Privacy Policy
Mya is a service of Almanaque Fenomenal Unipessoal Lda, based in Loulé, Portugal. This policy explains, without small print, what data we keep when you use Mya, why, where it is stored, who it is shared with and how you delete it. It applies to the website myapersonal.com and to the app at myapersonal.com/app.
Data controller
Almanaque Fenomenal Unipessoal Lda
Avenida José da Costa Mealha 34, Galerias D. Leonor, Loja 43, 8100-552 Loulé, Portugal
Email: ola@myapersonal.com · Phone: +351 913 460 591
1. What data we collect
- Account data: email, password (stored encrypted, never in plain text) and, if you sign in with Google, the name and email Google sends us.
- What you note in Mya: events, tasks, lists, notes, post-its, contacts, timetables, special dates, the messages you exchange with Mya, the memory she builds about you (the facts you tell her) and the images you send her.
- Data you fill in under settings: first name, surname, date of birth, gender and billing details (tax ID and address), all optional.
- Usage data: how many messages and images you sent each month and day, and the volume of text processed, to apply your plan's limits and calculate costs.
- Payment data: when there are payments, they are handled by Stripe; we never see or store your card number.
2. What we use it for
- To make Mya work: store and show your agenda, reply to your messages, read the images you send and remember what you tell her.
- To manage your account, your plan, usage limits and billing.
- To contact you about the account (email confirmation, password recovery, service notices). We do not send advertising without your consent.
The legal basis is the performance of the contract with you (providing the service), compliance with legal obligations (invoicing and accounting) and, for anything optional, your consent.
3. Where it is stored and who else processes it
- Supabase (database and authentication): your data is stored on servers in the European Union.
- Anthropic (Mya's artificial intelligence): each message you send, together with the necessary context from your agenda, your memory and images, is sent to Anthropic's API to generate the reply. Anthropic processes this data in the United States under EU standard contractual clauses and, according to its API policy, does not use it to train models.
- Google: only if you choose "Continue with Google", to confirm who you are.
- Stripe: for payments, when they exist.
- Web hosting of the site and app in Portugal/EU.
We do not sell your data or share it with advertisers.
4. How long we keep it
For as long as you have an account. When you delete the account, everything you noted is deleted immediately and permanently; backups are erased within 30 days at most. Billing data (issued invoices) must be kept for the legal period of 10 years, as a tax obligation.
5. How to delete your data
In the app: Settings ⚙ → "Your account" → Delete my account. It asks you to confirm twice and deletes the account and all data, without needing to contact us.
By email: write to ola@myapersonal.com from the account's email, with the subject "Delete account". We handle it within 5 working days and confirm to you.
You can also delete things individually inside the app (an event, a note, a fact in Mya's memory: "forget that") at any time.
6. Your rights
You have the right to access your data, correct it, request a copy (portability), restrict or object to processing and delete it. For any of these requests write to us at ola@myapersonal.com. If you believe we are not complying, you can lodge a complaint with the Portuguese data protection authority, CNPD (cnpd.pt), or with your local supervisory authority.
7. Cookies and local storage
The site does not use advertising or tracking cookies. The app stores in your browser only what is essential to work: your signed-in session, the chosen theme, language and the view you were on. We do not use third-party analytics tools.
8. Minors
Mya is intended for users aged 18 and over. We do not knowingly collect data from minors. If we learn that an account was created by a minor, we close it and delete the associated data.
9. Security
All communication is encrypted (HTTPS). Each person can only read and write their own data, enforced at the database level. The access keys to the artificial intelligence stay on the server and never reach your browser.
10. Changes
If we change this policy in a relevant way, we will notify you by email or in the app before it takes effect. The current version is always on this page.