country of residence. If any provision turns out to be unenforceable, the remaining provisions continue to apply to the maximum extent permitted by law.