Legal
Privacy policy
Last updated: November 2, 2026
Mirivilo keeps your data on your Mac. Your backups, messages, photos, files and settings never come to us. We hold only what we need to run your subscriptions, and what you choose to tell us. We use no tracking and no ads (we count website visits and downloads only in totals), and we don't sell your personal information or share it for advertising.
Who we are. ziglyph LLC, a Massachusetts company, makes Mirivilo and is responsible for the data in this policy. Contact: support [at] mirivilo.com · our postal address is in the Terms. Our privacy contact is the company's Manager, at the same email.
What stays with you. Everything Mirivilo reads from your iPhone and iPad (backups, messages, photos, files, settings) and its diagnostics log are handled only on your Mac. We never receive it; it's yours to manage. If you choose to send us a diagnostics file, we use it only to help you.
What we hold, and why
| What | From | Why |
|---|---|---|
| Email address, the date it first signed in, and your name if Stripe sends it | You, Stripe | Your subscriptions, sign-in codes, trial and renewal emails |
| Subscription details: your subscriptions, the device each one covers, their dates, renewal on or off, payment failed or not, and Stripe's customer and subscription numbers | Stripe | To know whether Mirivilo should work |
| For each iPhone and iPad: its device code and type (iPhone or iPad), the dates first and last seen, and whether a new subscription for it was refunded, and when | Mirivilo, Stripe | To tie each subscription to its device, run each device's free trial, and apply our Refund Policy's once-per-device rule for new subscriptions. Each code is a one-way code made from the device's hardware identifiers. We can't read the device's name, model or serial number from it. We still treat it as personal data. |
| App version; for each Mac, a one-way code made from its hardware identifier (we can't read the identifier back from it) and a code of its sign-in secret, and the dates it signed in and was last seen | Mirivilo | To keep each Mac signed in and confirm your subscriptions. Macs are free: a Mac's code never takes a subscription |
| IP addresses and request times | Your Mac or browser | Security and abuse limits; stored only as one-way codes, for up to 2 hours |
| Record of your agreement to automatic renewal: the time, your email address, the subscription and the price shown, the version of the text you agreed to, the one-way code of the iPhone or iPad it's for when you buy it from Mirivilo, and, once you pay, Stripe's checkout and subscription references | Checkout | To prove your consent (US law requires this record) |
| For each iPhone and iPad that has had a free trial: its one-way device code and type, the trial's dates, the day of its first finished backup during the trial, and the email address whose Mac started it | Mirivilo, our server | One free trial per device, the emails about that trial, and totals (such as how many trials reach a first backup), never about any one customer |
| What you write to us, and files you choose to send | You | To answer you |
| If we give free access (for example to a reviewer): the email address, the publication, the number of days and devices, the start and end dates, who gave or ended it, and the one-way code of each iPhone or iPad it covered | Us | To let Mirivilo work for that time without a subscription, and to keep a record of who gave it |
| Where you heard about Mirivilo, if you answer the one optional question Mirivilo asks once after you sign in (LinkedIn, Product Hunt, a news site or blog, Reddit, Google search, a friend, or other), or that you skipped it. Nothing else is kept with it | You | To count where people find Mirivilo, in totals only, never about any one customer. It isn't used for advertising |
| Launch list: email address, sign-up date and consent | You | To send the launch email you asked for; unsubscribe any time with the link in each email |
| Tips list: email address, sign-up date and consent | You | To send the occasional tips (and offers, if you agreed) you asked for; unsubscribe any time with the link in each email |
| Records of the emails our server sends you: which kind of email, when, which service sent it and what happened to it (for example sent, delivered, bounced or marked as spam). Your address and the email are kept only as one-way codes. An email that couldn't go out at once is kept whole, encrypted, until it's sent | Our server; Cloudflare, Resend, Postmark | To send each email once, try again when a service fails, hold back email from addresses that bounce or asked us to stop (the notices our Terms promise still go), and count deliveries in totals |
We also add up the data in this table into totals (for example, how many devices have a subscription, or how many renew). The totals never show who anyone is.
You need to give us your email address to use Mirivilo; without it we can't run your subscriptions.
