Mixova← back to Mixova

Privacy Policy

Last Updated: October 27, 2026

This Privacy Policy explains what information Mixova collects on mixova.app, why we collect it, and what you can do about it. Mixova is in pre-launch: the Android app is still being built, and right now the website is used to run a waitlist and a short survey. When the app launches, we will update this policy to cover it.

1. Who We Are

Mixova is built and operated by an independent developer, not a registered company. In this policy "Mixova", "we" and "us" refer to that developer. If you have any questions, write to me@mixova.app.

2. What We Collect

When you join the waitlist

  • Your email address
  • The language version of the site you used
  • Which form you used (for example, the founder price form) and whether you asked us to hold the founder price — no payment details are ever collected
  • A referral code, if you arrived through someone's invite link, and your own referral code
  • Campaign details from the link you followed (UTM parameters such as source and campaign)
  • Your approximate country (provided by our hosting provider from your IP address — we do not store the IP address itself) and your browser's user-agent string

When you answer the survey

  • Your answers to the multiple-choice questions
  • Anything you type into the optional text fields
  • Whether you agree to be contacted for a short interview

When you use the recipe tools

When you paste a link into one of our free recipe tools, we fetch that public page or video caption to read the recipe. We store the converted recipe and an anonymised fingerprint of the link for up to 7 days so the same link loads faster, plus a count of requests by source and outcome. If a tool can't find a recipe in a link, we keep that link itself, with tracking parameters removed, for up to 30 days so we can check what went wrong. We don't store your IP address or link the request to you. If a caption can't be read by our own parser, its text may be sent to an AI model provider (currently OpenAI) to extract the recipe; the provider receives only that public caption text, never your personal information.

When you browse the site

We use Amplitude to understand how the site is used — for example, which pages are viewed, which buttons are clicked, and how visitors arrive (referrer and campaign parameters). Amplitude may set cookies or similar identifiers and receives technical data such as your browser, device type and approximate location. The site also loads the Google Ads tag, which sets its own cookies and tells Google about your visit so we can measure our ads.

If you arrive from a Google ad, we keep the ad click identifier (for example gclid) and the search keyword with your waitlist entry. When you join the waitlist, an irreversible one-way hash (SHA-256) of your email address is sent to Google so it can tell us which ads led to sign-ups; your email itself is never sent to Google.

Stored in your browser

The site keeps a few small items in your browser's local and session storage: your waitlist entry ID and referral code (so the survey and invite link work after you sign up), and how you arrived at the site, including a Google ad click identifier for up to 90 days. These stay on your device until you clear your browser data.

3. How We Use It

  • To email you when the Android app launches
  • To honor the founder price you reserved, if you reserved one
  • To contact you for an interview, only if you ticked that box
  • To decide what to build, based on survey answers and how the site is used
  • To credit invites to the person who shared them
  • To measure which of our ads lead to sign-ups
  • To keep the waitlist free of spam and automated sign-ups

We will not send you marketing emails other than launch-related messages, and every email will let you unsubscribe.

4. Legal Basis

Where data-protection laws such as the GDPR apply, we rely on your consent for the waitlist, the survey and the interview opt-in, and on our legitimate interest in understanding and improving the site for analytics and spam prevention. You can withdraw your consent at any time by emailing us.

5. Who We Share It With

We do not sell or rent your information. It is processed only by the services that run the site:

  • Cloudflare — hosts the website and stores the waitlist and survey database
  • Google Ads — measuring which ads lead to visits and sign-ups (visit data, hashed email and ad click identifier)
  • Amplitude — product analytics

These providers may process data outside your country, including in the United States, under their own data-protection terms. We may also disclose information if the law requires it.

6. Google API Services and Google User Data

Visitors of mixova.app are never asked to sign in with Google: the website has no "Sign in with Google" and never asks visitors for access to their Google account, Gmail, Drive, contacts or any other Google data.

Mixova also has a Google Cloud project with an OAuth client. It is an internal tool: the only people who sign in to it are the Mixova team, with Mixova's own Google account, to manage Mixova's own website and ads. Below is exactly what it does with Google user data.

What Google data we access

The OAuth consent screen does not request any scopes: the app asks for no access to anyone's Google account, Gmail, Drive, Calendar, contacts or profile data.

The project uses two Google APIs, only with Mixova's own credentials and only for Mixova's own data:

  • Google Ads API: keyword research for Mixova's own Google Ads account — search volumes, trends and suggested bids from Google Keyword Planner — and the performance of Mixova's own campaigns.
  • Google Search Console API: search performance (queries, clicks, impressions) and the index status of pages for the mixova.app property, and submitting Mixova's sitemap.

We do not access data of any other Google user.

How we use it

  • To decide which recipe tools and pages to build, in which languages and countries
  • To see which pages of mixova.app Google has indexed and which need fixing
  • To plan and measure Mixova's own ads for the waitlist

The data is not used for advertising to anyone, not used to build profiles of people, not used to train AI or machine-learning models, and not combined with waitlist or survey data.

How we store and protect it

Results are downloaded to the Mixova team's own computers as reports (for example, CSV files with keyword volumes) and summarized in internal planning documents. Credentials for these APIs (service-account keys and access tokens) are stored only on those computers and are never shared. Nothing is stored on public servers or in the website database.

Sharing

We do not sell, rent, transfer or disclose Google user data to anyone. Data obtained through Google APIs is not shared with third parties, including AI providers.

Retention and deletion

Reports are kept while they are useful for planning, and no longer than 12 months. Access can be revoked at any time at myaccount.google.com/permissions, which immediately stops the app from reading any Google data; on request to me@mixova.app we delete the downloaded reports within 30 days.

Limited Use

Mixova's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. How Long We Keep It

  • Waitlist and survey data: until the app launches and for up to 12 months afterwards, or until you ask us to delete it, whichever comes first
  • Links our recipe tools couldn't read a recipe from: up to 30 days
  • Analytics data: according to the retention settings of Amplitude and Google Ads

8. Your Rights

You can ask us to:

  • Tell you what information we hold about you
  • Correct it
  • Delete it, including removing you from the waitlist
  • Stop contacting you

Email me@mixova.app from the address you signed up with and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your local data-protection authority.

9. Children

The website and waitlist are not intended for children under 16, and we do not knowingly collect their information. If you believe a child has signed up, contact us and we will delete it.

10. Security

The waitlist database is accessible only to us, and the site is served over HTTPS. No method of storage or transmission is completely secure, but we take reasonable steps to protect your information.

11. Changes to This Policy

We will update this policy when the site or the app changes — in particular, at the Android launch. The date at the top shows when it was last updated. If a change materially affects how we use your email, we will let you know before it takes effect.

12. Contact

Questions or requests: me@mixova.app