Privacy Policy

Effective date: 14 August 2026

Who we are: We're Not Here To Fk Spiders Pty Ltd (ACN 690 496 309), trading as Mio Travel ("Mio", "we", "us", "our").

Coverage: This policy explains how we handle personal information across the Mio mobile app (iOS and Android), our website, and related services (the "Services").

Plain-language summary

We collect a phone number or email address to create and secure your account, or you can sign in with Google or Apple.
With your permission, the app uses your device's location to centre the map and show nearby saved places, and your photo library if you choose to set a profile picture or collection cover.
We collect device, usage, diagnostics, subscription, and advertising-interaction data to run, secure, improve, and market the Services and to measure our promotional campaigns.
If you choose to connect Mio to an external service or AI assistant, we share only the information needed to provide the feature you request.

1) Information we collect

A. Account information

Phone number or email address (used to sign up, log in, and recover your account) and linked to your user account. We send a one-time verification code by SMS or email to confirm it's you.
Google or Apple sign-in (if you choose it): we receive a unique account identifier and, where available, your name and email from the provider to create or link your account.
Optional profile details you choose to add (e.g., name, username, and a profile picture).
Birth year and gender (optional; asked during onboarding, and you can skip either question). We use birth year to generate a broad age bracket (e.g., 25–34) for aggregate usage analytics, shared with our analytics provider (see “When we share information” below). Gender is stored on your account; we do not currently use it for analytics, personalisation, or any other feature.

B. Content you save

Links to videos you share into the app (e.g., TikTok or Instagram), and the places, collections, trips, and notes you create from them.
Photos you choose to upload as a profile picture or collection cover.

C. Location (with permission)

If you grant permission, the app uses your device's location to centre the map on you and show nearby saved places. Today this happens only while you are using the app, and the map works without it.
If we add features that use your location at other times (for example, notifications or widgets that alert you to saved places nearby), we will ask for the permission those features need before they use it.

D. Photos (with permission)

If you choose to set a profile picture or a collection cover, the app opens your photo library so you can select an image. Only the image you select is uploaded; we do not access your wider photo library.

E. Usage, device, diagnostics & marketing data

We automatically collect technical data when you use the Services, such as:

Device type, operating system, app/website version, browser, language, time zone
Device, app, account, and advertising identifiers, where available and permitted
IP address (for security, fraud prevention, and campaign measurement)
Interactions, in-app actions, performance metrics, crash logs, error reports, and diagnostics (collected via our analytics and crash-reporting providers. See “When we share information”.)
Information about how you reached or interacted with Mio or our advertisements, such as referral links, campaign information, ad interactions, installs, and conversions

We use this information to operate, secure, debug, and improve the Services and for the advertising, marketing, and measurement purposes described below.

F. Notifications

If you enable notifications, we store a push notification token for your device so we can send you reminders and updates about the Services. You can turn notifications off at any time in your device settings.

G. Purchases

If you subscribe, the purchase is processed by Apple's App Store or Google Play and our subscription provider (RevenueCat). We receive a record of your subscription status, trial and subscription lifecycle events, limited purchase details, and a transaction identifier to unlock paid features, manage subscriptions, and understand and measure conversions. We do not receive or store your card number or full payment details.

H. Communications & support

Messages you send us (support requests, feedback).
Your preferences (e.g., notification settings).

I. AI features and connected services

Mio uses automated systems and service providers to extract places from content, organise saves, make recommendations, and help plan trips. We process the content and instructions needed to provide those features.
If you choose to connect Mio to an external service, including an AI assistant, we may receive an account identifier, connection details, requests you make through that service, and the Mio information needed to answer those requests. The external provider also handles information under its own terms and privacy policy.

If we introduce new data types or new purposes, we'll update this policy and seek any required permissions/consents first.

2) How we use information

We use the information above to:

Create and maintain your account (linking your phone number, email, or Google/Apple identity to your account for login, verification, and recovery)
Provide the core features, including saving places from videos, organising them into collections and trips, and showing them on the map (including using your location, while the app is open and with your permission, to surface nearby saves)
Provide AI and connected-service features, including extracting place information, generating recommendations and trip plans, and exchanging the information needed to complete a request you make through a connected service
Send notifications you've enabled, using your push token
Process and manage subscriptions and unlock paid features
Operate, maintain, and improve the Services (using usage/device/diagnostics data for reliability, performance, security, analytics, and product improvement)
Advertise and market Mio, including attributing installs and conversions, measuring campaign performance, creating or managing advertising audiences, personalising or delivering advertising for Mio, preventing advertising fraud, and improving our marketing. If we feature content you submitted in our marketing, we only use content you have made public or unlisted, or that you have given us permission to use
Prevent abuse and fraud, secure accounts, and enforce our Terms
Provide support and respond to your requests
Comply with legal obligations

3) Legal bases (Australia)

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Collection (APP 3). We only collect personal information that is reasonably necessary for our functions or activities. We collect sensitive information only with consent or where another exception applies.
Notice (APP 5). When we collect personal information, we take reasonable steps to notify you of key matters about that collection (our “collection notice”).
Use & disclosure (APP 6). We use or disclose personal information only for the primary purpose for which it was collected, for a related secondary purpose you would reasonably expect, with consent, or where required/authorised by law.
Direct marketing (APP 7). We may use or disclose personal information to market Mio and measure that marketing where permitted. We comply with APP 7 and other applicable marketing laws, including providing a simple opt-out and obtaining consent where required.
Cross-border disclosures (APP 8). If we store or process personal information overseas, we take reasonable steps to ensure the recipient will handle it consistently with the APPs, and we remain accountable where required.
Access & correction (APPs 12–13). You may request access to, or correction of, your personal information.
Notifiable Data Breaches (NDB). If an eligible data breach occurs that is likely to cause serious harm, we will notify affected individuals and the OAIC in accordance with Part IIIC of the Privacy Act.

