Privacy Policy

1. Introduction

Mizu ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use the Mizu mobile application and website, how we use it, and the choices you have.

By using Mizu, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account information

When you create an account, we collect:

• Full name and email address
• Profile photo (optional)
• Authentication provider identifier (Google, Apple, or Facebook user ID)
• Preferred language and currency settings

Shopping data

As you use the app, we store:

• Shopping lists, including names, emojis, colors, budgets, and due dates
• Products added to lists: name, brand, category, price, quantity, store, status, and photos you upload
• Spending history derived from completed lists
• Receipts imported via photo (the extracted product and price data, not the original image after processing)

Collaboration data

When you share lists with others, we store participant relationships and the role assigned to each participant (owner, editor, or viewer).

Notifications

With your permission, we store a push notification token to send you reminders and collaboration updates. You can revoke this permission at any time in your device settings.

Usage data

We may collect anonymized, aggregated data about how features are used to improve the product. This data cannot be used to identify individual users.

3. How We Use Your Information

• Provide the service — sync your lists, show spending analytics, enable collaboration
• AI features — voice transcription, image recognition, and receipt parsing use the content you submit only to process and return results; inputs are not used to train models
• Push notifications — send reminders you have set and collaboration activity alerts
• Product suggestions — personalize in-app suggestions based on your shopping history within your account only
• Improve Mizu — analyze anonymized usage patterns to fix bugs and prioritize features

4. Third-Party Services

Mizu uses the following third-party services, each subject to their own privacy policies:

• Firebase (Google) — authentication and push notifications. Privacy policy
• OpenAI — voice transcription, image recognition, receipt parsing, and product suggestions. Data submitted for processing is not used to train OpenAI models under our API agreement. Privacy policy
• Cloudflare R2 — product photo storage. Files are stored in encrypted form and are only accessible to authorized users. Privacy policy
• Upstash — scheduled reminders (QStash) and temporary AI result caching (Redis). Data is not persisted beyond its functional purpose. Privacy policy

We do not sell your personal data or purchase history to any third party.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on a cloud provider in a secure environment. All data is encrypted in transit (TLS) and at rest. Access to the database is restricted to authenticated requests and internal services only.

Product photos are stored in Cloudflare R2 and are only accessible via authenticated, time-limited signed URLs.

6. Data Retention and Deletion

We retain your data for as long as your account is active. You can permanently delete your account and all associated data — lists, products, spending history, photos, and profile — at any time from the app settings. Deletion is irreversible and completes within 30 days.

7. Children's Privacy

Mizu is not directed to children under 13 (or under 16 in applicable jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email. Continued use of Mizu after such changes constitutes your acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at: