Mifham
Privacy Policy
Last updated: 8 November 2026
Operator details and processing-provider information have not been approved for publication. These pages describe the current setup and must be completed and reviewed before public launch.
What does the website collect?
Showcase pages require no account and add no analytics or tracking cookies. Hosting infrastructure may record limited connection and security information. When enabled, the support form collects your name, email, category, subject, message, optional screenshot, language, consent and submission time. App submissions are also linked to the authenticated account and diagnostic app, OS and device-model context to handle your request. IP addresses are not stored in support records; they are used temporarily for rate limiting.
App data and its purpose
The app uses your sign-in identity, uploaded subjects, lectures and recordings, conversations, study events and subscription status to provide and sync the service, enforce entitlements, control cost and protect accounts. Age assurance is a declaration that you are at least 18. The birth date used for the check is not retained in the app database.
Providers and external processing
Supabase handles sign-in identity. Brevo sends transactional support and account email; email addresses, a private follow-up link and, after email verification, support replies may be processed for delivery. Screenshots are not attached to email. When external AI or transcription is enabled, your question and necessary context may be sent to OpenRouter and its processing providers after the separate consent required in the app. iOS subscriptions use Apple. Processing locations, transfer safeguards and provider contracts must be reviewed before launch. Provider retention cannot be guaranteed without contractual verification.
Retention and deletion
Support conversations and screenshots are retained to handle the request. Tickets do not currently auto-expire; a retention period and closed-ticket review must be approved before launch. Deleting an app account removes its linked tickets and screenshots from the active database. Session display details cover 30 days; security revocation markers may remain. Audio retention is configurable and currently defaults to 30 days. Other study data remains until you delete it or delete your account under service settings. Backup and financial-record retention schedules must be approved before launch; isolated archived copies may remain until that approved period expires.
Your choices and rights
Manage sessions, withdraw external-processing consent and request account deletion inside the app. App-data deletion and identity-provider deletion happen in sequence, so identity deletion may show as pending. Contact support to request an export, correction or deletion follow-up. We need to verify account ownership. Never send a password or sign-in code.
Objections and complaints
Use the privacy contact below to object to processing, withdraw consent, or request access, correction or erasure. We verify ownership proportionately without asking for a password. You may also contact the Personal Data Protection Department at Oman’s Ministry of Transport, Communications and Information Technology. The named providers may process data outside Oman; using the service is not open-ended consent to new purposes.
Children and shared content
Mifham is designed for university students aged 18 and over. Do not upload sensitive data or other people’s information without an appropriate basis, or record people without the necessary permission. The current setup does not sell study data for advertising.
Contact the operator
Contact details will appear once the operator profile is approved. For help now, use support inside the app.