How this applies to us

Phone numbers → accounts. We collect and link your phone number to your account to create, secure, and support your account (primary purpose) and to send essential service communications.
Usage, device & marketing measurement. We collect and use relevant technical, usage, subscription, and campaign information to operate, secure, improve, advertise, and measure the Services as described in this policy.

4) Legal bases (EEA/UK)

If you are in the EEA/UK, we process personal data under:

Contract: To provide the Services (e.g., account creation using your phone number).
Legitimate interests: To secure, debug, and improve the Services and, where permitted, to market Mio and measure the effectiveness of our marketing (e.g., diagnostics, fraud prevention, attribution, and campaign measurement).
Consent: Where required by law, including for certain identifiers, tracking technologies, or advertising activities. You may withdraw consent at any time by contacting us or through any controls we make available.

5) When we share information

We may share relevant information with:

Service providers, including cloud hosting and storage, product analytics and crash/diagnostics reporting, SMS and email verification, push-notification delivery, subscription/payment processing, and providers that support extraction, search, recommendations, and trip planning.
Advertising, attribution, analytics, and measurement partners that help us market Mio, attribute installs and conversions, measure campaign performance, create or manage audiences, prevent fraud, and improve our marketing. Information may include identifiers, device and app information, campaign interactions, usage events, and subscription or purchase events relevant to those purposes.
External services you choose to connect, including AI assistants such as services provided by Anthropic or OpenAI. We disclose only the information reasonably needed to provide the connected feature you request. You can disconnect the service through the provider or any connection controls we make available.
Authorities or third parties if required by law or to protect rights, safety, or the Services.
Business transfers (e.g., merger or acquisition), where your data remains protected under this or a successor policy with comparable protections.

Depending on the relationship and applicable law, these recipients may process information on our instructions, as independent organisations, or under their own terms and privacy policies.

6) International transfers

Your information may be stored or processed in countries other than where you live. We use appropriate safeguards where applicable (e.g., contractual protections).

7) Data retention

Account information and saved content (phone/email, sign-in identity, profile details, saved places, collections, and trips): kept while your account is active. When you delete your account, this data is removed (see “Your rights & choices” below). We may keep a limited record for a reasonable period afterward where needed for security, fraud prevention, or legal requirements, including transaction and subscription records we keep for tax, accounting, and fraud-prevention purposes.
Location: used in the moment to position the map and is not retained as a location history.
Diagnostics, analytics & attribution: data we hold ourselves is retained for the minimum period needed for security, debugging, and improvement, then deleted or de-identified. When you delete your account, we stop associating new analytics with your profile, although some technical identifiers may continue to reach our providers from your device until you uninstall the app. Deletion does not automatically delete or de-identify the history already held by our analytics, crash-reporting, and attribution providers; that data persists under those providers' own retention terms unless we separately request its removal.

8) Your rights & choices

Depending on where you live, you may have rights to:

Access, correct, or delete your information (including access/correction rights under the APPs in Australia)
Port your data (where applicable)
Object to or restrict certain processing (where applicable)
Withdraw consent (where processing is based on consent)
Opt out of or object to direct marketing, targeted advertising, or the sale or sharing of personal information where those rights apply

Deleting your account. You can permanently delete your account and its data at any time from within the app: Profile > Delete account. This removes your account, saved places, collections, trips, and associated profile information. You can also request deletion by contacting us at the address below; see mio.travel/delete-account for full instructions.

Deleting the Mio app or your Mio account does not cancel an App Store or Google Play subscription. Cancel the subscription in your store settings before deleting your account if you do not want it to renew.

To exercise rights, contact us at [email protected]. You can disable non-essential cookies in your browser; essential cookies are needed to provide the Services.

United States residents: under some US state privacy laws, certain disclosures to advertising or measurement partners may be considered a “sale”, “sharing”, or targeted advertising even when no money is exchanged. Where those laws apply to you, you may submit an opt-out or other privacy request by contacting us at [email protected], and we will honour it as required by the applicable law. We will not discriminate against you for exercising an applicable privacy right.

9) Security

We use administrative, technical, and organizational measures to protect your information. No method of transmission or storage is 100% secure, but we continuously improve our safeguards.

10) Children

You must be at least 16 to create or keep a Mio account. If you are under 18, you must have permission from a parent or legal guardian. If you believe someone under 16 has provided personal information, contact us so we can review and delete it where appropriate.

11) Changes to this policy

We may update this policy from time to time. If changes are material, we will provide notice in the app, by email, or through another prominent method. We will ask for express acceptance where required by law or where the nature of the change makes it appropriate.

12) Contact us

Email: [email protected]