What Mirivilo sends, and when
- To us (license.mirivilo.com): when you sign in, when Mirivilo opens, once a day, when you connect an iPhone or iPad to back it up or restore it, after it backs up (the date only), and when a subscription's paid-until date arrives. It also sends your answer to the optional question about where you heard about Mirivilo, or that you skipped it. It sends only the items in the table above.
- To ipsw.me: a device's model identifier, only when you connect a model newer than Mirivilo knows (to show its name) or reinstall iOS on a device stuck in Recovery Mode (to find its software).
- To Apple: an erased device's own activation request, only when a restore needs to activate it; and, only when you reinstall iOS on a device stuck in Recovery Mode, the download of Apple's software for it and the device's own request to Apple to approve the install.
- To updates.mirivilo.com: a request for the list of Mirivilo versions, when you check for updates, and once a day while Check for updates automatically is on; and the download of a new version, when you choose to install it (we count downloads only in totals).
Nothing else leaves your Mac. Mirivilo collects no usage statistics, sends no crash reports and never asks for your Apple Account.
Payments
Link, by Stripe, sells Mirivilo as the merchant of record (the seller is Sold through Link, LLC). When you buy, you give your name, payment details, billing address and tax information to Link and Stripe, which use them under their own privacy policies (Link and Stripe). We never see your full card number. Stripe keeps your name, billing address and the type and last four digits of your card in the records it holds for our Stripe account; our server doesn't copy them. Stripe tells our server your email address, possibly your name, and the state of your subscription, and we tell Stripe which subscription a request is about. At checkout you also choose your country: our server uses it only to check that Mirivilo is sold there, and doesn't keep it; if a purchase comes through with a billing address where Mirivilo isn't sold, our server reads that country once to cancel and refund it, and doesn't keep it either. If you ask Link to delete your information, Link also cancels your Mirivilo subscriptions: they then don't renew, and each keeps working until the end of the year you've paid for.
The website and emails
mirivilo.com sets no cookies and has no tracking or ads. Cloudflare hosts it and processes your IP address to deliver pages, stop attacks and count visits; if it needs to check you're not a bot, it may set a short-lived security cookie. On the checkout page, Cloudflare Turnstile checks that you're a person and not an automated script. It runs in your browser, usually without you noticing; Cloudflare may ask you to click a box. It looks at information about your browser and device and your IP address, under Cloudflare's terms for Turnstile and its privacy policy, and isn't used for advertising. We only receive whether the check passed, and we don't keep it. If the check doesn't run, you can still subscribe. We see only totals, never who you are: visits, pages viewed, downloads, which of our links and which other websites brought visitors (a website's name only), and which countries visits come from, and, from Google, which searches showed our site. When you continue to payment, you go to Link's checkout, run by Stripe on its own site, which may use cookies or similar technology needed for the payment and to prevent fraud. We don't track you across other websites. The only other company whose code runs on mirivilo.com is Cloudflare, which delivers the site and checks for robots on checkout, under its own privacy policy. Because we don't track you, "Do Not Track" browser signals don't change anything we do. Our fonts are stored on our own site. The emails our server sends (sign-in emails, and emails about your trial and subscriptions) contain no tracking pixels and no tracked links. Launch-list and tips emails are sent by Kit, which records whether each email is opened and which links are clicked.
Who helps us
| Service | What it does for us | Data it handles |
|---|---|---|
| Link and Stripe (Sold through Link, LLC; Stripe, Inc. and its affiliates) | Link sells Mirivilo as merchant of record; Stripe processes payments and handles tax | Name, payment and billing details, email address |
| Cloudflare | Hosts the website, our license server and its database, and runs the robot check on the checkout page (Turnstile) | Subscription data in the table above, IP addresses, information about your browser and device during the checkout check |
| Cloudflare, Resend and Postmark | Send our server's emails (sign-in emails, and emails about your trial and subscriptions). Each email goes through one of them; if that one can't send it, the next one tries. They tell our server when an email bounces or is marked as spam, and Cloudflare also when it's delivered | Email address, the email's content, and whether it was delivered, bounced or marked as spam |
| Kit | Sends the launch list and tips emails | Email address, sign-up date, whether emails are opened and links clicked |
| Apple iCloud Mail | Receives the email you send us | Your email and what you write |
These services may use the data only to provide their service to us, under their data processing terms (for Apple iCloud Mail, Apple's iCloud terms and privacy policy). We and they are mainly in the United States, and the data in this policy is held there.
