Privacy Policy

Last updated: 14 August 2026

This Privacy Policy explains how MimicLabs ("MimicLabs", "we", "us", or "our") collects, uses, and shares personal information when you use the Decoder mobile application and related services (the "Service"). MimicLabs is based in Sydney, New South Wales, Australia. If you have any questions, contact us at support@mimiclabs.au.

1. Information we collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address and a user identifier. If you sign in using a third-party sign-in option, we receive the information that provider shares with us, which may include your name and email address, or a private relay email address if you choose to hide it.
• Onboarding preferences. Optional answers you provide during setup, such as the kinds of documents you deal with and how you describe yourself. These are used to tailor the explanations you receive.
• Decode history. For each document you process, we store the resulting analysis, which includes a short document name and type, the findings, and short verbatim excerpts from the document that support each finding. We also store related metadata such as the time of processing, the size of the input, and the processing cost.
• Device identifier. A randomly generated identifier stored on your device, used in hashed form to administer free trial eligibility. It does not identify you personally.
• Subscription information. Records of your subscription status and transactions, received from the app distribution and payment platform. We do not receive or store your full payment card details.
• Monitoring data. If you turn on active monitoring for an agreement, we store the address of the vendor page being watched, a copy and short excerpts of that publicly available page so changes can be detected and quoted, the reports Decoder produces about those changes, and records of each scheduled check, such as its timing, outcome, and processing cost. Monitoring only watches pages you ask Decoder to watch.
• Notification token. If you enable notifications, we store the device token issued by your device's operating system so we can deliver the alerts you have asked for. It is removed when your device unregisters or when you delete your account.
• Usage allowances. Counts of certain actions, such as plan searches and page reads, kept briefly to apply fair-use limits.
• Technical and usage information. Information generated when you use the Service, such as IP address, device and operating system information, and server logs, used for security, diagnostics, and to operate the Service.

2. The documents you submit

When you submit a document to be analysed, the text of that document is sent to our third-party artificial intelligence provider for processing in order to generate the analysis. The full text of your document is processed in memory and is not stored by MimicLabs. What we retain is the resulting analysis, which may include short verbatim excerpts quoted from the document. If you do not want a particular document or its excerpts retained, you can delete that item from your history, or delete your account, at any time. This guarantee is about the documents you submit; pages Decoder monitors at your request are public vendor pages and are stored as described in Section 1.

2a. Photos and location when you snap something

The app includes a feature for photographing real-world things you want explained (for example, parking signs, labels, meters, and notices). When you use it, the photo is sent to our third-party artificial intelligence provider to generate the analysis. The photo is processed in memory and is not stored by MimicLabs. What we retain is the resulting analysis, which may include short transcriptions of text visible in the photo.

If you grant the app location access, a single approximate location reading is taken at the moment you snap, converted on your device to a short street-level description, and sent with that one request so the analysis can reflect where and when the sign applies. Your location is used only for that request. It is not stored by MimicLabs, is not used to track you, and is never collected in the background. Location access is optional: you can decline the permission or turn it off in your device settings, and the feature still works without it. The time and time zone shown on your device are sent the same way, so the analysis can say whether a rule applies at that moment.

3. How we use information

We use the information we collect to:

• provide the Service, including processing your documents and returning the analysis;
• create and manage your account and administer your subscription and any free trial;
• maintain a history of your analyses so you can return to them;
• run the monitoring you turn on and deliver the alerts and summaries you enable;
• apply fair-use limits;
• show you options relevant to your own agreements, such as an alternative plan for a service you already pay for, if you use features that offer them;
• operate, secure, debug, and improve the Service, and enforce our Terms and usage limits;
• respond to your requests and provide support;
• comply with legal obligations.

We do not sell your personal information. We do not use your information for third-party advertising, and we do not share your documents or your identity with advertisers or merchants.

Decoder may suggest options relevant to your own agreements, such as an alternative plan for a service you already pay for. Some suggestions may involve partners who pay Decoder a commission if you choose them. Partners do not receive your documents, your identity, or your history to make this happen. Any such feature will be clearly marked, and this Policy will be updated before any suggestion becomes commercial.

4. How we share information

We do not sell your personal information, and we do not share it with advertisers. We share information only with the service providers that operate the Service on our behalf, and only to the extent needed for them to perform their function. These include:

• an artificial intelligence processing provider, which processes the text of your documents, and for the snap feature the photo you snap together with the optional location description and local time, to generate the analysis. This content is not used by us, or under our arrangement by that provider, to train models;
• a database and authentication provider, which stores your account, preferences, and decode history in the Sydney, Australia region;
• the app distribution and payment platform through which the app is offered, which processes subscription purchases and supports sign-in;
• an email delivery provider, which sends account emails such as confirmation and password-reset messages, and supports sign-in;
• a notification delivery service operated by your device's platform, which delivers the push notifications you enable using the device token described in Section 1;
• a hosting provider, which hosts and delivers our backend service.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, property, or safety of MimicLabs, our users, or the public. If MimicLabs is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

5. International data transfers

The Service is available worldwide, and some of our providers are located outside your country of residence. For example, document text is processed by our AI provider in the United States. Where we transfer personal information across borders, we take steps to ensure it is protected in a manner consistent with this Policy and applicable law.

6. Data retention

We retain your account information and decode history for as long as your account is active. The full text of your documents is not retained, as described above. Monitoring data is kept while the watch exists and is deleted when you stop monitoring or delete your account. When you delete an item from your history it is removed, and when you delete your account we delete your account, your decode history, your agreements, your watches and their reports, your notification tokens, and your usage records; anonymous service statistics, such as model usage and cost figures with nothing about you attached, are retained. Snapshots of monitored public pages are keyed by web address, are shared across users, contain nothing about any user, and are refreshed or discarded on their own schedule. Some limited information may be retained where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Security

We use reasonable technical and organisational measures to protect personal information, including encryption in transit and database access controls, including row-level security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights in relation to your personal information, including the right to access, correct, delete, or obtain a copy of it, and to object to or restrict certain processing. You can delete your account and decode history at any time from within the app. To make any other request, contact us at support@mimiclabs.au. We will respond within the time required by applicable law.

Users in the European Economic Area and the United Kingdom

If you are located in the EEA or the UK, our legal bases for processing are the performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where applicable, and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.

Users in California

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and not to be discriminated against for exercising your rights. We do not sell or share personal information as those terms are defined under California law. If a future feature would meet California's definition of sharing, we will update this Policy and provide any required opt-out before it launches.

9. Children

The Service is not directed to, and is not intended for use by, anyone under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the date at the top of this page and, where appropriate, provide notice within the app. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

11. Contact

For any question or request regarding your personal information, contact us at support@mimiclabs.au.