MICIO — Privacy Policy

Last updated: 5 September 2026

MICIO is a game with a virtual kitten you can chat with. This page describes exactly what leaves your phone, what stays on our servers, and for how long.

Data we process

• Device identifier: an anonymous random code (UUID) generated by the app and stored in the phone's Keychain, so it survives uninstalling the app. It is used for the daily message limit, the per-minute request limit, friend visits and reports. On the server, the counters tied to it are kept for 3 days.
• Chat messages, your cat's name, memories and country: every message is sent to our server on Microsoft Azure (West Europe) together with the last turns of the conversation, the cat's state, the short "memories" the cat has of you (lines generated from the daily summaries, stored only on your device and re-sent with each message so the cat can use them) and your country code (e.g. "IT"), used only to point to a local helpline if a message signals a crisis. The server generates the reply via a language model hosted on Microsoft Azure AI and stores none of this: history lives only on your device, and our logs hold technical data only (token counts, timings, error codes), never content. Microsoft, as processor, may temporarily retain prompts and completions for up to 30 days for security and abuse prevention, with limited possible human review. Once a day, if you actually had a conversation, that day's transcript may be sent to the same service to generate a short summary: the summary comes back to your device and our server keeps neither the transcript nor the summary. Days containing sensitive subjects are never sent at all.
• MICIO+ subscription: if you subscribe, the app sends Apple's signed receipt (JWS) of your subscription with each request; the server verifies its signature to apply the higher daily limit and discards it at once — it is never stored. We receive neither your Apple ID nor any payment data.
• Friend visits and reports: when you create an invite code, the server keeps the code, your cat's name and look, and your identifier as owner for 48 hours. If a name is reported as inappropriate, the code is removed immediately and the row (reported name, owner identifier and reporter identifier) is kept for 30 days so the same name cannot come back into circulation; these rows remain even if you ask for your data to be deleted.

What we do NOT collect

No accounts, no email, no precise location, no advertising tracking.

Deletion

In Settings → "Reset identifier and delete data" the app asks the server to delete the counters and visit codes tied to your identifier and generates a new one: from then on nothing on our servers can be linked to your phone. Uninstalling the app erases local history but not the identifier, which stays in the Keychain: use that button before uninstalling if you want it gone. If iCloud Backup is on, an encrypted copy of the diary stays in your backup until you delete or overwrite it. Questions: mattiamellone@gmail.com.