Who at ziglyph can see your data. Only the people who run the company's support, bookkeeping and systems can look up a subscription, and only to help you or to keep our records. They see your subscriptions, their status and renewal dates, your devices and Macs and when each was last seen, and what covers each device. In Stripe's records they can also see the name, billing address and country you gave Link, and the type and last four digits of your card, but never your full card number. Every look-up in our own support tools is logged with who did it and when, and that log is kept for 1 year.
How long we keep it
- Subscription data: while you have a subscription, and 2 years after your last one ends, then deleted.
- Where you heard about Mirivilo: kept with your email address and deleted with it.
- Records of your consent to automatic renewal: 3 years, or 1 year after the subscription it was for ends, whichever is longer.
- If you don't finish checkout, the consent record is deleted after 30 days.
- Trial records: 3 years after the trial. If you ask us to delete your data, they're kept only as the device's one-way code, type and dates, no longer linked to your email address.
- Records that a new subscription for an iPhone or iPad was refunded: 3 years after the refund. If you ask us to delete your data, they're kept only as the device's one-way code and the refund day, no longer linked to your email address.
- Records of the emails our server sends you: up to 90 days.
- An email that couldn't go out at once: kept encrypted until it's sent or we stop trying, at most 7 days. A sign-in email is never sent more than 30 minutes after you ask for it.
- If an email to your address bounces for good, we keep a one-way code of the address for 60 days after the last bounce. In that time our server sends it only the notices about your subscription that our Terms promise. If you mark one of our server's emails as spam, or ask us to stop emailing you, we keep the code for up to 2 years, and our server still sends you the notices about your subscription. Our email services also keep their own lists of addresses that bounced or marked email as spam, under their own rules, and may refuse to deliver to them. To get our emails again, write to support [at] mirivilo.com and we'll take your address off our list.
- If you ask us to delete your data, these email records stay until their time runs out, only as one-way codes, so an address that asked us to stop stays stopped. An email still waiting to be sent stays encrypted for at most 7 days and may still go out.
- Server logs: 30 days.
- Support emails: 2 years after the last message.
- Launch list: deleted within 30 days after the launch email, except for people who ask for tips.
- Tips list: until you unsubscribe.
- Support look-up log: 1 year.
- Free-access records: until the free access ends, then 1 year.
- Records of what our team did on a subscription (for example free access given or ended), with who and when, the publication, a reference to the subscription and a one-way code of the email address: 2 years. If you ask us to delete your data, they stay only in that form, no longer linked to your email address.
Deleted data can stay in our database backups for up to 30 days, then it's gone. Our email services keep their own records of the emails they sent, and their lists of addresses that bounced or marked email as spam, for the time their own terms set. Link and Stripe keep payment records as long as tax law requires.
Your rights
Wherever you live, you can ask us for a copy of your data, to correct it, or to delete it. Write to support [at] mirivilo.com from the email address you subscribed with. We confirm within 7 days and answer within 30 days, free of charge. For payment data held by Link or Stripe, ask them directly. You can unsubscribe from the launch and tips emails at any time with the link in each email. We don't sell or share personal information as defined by California law, and we don't use sensitive personal information.
Security
Connections to our server are encrypted. We store one-way codes, not the device identifiers or sign-in secrets themselves. One-time sign-in codes expire after 30 minutes and work once. An email waiting to be sent again is stored encrypted. On your Mac, backup passwords you choose to remember are kept in your macOS Keychain. We review every change to Mirivilo and our server for security. If a breach affects you, we'll tell you as the law requires.
Children
Mirivilo subscriptions are for adults. Parents can use Mirivilo with their children's devices; we receive only a one-way code, the type and dates for each device. We don't knowingly collect personal information from children.
Changes
If we change this policy in a way that matters, we email you and post it on mirivilo.com at least 30 days before the change applies.
This policy is written in English.