What Mika records when you talk to her, where each piece of it is kept, what leaves your phone, and how to have it deleted.
Mika is an AI companion app for adults, published on Google Play by the developer onebitdev. You talk to a character by voice and she answers; the conversation can be flirtatious and never explicit. This policy covers the Android app and the services behind it.
The data controller is Dioniso Reale (publishing as onebitdev), an individual developer based in Italy, reachable at nathanreven@gmail.com. There is no company, no data protection officer, and no sales of personal data — not as a policy commitment we might revisit, but because the app has no advertising, no analytics SDK, and no third party that receives your data for its own marketing purposes.
Three different things get called “storing data”, and the difference matters more than the categories usually printed in a policy. Some of what Mika knows about you is on Google’s servers; a larger part never leaves your phone; and some things people reasonably expect an app like this to collect are simply not collected. The table names real fields, so you can hold the app to it.
| What | Kept where | Detail |
|---|---|---|
| Account | Google Cloud | You do not need an account to use Mika. The first time you open the app it creates an anonymous identifier: a random code with no name or email attached, which keeps your data together on that phone. If you choose to link an account in the settings, we also keep the email address, display name and profile picture URL from that sign-in method, how you signed in (Google or email and password), and the date you registered. Passwords are handled by Firebase Authentication and are never visible to the app. We also record the day you last opened the app, so that unused anonymous identifiers can be deleted (section 9). |
| Subscription | Google Cloud |
Your plan, when it started, when it expires, whether it renews, the
Google Play purchase token used to verify it with Google, and the order
number of the last charge (the GPA.… code on Google’s
receipt email), so we can find your record if you write to us without
an account. Card details never reach us.
|
| What Mika remembers about you | Google Cloud |
A short portrait of you that Mika builds from what you say: the
name you asked her to call you and how to pronounce it; a few character
traits she observed, each with the line that suggested it
(tratti); your likes and dislikes (gusti);
if you told her about someone you are interested in, who they are and
what you said about them (situazione); what you seem to
come to her for (cerca); a few sentences on how to talk to
you (registro); how many conversations you have had and
when the last one was; your language settings. This is the “memory”
that makes her remember you between sessions. The portrait is never
shown in the app; you can erase it at any time with
Start over in the settings.
|
| Usage counters | Google Cloud | Voice seconds used in the current period, so the plan limits can be enforced, plus one record per request holding a timestamp and numbers — never the content of what was said. |
| Conversation history | Your phone only | Mika does not keep a log of your conversations. The last few exchanges are held in a small queue in the app’s private storage only until they have been analysed for the portrait (see section 6), then discarded. Nothing is uploaded; uninstalling the app deletes the queue. |
| Voice transcripts | Your phone only | What the speech service transcribed is used only to build the portrait and is not shown, stored or uploaded beyond the queue described above. |
| Spoken audio | Not stored | Microphone audio is streamed to Google for the duration of the conversation and is never written to a file by Mika, on the phone or anywhere else. Mika’s own replies are cached as audio files on the phone so playback is smooth, and discarded. |
| Analytics and crash reports | Not collected | Mika includes no analytics library, no crash-reporting library, and no advertising identifier. We cannot see how you use the app; when something breaks we only know if you tell us. |
| Push notification identifiers | Not collected | Notifications from Mika are scheduled by the app on your device. No push token is sent to a server, so we have no way to message your phone directly. |
| Location, contacts, photos, files | Not collected | Mika never requests these permissions and has no access to them. |
Server-side security rules restrict every stored record to the identifier that owns it; one user cannot read another’s data.
A subscription belongs to your Google Play account. On a new phone signed in to the same Google Play account, Mika finds the subscription again by itself, with the minutes already used in the current month, even if you never created an account with us. The subscription is then removed from the old identifier, so it is never active in two places at once.
What Mika remembers about you does not follow the subscription: it stays with the identifier it was learned on, because a Google Play account can be shared with other people. It comes back on a new phone only if you restore the phone from its Android backup, or if you linked an account in the settings.
We do not profile you for advertising, we do not sell personal data, and we do not share it with anyone for their own purposes.
Voice conversation needs the microphone. Android asks for that permission the first time, and you can withdraw it at any moment in the system settings — without it the app cannot hold a conversation.
The microphone is open only while a voice conversation is running, never in the background and never when the app is closed. While it is open, audio is streamed to Google’s Gemini Live service so Mika can hear and answer in real time.
Mika offers two listening modes, and the difference is a privacy difference as much as a convenience one. In hands free the app decides what to send using a loudness threshold, so a noisy room can push fragments through that you did not mean to send. In push to talk nothing at all is transmitted unless your finger is on the button, and the button changes colour while it is. If you want certainty about when Mika is listening, that is the mode to use.
Mika does not generate her own answers. Each turn is sent to Google’s Gemini API, which produces the reply. What is transmitted is the audio you just spoke, the recent part of the conversation, the instructions that define Mika’s character, and the portrait described in section 6, so that her answers fit you. Google’s safety filters apply to every answer; Mika is designed to stay allusive and never explicit.
Google states that on the paid tier of the Gemini API it does not use prompts or responses to improve its products. It also states that prompts and responses are logged for a limited period in order to detect abuse, to keep the service secure, and to meet legal or regulatory obligations. So this policy does not claim that nothing is ever retained by Google — it is not accurate to say so, and the current terms are published at ai.google.dev/gemini-api/terms.
Treat a conversation with Mika as something a third party could in principle read during an abuse investigation. Do not tell her passwords, payment details, health records, identification numbers, or anything else you would not want stored outside your phone. She has no use for them, and no feature asks for them.
Answers are generated by a language model and can be wrong, out of date, or inappropriate. Mika is a companion, not a source of medical, legal, financial or emergency advice.
Mika pays attention to how you talk — whether you are shy or forward, what you like, whether you came to play or to talk about someone — and writes a short portrait of you so she can pick up where you left off and talk to you the way that suits you. That is the point of the app, and it is also the part of it that holds the most about you. Because it is derived from what you say, it may be wrong; it is never used for anything other than her answers to you.
The portrait is built in the background by a separate request to Gemini that reads the last few exchanges and returns only structured notes; the exchanges themselves are then discarded. If you mention another person, what you said about them is kept in the portrait only to let Mika follow the thread, and leaves with it.
The portrait is not shown in the app. Start over in the settings erases it entirely, on the phone and on our servers, and leaves your account and subscription intact.
If you are in the European Economic Area, Switzerland or the United Kingdom, we rely on the following bases under the GDPR.
Mika is built on Google infrastructure, and Google is the only third party that receives your personal data.
If a provider is added or replaced in a way that materially changes how personal data is processed, this policy will be updated before the change reaches users.
In the app. Tap the gear icon to open the settings, then under Account tap Delete account (or Delete my data if you never linked an account). You are shown exactly what disappears and asked to confirm; the deletion then happens immediately.
On the web. If you have already uninstalled the app, go to mika-e76b7.web.app/elimina-account, sign in with the same credentials and confirm. The deletion happens immediately, exactly as it would in the app.
Without an account. If you never linked an account and no longer have the
app, there is nothing to sign in with. If you never bought anything, your data is
deleted automatically after 30 days without opening the app. If you did buy a
subscription, write to
nathanreven@gmail.com with the order
number from Google Play’s receipt email (it starts with GPA.); we use
it to find your record and delete it within 30 days.
By email. If you cannot sign in at all, write to nathanreven@gmail.com from the address your account uses, with “Delete my account” as the subject. We confirm within 7 days and complete the deletion within 30 days.
Deletion removes your account record, your subscription record, everything Mika remembered about you, and your usage records, and — when done from inside the app — the conversation history stored on the phone. It does not cancel a subscription bought through Google Play: cancel that in the Play Store, or you will keep being charged. It does not reach data already held by Google under section 5.
If you had a subscription, one thing stays after deletion: a one-way fingerprint of the Google Play purchase token, with the product and the voice seconds used in the current billing period. It carries no name, email, identifier or order number. It exists so that deleting your data and reinstalling does not reset the limits of a plan already in use; if the same subscription returns, its usage continues from where it was.
Two lighter options exist if you do not want to go that far: Start over in the settings clears what Mika remembers and keeps your account and subscription; and uninstalling the app removes the conversation history from your phone, because that part was only ever there.
The servers that mediate requests run in the European Union, but Google may process data in other countries, including the United States. Those transfers rely on the safeguards Google publishes for its cloud and AI services, including the European Commission’s standard contractual clauses where they apply.
Connections are encrypted in transit. Stored records are protected by server-side rules that tie every record to the identifier that owns it, so each user has access to their own data and nothing else. Access to the Gemini API is granted through short-lived, single-use tokens issued by our server rather than a key held on the phone, so a key cannot be extracted from the app and reused.
No system is perfectly secure, and nothing here promises otherwise.
Mika is for adults only. On Google Play it is published for users aged 18 and over with minor access restricted, so Google does not let accounts it identifies as belonging to a minor find, download or buy it. We do not knowingly collect data from anyone under 18.
If you are a parent or guardian and believe a child has used Mika, write to nathanreven@gmail.com and we will delete the account and its data.
Depending on where you live, you may ask us to:
Write to nathanreven@gmail.com. We may need to confirm that the request comes from the account holder before acting on it. If you are in the EEA and think we have handled your data badly, you can complain to your national data protection authority; in Italy that is the Garante per la protezione dei dati personali.
Mika makes no automated decisions that produce legal effects or similarly significant effects on you. The AI decides what to say, not what you are entitled to.
Both can be revoked in the Android settings at any time. Revoking one disables the feature that needs it and nothing more.
When Mika’s features, providers or legal obligations change, this policy is updated and the date at the top changes with it. Material changes will be announced in the app before they take effect.
Mika – AI Voice Companion — privacy
onebitdev (Dioniso Reale)
nathanreven@gmail.com
Italy
Write in English or Italian; both are read by the same person.