Privacy Policy

This Privacy Policy explains how Mimo Baby DPK ("mīmo", "we", "us", or "our") collects, uses, and shares your personal information when you visit our website at https://mimo.baby (the "Website") and sign up to our waitlist.

We are the controller responsible for your personal information. If you have any questions, you can reach us at hello@mimo.baby or at the contact details set out at the end of this Policy.

1. What information we collect

Information you provide to us

When you sign up to our waitlist through the form on our Website, we collect the personal information you choose to give us, namely your name and email address. You do not create an account with us, and we do not ask you to set a password.

We do not collect any sensitive personal information (such as health data, racial or ethnic origin, political opinions, or biometric data) through this Website.

Information collected automatically

When you visit our Website, some information is collected automatically. This does not directly reveal your identity but may include:

• Log and usage data — technical information our servers automatically collect when you access the Website, such as your IP address, browser type, the pages you view, and the dates and times of your visit.
• Device data — information about the device you use to access the Website, such as device and browser characteristics and operating system.

We do not use GPS or similar technologies to collect precise geolocation data. Our analytics provider derives only an approximate country from your IP address and does not store the IP address itself.

Google API Services

Our Website uses Google API Services, specifically Google reCAPTCHA (to protect our form from abuse) and Firebase (to host the Website and store form submissions). Information collected through these services is handled as described in this Policy and in Google's own privacy terms.

We do not collect personal information about you from any other source. All personal information comes directly from you.

2. How we use your information

We use the personal information we collect for the following purposes:

• To send you marketing and promotional communications — for example, updates about mīmo, our waitlist, and our product launch. You can opt out of these communications at any time (see Section 9).
• To operate and protect our Website — including keeping the signup form secure, preventing automated abuse, and understanding, in aggregate, how the Website is used.

We do not use your information to provide a paid service or to fulfil a contract, because we do not sell anything through this Website and you enter no contract with us by joining the waitlist.

3. Legal bases for processing

Under the EU General Data Protection Regulation (GDPR) and equivalent laws in the UK, Switzerland, Iceland, Liechtenstein, and Norway, we must have a valid legal basis to process your personal information. We rely on the following:

• Consent — we process your name and email address, and send you marketing communications, on the basis of the consent you give when you submit the signup form. You may withdraw your consent at any time.
• Legitimate interests — we process log, usage, and device data, and run bot-protection and cookieless analytics, on the basis of our legitimate interest in keeping our Website secure and understanding how it is used. We balance these interests against your rights and freedoms.

4. When and with whom we share information

We share your personal information only with the third-party service providers that help us operate our Website and communicate with you. We have data processing agreements in place with each of them. These providers are:

We do not offer AI-based services, we do not accept online payments, we do not allow users to upload or post content, and we do not display third-party advertising. We do not share your information with business affiliates or partners, and we do not sell your personal information.

5. Cookies and tracking technologies

We do not use cookies, web beacons, or similar tracking technologies to track you across the Website, and we do not use Google Analytics. Our analytics are provided by Plausible, which is cookieless, does not use persistent identifiers, and does not identify individual visitors. Because we set no tracking cookies, no cookie-consent banner is required.

When you submit the signup form, limited functional storage may be created by Google reCAPTCHA and Firebase to operate the form and prevent abuse. This is strictly functional and is not used for tracking or advertising.

6. How long we keep your information

We keep your name and email address until you unsubscribe or ask us to delete your data, after which we delete them. We keep automatically collected technical data only for as long as necessary for the purposes described above.

7. How we keep your information safe

We have implemented appropriate technical and organisational security measures designed to protect your personal information, including:

• Firestore security rules that allow the form to create records only, with no public read access;
• Google App Check together with reCAPTCHA v3;
• encryption of data in transit and at rest across Google's infrastructure;
• no secrets stored in client-side code;
• a honeypot field on the form to deter bots;
• collecting only the minimal data we need.

No method of transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours where required, and affected individuals where the law requires it.

8. Information from minors

Our Website is directed at parents and other adults. We do not knowingly collect data from, or market to, children under 18 years of age. If you believe we have collected information from a minor, please contact us at hello@mimo.baby and we will delete it.

9. Your privacy rights

Depending on your location and applicable law, you may have the following rights in respect of your personal information: the right to access, correct, update, or request deletion of your data; the right to object to or restrict its processing; the right to data portability; and the right to withdraw consent at any time where we rely on consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

You can unsubscribe from our marketing emails at any time by using the unsubscribe link in any email, or by emailing us at hello@mimo.baby.

To exercise any of these rights, email us at hello@mimo.baby or visit /en/privacy. We will respond in line with applicable data protection law. If you are in the EEA, the UK, or Switzerland and believe we have not addressed your concern, you also have the right to lodge a complaint with your local data protection supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (Комисия за защита на личните данни).

10. International transfers

Our servers and service providers are located in Germany (Frankfurt — Cloud Firestore and Plausible Analytics) and the United States (Firebase Hosting, Google reCAPTCHA, and Resend). Some of our providers are also located in Estonia. This means your personal information may be transferred to, and processed in, countries outside the European Economic Area.

Where we transfer personal information outside the EEA/UK, we rely on the European Commission's Standard Contractual Clauses to ensure an adequate level of protection for your data.

We have not appointed an EEA or UK representative, as we are established in the European Union and are not required to do so. We have not appointed a Data Protection Officer, as we are not required to at our current scale.

11. Bot protection

When you submit our signup form, we use Google reCAPTCHA v3 to verify that you are not an automated bot. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. We use this solely to protect our form from abuse.

12. No tracking cookies

We use no tracking or advertising cookies on this website. Our analytics provider, Plausible, is cookieless and does not identify individual visitors, and all analytics data is processed and stored within the European Union. When you submit our signup form, functional storage may be used by Google reCAPTCHA and Firebase to operate the form and prevent abuse — this is not used for tracking or advertising.

13. Updates to this Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Effective date" at the top of this Policy and will take effect as soon as it is accessible. We encourage you to review this Policy periodically.

14. How to contact us

If you have questions or comments about this Policy, you can contact us:

Mimo Baby DPK (trading as mīmo)
bul. Aleksander Stamboliyski 205, Sofia 1309, Bulgaria
EIK (company registration number): 208846876
VAT number: BG208846876
Tel: 0895531893
Email: hello@mimo.baby

15. How to review, update, or delete your data

You have the right to request access to the personal information we collect from you, to change that information, or to delete it. To do so, email us at hello@mimo.baby or visit /en/privacy.