Mirai Privacy Notice

Version 5.3 (launch edition). Dated 22 October 2026.

v5.3 change note: the required face checks and the optional video partner described; consent to sending face data abroad; the US-person engine rule stated; Mexico, Peru, Colombia, the Philippines and other Latin American sections added; one signature rule for every channel (R17).

This notice explains what data Mirai collects and why, where it goes, how long we keep it, your rights and how you stop. It is not a contract. Where it overlaps the Platform Terms v5.3 ("Terms"), the Likeness Licence v5.3 ("Licence") or the AI Training Licence (Licence Part 3, not offered at launch) it says the same thing. If you find a difference, the reading that protects you more applies. Your signed record carries this notice's version (privacyVersion).

In short. We use your face only to make content of you that you allowed, and to check it looks like you. Your face data is never sold. You can cancel future content, and delete your face data, any time. Our only advertising tracker is the Meta Pixel: on our public marketing pages, only if you accept it in the cookie notice, and never for visitors in the United States (section 3). If you live in California, section 13.4 is our notice at collection.

1. Who is responsible

1.1 Mirai Talent Inc., doing business as Mirai, a Delaware corporation, file 10680377, 2810 North Church Street, Wilmington, DE 19802, USA ("Mirai", "we"), is the controller of your data, wherever you live, except as 1.2 says.

1.2 A non-US affiliate, later. Mirai may name a Mirai affiliate outside the United States, with its address, by 30 days' notice, to sell licences used only outside the United States and pay the earnings from them. None is named at launch. For those non-US sales only, it would be a separate controller. It never receives kits or face data, and never receives or accesses data about any US person (6.4). Where your law needs your consent before your data goes to it (for example Argentina), it happens only after your Allow tap. Mirai Talent Inc. stays responsible for every promise. Until that notice it holds none of your data.

1.3 Contact. Privacy, rights and Stop: legal@mirai.inc, or Settings, then Privacy.

• Data protection officer, the same person for every country, including as our encarregado in Brazil and our data protection officer in the Philippines: Alexandra Lim, Founder and CEO, legal@mirai.inc.
• EU and UK representatives: named here before we serve the EU, EEA or UK (section 2).

1.4 Others who decide for themselves. Our identity-verification partner runs the Verified Human Check, and each Partner App operator runs its Partner App, Partner App payments and wallet, under their own privacy notices (these words are defined in Terms §0.1A). They are not our processors. Ask us at legal@mirai.inc for the current list of these named providers. Payment and payout providers, and app stores, are controllers for their own legal duties (identity, sanctions, fraud, tax filing). For everything else they do for us, they are our processors. Our optional video partner is our processor, except for the records the law requires it to keep, for which it decides for itself (5.3B).

2. Who we serve

• Adults only: 18, or the age of majority where you live if higher (for example 19 in Alabama and Nebraska; 21 in Mississippi, Puerto Rico and Honduras).
• Served at launch: the United States, Latin America and the Philippines. Not yet served ("coming soon"): the EU, EEA, UK, Switzerland and Hong Kong; India, Indonesia, Japan, Korea and Thailand; and every other country. Not served: mainland China, and countries or regions under comprehensive US sanctions (Terms §1.4B; Licence 23.5). A section about a market we do not yet serve applies once we open it.
• US persons, Colombia and the Philippines: at launch you create with Mirai's free faces, or with no person, and cannot sign the Likeness Licence or add your own face yet (Terms §1.4B; Licence 23.8). What this notice says about adding your own face applies to you when own-face sign-up opens in your market. A US person is anyone who lives in the United States or a US territory, or who is a US citizen or US permanent resident (6.4).
• Spanish- and Portuguese-language countries: signing the Likeness Licence and adding your own face open once the certified translation in your language is live (Terms §20.1). Until then you create with Mirai's free faces, and what this notice says about adding your own face applies to you once that opens.
• Illinois: create and remix, but nobody can add or upload a face while connecting from Illinois, or on an account whose declared or connection state is Illinois, on any Mirai surface (Licence 23.6).
• New York and Washington, once own faces open for US persons: you can add your face and create, but you cannot be licensed commercially (Licence 23.2, 23.7).
• Texas and Washington, once own faces open for US persons: you can add your face, but you are never in a training set or dataset, and your face data stays on systems Mirai controls. In Washington a separate confirm sheet asks before your content is shared with others (Licence 23.7).
• Never trained on: residents of Texas, Washington and Illinois, and anyone under the minimum age (Licence T8).
• Residence: we ask your country and US state and record your connection's country. If they disagree, the stricter rules apply. Your first-withdrawal address may update it.

3. What we collect

From you.

• Your sign-in details (in a Partner App, your wallet address; on the web, the email or account you sign in with), language and residence; name, handle and bio if you add them; your typed full name when you sign on the web.
• Your kit: selfie, head-turn and photos, recorded after you sign. Later, each by its own tap: more photos, voice, a pro session or measurements.
• Your signed Licence and every switch and rule, with times.
• Your Creations, prompts and uploads; competition entries and votes.
• Purchases: what you bought, when, the price, and the Partner App payment transaction or, on the web, the Stripe payment. Your plan, credits and earnings balance.
• Your referral code and who invited you.
• Tokens for social accounts you connect.
• Messages, reports, takedown requests and appeals.
• A hash of your legal name where the law needs proof of who consented (Argentina, Indonesia).

From others.

• Our identity-verification partner and the Partner App you use (the Verified Human Check): a unique-human proof, your verification level, a code unique to you and Mirai (nullifier or session ID), your Partner App username and picture, and any yes-or-no minimum-age proof. Never your birth date, documents or iris or other biometric data. The current list of these named providers is available on request (1.4).
• On the web, the human check you take (Terms §0.1A): the result and the fields that check's screen lists [to be added].
• Our optional video partner, only if you opt in (5.3B): the result of its live face check.
• Payment providers and app stores: whether a payment went through. For cards, only the brand and last four digits. App stores may give an age-range signal.
• The payout provider: your tax status, address and a yes-or-no age confirmation.
• Buyers and partners: each licence's brand, use, territory and duration.
• Other users: content made with you, cameo requests, referrals, and reports about you.
• Social platforms you connect: your account ID, handle, post IDs and view counts.
• Safety partners: whether content matches known abuse hashes.

Automatically. Device type, app version, IP address and the country it suggests, and how you use features (generations, free-credit use, queue times, errors). We never read your contacts, photo library or precise location. If you invite friends with a Partner App's contact picker, we receive only the people you pick. Cookies and the Meta Pixel: optional analytics, and the Meta Pixel on our public marketing pages, run only after you tap Accept in the cookie notice. The Meta Pixel tells Meta which of those pages you visited, so we can measure and show our ads. It never runs for visitors in the United States, on pages where you sign up, sign in, apply, add a face or sign, on our legal pages, in a Partner App, or if your browser sends a Global Privacy Control signal. You can change your choice any time from the link at the foot of every page. We also keep a few first-party cookies the site needs to work, with no choice needed: your sign-in, your language, the invite code you arrived with and, while you apply, the country and US-citizen answer you gave (for up to 7 days).

We create.

• Likeness Content: every output that shows you, which Mirai owns (Licence clause 2).
• Your Creations: everything you make on Mirai showing no real person, which Mirai owns outside Protected Countries (Terms §5).
• Character Outputs: outputs made with a character another owner licenses to Mirai, which Mirai owns subject to that owner's rights (Terms §5.1E). The owner gets aggregate figures, never your personal data.
• Face data (section 5).
• The ledger: an append-only row for every consent, licence, purchase, payout, Stop and deletion.
• Trust levels, likeness scores, check results and a content credential on every output.
• De-identified aggregates of trends, demand and prices.

"Protected Countries" means the EU, the EEA, the UK, Switzerland and Latin America.

4. Why we use it

4A Our legitimate interests are: keeping Mirai secure and free of fraud and bots; making licences already sold, and the rights behind them, keep working; improving our tools; sharing the free tier fairly; proving consent; and defending legal claims. We weigh these against your rights. You can object (9.4), and for existing Likeness Content your withdrawal tap (9.1) is the way to object.

An account needs a sign-in, a residence and the Continue tap. Content of you needs the Licence and the face-data box. Everything else is optional and never a condition of joining. Licensed Model and Create only are equal choices. Refuse face data and you can still create. Same-kind features come with 30 days' notice and a tap. A new kind of use, voice or training needs your fresh signature.

5. Your face data (biometric section)

This section, with our Biometric Data Policy, is Mirai's public biometric policy and retention schedule, including under BIPA §15(a), Texas CUBI, Washington's biometric law and My Health My Data Act, and Colorado law.

5.1 Definitions (Licence 10.1). Face data is the face templates, embeddings, adapters and weights derived from your kit, your character sheet and your likeness scores: together, your Private Likeness Model. Your kit is your selfie, head-turn and photos. Some laws treat the kit as biometric too (Washington, California, the EU), and we protect it the same way, as we do voice recordings if you add voice (Licence 12.3). The kit is not face data, because kit images may enter training sets if you chose training.

5.2 Consent. Face data has its own block and unticked box on the signing screen, recorded as its own field and time (biometricConsent). Outside the US, the same block asks your consent to sending your kit abroad for each generation (6.5); in Brazil and Argentina that consent has its own unticked box (crossBorderTransfer). Nothing face-derived is computed before your signature and that box land. Capture follows the signature. Any frame recorded earlier stays a plain photo and is deleted within 24 hours if you do not sign.

5.3 Purpose. Only to make content of you under the Licence and check it looks like you, including that the face in your kit is yours.

5.3A The face checks are required. Two automated face checks are part of adding your face, and you cannot add it without them (Licence 10.3): when you add your kit, a check that your selfie, head turn and photos show the same person; and on content made of you, a check that it looks like you. Both compare only with your own kit and never search across other people. They run on Mirai's systems, a cloud face-comparison service and an AI vision model that scores how closely content looks like your own kit. Separate image-safety services check for unsafe content and whether a face is present, and compare no faces. The live list (6.1) names each one and its country.

5.3B Our optional video partner. Only if you tick its own box on the signing screen, Mirai shares your kit photos with our optional video partner, which runs a short live face check and keeps a reference of your face to make video of you for Mirai. It is biometric data, used only for that, never to train models or for anything else. The partner is our processor, acts on our written instructions and processes outside your country, where the live list shows; we answer to you for it as your data-protection law provides. If you withdraw in Settings, if your face sign-up is not approved, or if you close your account, we instruct it to delete the reference within 30 days. It keeps only the records the law requires it to keep, under its own privacy notice, and for those records it decides for itself. It is never offered to US persons or Argentine residents, and saying no changes nothing else (Licence 10.3B).

5.4 Never. Face data is never sold, leased, traded, profited from or shared as such. It is never used to identify, search for, track or classify anyone, never pooled (except training you chose), never in a dataset, and never out of Mirai's control. API partners never hold your kit. A hosted-model partner may hold your adapter only as Mirai's property and processor, unmergeable, deleted with a certificate when you stop. Our optional video partner holds a face reference only as 5.3B says. Your kit, recordings and Likeness Content of you follow the Licence purposes, and enter training sets or licensed datasets only if you signed the separate AI Training Licence (Licence Part 3, T2 and T3). Content that also shows someone else is used for training only if they signed it too. Likeness Content is not face data, and Mirai owning it never lets it into a dataset without that choice (Licence 3.6). We never build a template of anyone who has not signed. An upload that shows a face is refused unless it is part of your own kit; that check only detects that a face is present, builds no template and compares the face with no one (Terms §6.2).

5.5 Retention and destruction schedule.

"Your own interaction" means you open Mirai, sign, change a setting or approve a licence. The first deadline to arrive applies. Deletion covers live systems, partner copies and backups, within the same deadline; backups are covered by destroying their encryption key. Each deletion is a dated ledger event. Afterwards the ledger keeps hashes and metadata, never images.

5.6 Access. Only the Mirai systems and staff that run the service, and the processors in section 6 that generate or check content. Withdraw consent with one tap; it works as a Stop (section 9).

5.7 Incidents. We keep a written plan for responding to any security incident that could affect face data, and treat such an incident as high risk (14.1).

6. Where your data goes

6.1 Stored in the United States, except a face reference our optional video partner keeps if you opt in (5.3B), and processed by Mirai and the recipients below, in the countries shown. The live list, Who receives your data: processors and recipients, names every processor, engine and partner, with its country and dates. It is the list the Licence means.

6.2 Recipients by category.

Processors act only on our written instructions, and engines may not train on your data. For people in the EU, EEA, UK, Switzerland and Brazil, we send data to a decentralised compute network only once its data terms meet this notice.

6.3 Which engine serves you. We choose engines by feature, quality and law, and the choice can depend on where you live. The live list shows which engines are used for which users and features, and we update it before a change.

6.4 US persons' data and countries of concern (28 CFR Part 202). US law restricts access to Americans' sensitive data, including biometric data, by companies and people linked to certain countries, which for China includes Hong Kong. We follow it. We keep US persons' face data under US-controlled access, and do not give anyone the rule covers access to it beyond what the law allows. We treat you as a US person if any signal says you live in the United States or a US territory, or if you answer yes to "Are you a US citizen or US permanent resident?" when you sign up. The rule for US persons' faces: the face of a US person never goes to an engine, face check or partner developed or run by a company based in, or controlled from, China (including Hong Kong) or another country of concern. At launch, US persons cannot add their own face (section 2).

6.5 Transfer tools.

• EU, EEA, UK and Switzerland (once served): the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss changes) with each recipient outside a country with an adequacy decision, or the recipient's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where it has one. For each transfer we make a transfer impact assessment and add the safeguards it calls for, such as sending only what a job needs and requiring deletion after the job. Ask us for a summary.
• Brazil: the ANPD's standard contractual clauses, or your specific consent on the signing screen.
• Argentina: the AAIP's model clauses, or your consent on the signing screen.
• Elsewhere: your transfer consent on the signing screen (crossBorderTransfer), plus contract clauses with each recipient.

6.6 Partners. Partners on the list when you sign can serve you [EU, EEA, UK, Hong Kong: after your Allow tap for each]. A new partner: in the US, named 30 days ahead with a one-tap decline; elsewhere, only after your Allow tap. Training data goes only to recipients named when you signed or allowed by your tap, and every run is announced 14 days ahead, with a one-tap "Not this one" (Licence T4).

7. How long we keep the rest

8. Automated decisions, and a human

8.1 Software decides first on:

• Trust level (Verified Human Check level, age proofs, account age, check results): limits, free credits, competition eligibility and discovery. Never your 80% or any rate.
• Age gate: paid licensing, partners and training need an age credential.
• Face match, against your own kit only: does an output look like you, and is your kit yours. Never a search across others. Other uploads are only checked for whether a face is present (5.4).
• Consent check before every generation and showing.
• Moderation: classifiers, hash matching and the ledger. Never ratings or sales.
• Prize scoring: AI scores the entry, never the entrant. A person reviews top entries and disputes.
• The free-tier governor: how many free credits there are each day, and queue order.
• Fraud and sanctions checks on referrals, rewards and payouts.

8.2 Appeal. Each decision shows a reason and a button. Appeal free within 6 months. A person decides, within 14 days for account suspensions, trust downgrades, hard stops and prizes, and 30 days otherwise (Terms §11.6). EU residents may also use a certified out-of-court body where the law gives that right. These decisions are needed to run the contract, and you always get a human review (GDPR Art. 22(2)(a) and (3)).

9. Stop, delete, export

9.1 Cancel future content (a Stop). "Cancel future content" in Settings: any day, one tap, no reason, no cost. New content of you stops at once on Mirai and within 72 hours at partners. Your kit, face data and private model are deleted within 30 days. Likeness Content already made stays Mirai's; licences already sold run to their end; commercial licences of it keep paying you 80%. Home-law withdrawal: where your law gives you a right to withdraw consent you cannot give up (for example GDPR Art. 7(3), 17 and 21; Argentina, Brazil, Mexico, Colombia; Washington's My Health My Data Act), the Stop screen offers "Also withdraw existing content", one more tap. Mirai then stops showing it and selling new licences of it within 14 days, and ends sold licences under Terms B13 (Licence 7.4). Closing your account cancels future content. Email to legal@mirai.inc also works.

9.2 Smaller taps. Turn off training, personal use, advertising, autopilot or one partner; leave Licensed Model status; or pause paid licensing. Off is one tap. On again needs a fresh signature where it widens what you gave.

9.3 Export. Export your creations and download your signed record in Settings, or ask for all your data in a portable form.

9.4 Other rights. Access, correction, deletion, restriction, objection, portability, withdrawing consent, and a list of the specific third parties we gave your data to. Ask in Settings or by email, signed with your signature (Terms §0.1A) or sent from the email on your account, so we know it is you. It is free, and we answer within one month, or sooner if your law says. An authorised agent may ask for you, with your signed permission. A deletion request covers your kit, face data and account data. Likeness Content, Your Creations and the licence records stay as 7 and 9.1 say, except where your law gives a right that overrides them. Mirai owning a creation never takes away your rights in personal data inside it: ask, and we delete or de-identify personal data in a prompt, caption or upload.

9.5 Also kept after a Stop: Likeness Content and its licences (unless you withdraw under 9.1), delivered outputs, the record without images, and aggregates.

10. Posting, gallery, competitions and referrals

10.1 Autopilot is off until you connect an account. The platform's login gives us an access (OAuth) token. You then confirm on a card, recorded per account. Instagram and X post automatically; TikTok takes one tap. The token is encrypted and used only to post what you published or joined, after it shows in Your Queue, and to read those posts' views. Disconnect any time and we revoke and delete the token. Once you disconnect or turn autopilot off, and during an account suspension, autopilot posts nothing new. Posts already made stay on your accounts unless you delete them.

10.2 The gallery. Tapping Enter posts your entry publicly and is your consent to show, judge and announce it. If the entry shows other members, each of them approves it first, and their approval is the same consent; it goes public only when all have approved (Terms §7.1). Before every showing, software checks that no person in it has withdrawn under 9.1, been found a minor or had it taken down, and logs the check. If one has, it is hidden.

10.3 Competitions and prizes. Winners, and the cast members who share a prize, are announced with their handle. Prizes are film credits unless a competition's rules offer cash. Cash prizes are paid in USDC to your balance and need the payout provider's tax step in section 11 before you withdraw. We keep votes keyed to your Verified Human Check code so each human votes once. Each competition's official rules, such as Mirai Season 0: Official Rules, say more.

10.4 Referrals. We record who invited whom and when a qualifying step happens, keyed to Verified Human Check codes, so a reward is paid once per human and fraud can be stopped.

11. Payouts, purchases and tax data

Payouts go only through a licensed payout provider acting as your agent (Terms C7A). Nothing about tax is asked until your first withdrawal. Then the provider collects, in its own screen, what the law needs: legal name, country, address, a tax certification and, only for US persons or treaty claims, a tax number. Its identity and sanctions checks may need your birth date. Providers are named on the live list: a tax-form and withholding provider, a bank rail, a USDC rail and a wallet-screening service.

The provider holds your tax form as Mirai's agent, and gives Mirai a copy whenever a tax authority asks or the law requires. It is a controller for its own identity and sanctions duties. Mirai receives: step done, tax rate, your address, and a yes-or-no age confirmation.

USDC payouts to your connected wallet, and Partner App payments, are recorded on a public blockchain (amount, addresses, time). They never show your name or face, and cannot be erased.

12. If Mirai is sold, and records we show

12.1 The Licence, your records and your data move only together and in whole, to an affiliate or a company that takes over running Mirai, never as a sale of data. The new operator is bound by the Licence and this notice on the same terms, every promise included. We tell you first, with a one-tap Stop. Stop then, and your face data is deleted before anything moves. Before that, a prospective buyer sees only ledger rows and aggregates, under NDA. A sale of Mirai's shares moves no data. If Mirai's assets move to a new company, Texas residents' face data is deleted before closing, and the new operator rebuilds it from your kit only after your fresh face-data consent (Licence 14.2A). One exception: if you signed the AI Training Licence, Mirai may move that licence on its own to a buyer of its training business (Licence T9). Your data then goes to that buyer only if it is named in this notice or you allow it with a tap (T4). Otherwise it stays with Mirai.

12.2 A ledger row (licence ID, a pseudonymous ID, use, term, territory, partner, consent state) may go to buyers, partners, insurers, regulators and that prospective buyer. Anyone can check an output at mirai.inc/verify, which never shows face data or price. Anyone receiving aggregates must promise, as we do, never to re-identify anyone.

13. Place-specific notices

13.1 Illinois (BIPA). Nobody can add or upload a face while connecting from Illinois, or on an account whose declared or connection state is Illinois, on any Mirai surface, including business and partner tools (Licence 23.6). We collect no biometric data from Illinois residents at launch. If we learn someone with face data lives in Illinois, we stop generation at once and destroy it within 30 days. If Illinois opens: the notice and written release are the signed face-data block and box; purpose and term are in section 5; destruction follows 5.5 and is never later than 3 years after the person's last interaction; there is no sale, lease, trade or profit; and disclosure happens only with consent, to a processor under contract, or as the law requires.

13.2 Texas (CUBI). Notice and consent are the face-data block and box. No sale or disclosure except to a processor under contract, with consent, or as the law requires. Destroyed within 1 year after the purpose ends, and as 12.1 says in a sale of assets.

13.3 Washington (My Health My Data Act). Our Washington Consumer Health Data Privacy Policy is its own page, linked from our home page. In short: your kit, face data and images of you may be consumer health data. We collect them only with your face-data consent, for 5.3. We share them with others (gallery, cameos, partners) only after your separate confirm sheet (Licence 23.7), and otherwise only with processors under contract or as the law requires. We sell none at launch, because Washington residents can't be licensed commercially yet (Licence 23.7). Once that opens, we sell them only through a licence you approve on its approval card, which is also your authorisation to sell, valid for one year and revocable for later sales (Terms B17A). They are never trained on, and no partner holds your adapter. You can confirm what we hold, see who received it, withdraw and delete, including content of you already made, with the 9.1 tap (section 9). Appeal a refusal to legal@mirai.inc, then to the Attorney General.

13.4 California (CCPA as amended by the CPRA).

• Notice at collection. We collect these categories, for the purposes in section 4, and keep them as sections 5 and 7 say:
  • identifiers (wallet address if you connect one, Verified Human Check code, handle, email, IP address);
  • sensitive personal information (kit, face data, account log-in);
  • commercial information (purchases, licences, credits, earnings and payouts);
  • internet activity (how you use Mirai);
  • coarse location (residence and IP country);
  • audio and visual information (creations, kit, voice if you add it);
  • inferences (trust level, likeness scores).
• Sale and sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising: the Meta Pixel never runs for visitors in the United States (section 3). We have sold no personal information in the last 12 months. Licences of you that you price and approve, inside Your Rules, are disclosures you direct, not sales. Training is not offered at launch. If it is, and a dataset that includes you is licensed, that may be a sale of sensitive personal information; before that can happen we add a "Do Not Sell or Share" control in Settings, and switching training off also opts you out. We treat a Global Privacy Control signal as an opt-out of sale and sharing.
• Sensitive information. We use it only to provide what you asked for, keep Mirai safe and meet the law. The uses you can refuse, training once it is offered and Mirai's advertising featuring you, stay off until you switch them on, and go off again with one tap in Settings. We use it for nothing else, so there is no separate "Limit use of my sensitive data" control.
• Your rights. To know (including the categories and specific pieces we hold, our sources, purposes and recipients), to delete, to correct, to opt out of sale and sharing, and to limit. Ask in Settings or at legal@mirai.inc. We verify you by your signature (Terms §0.1A) or by the email on your account. An authorised agent may ask for you. We never treat you worse for using a right.
• Deletion. A request deletes your kit, face data and account data. Mirai keeps Likeness Content and Your Creations it owns, and licence records, to perform the Licence and Terms you accepted and the licences already sold (Cal. Civ. Code §1798.105(d)(1)).
• Notice of Financial Incentive, referrals. If you invite friends, we record who invited whom and when the qualifying step happened (10.4), and give the credits the rewards page shows. That is the whole exchange, and we value that data at the credits given. Stop by not sharing your link.
• Notice of Financial Incentive, training. The AI Training Licence is not offered at launch. Once it is: if you sign the AI Training Licence, you earn 50% of what Mirai, or a holder of that licence, receives for your part of a model or dataset licence, or for paid use of such a model (Licence T5; Terms C3). The rate is fixed. Data involved: kit, recordings and Likeness Content of you (T2). Opt in with "Sign and include AI training" or a later training card (T3), and opt out any time with the training switch (T7). How we value your data: your data is worth what Mirai receives for your part of a licence, and we pay you half. Mirai is not training today and has no training licence, so our good-faith estimate of its value today is $0, and nothing is paid unless it is used. When a licence is signed, your earnings screen shows the amount for your part.
• Direct marketing. We do not share personal information with others for their direct marketing (Cal. Civ. Code §1798.83).

13.5 Other US states. If your state has a privacy law, you have the rights it gives, such as to access, correct, delete and port your data, and to opt out of sale, targeted advertising and profiling. Your sensitive-data opt-in is the face-data box. Colorado: face data follows section 5, including the 24-month limit after your last interaction and our incident plan (5.7). Appeal a refusal to legal@mirai.inc, then to your Attorney General.

13.6 EU, EEA and UK (GDPR and UK GDPR, Art. 13 and 14), once served. Controller, contacts, DPO and representatives: 1. Purposes, bases, legitimate interests and what is required: 4 and 4A. Where data comes from, if not from you: 3. Recipients: 6. Transfers and safeguards: 6.5. Retention: 5.5 and 7. Rights and withdrawal, including withdrawal for existing content: 9. Automated decisions: 8. Before processing face data of people in the EU, EEA or UK, we carry out a data protection impact assessment, and every processor signs Art. 28 terms. You can complain to your supervisory authority, or in the UK to the ICO.

13.7 Brazil (LGPD). Your kit and face data are sensitive data, processed on your specific, highlighted consent. International transfers follow 6.5 and rest on your specific, highlighted consent in its own box on the signing screen. You can add your own face only after an age signal you did not type yourself (Terms §3.2). Your Art. 18 rights, including anonymisation, information about sharing and revoking consent for existing content, are in section 9. Our encarregado is in 1.3. You can complain to the ANPD.

13.8 Argentina (Ley 25.326). We treat your kit as sensitive data and process it only with your express consent. We store no face template, embedding, adapter or private model for Argentine residents: the kit is read each time content of you is made, and nothing face-derived is kept afterwards (Licence 10.3A). Your kit still goes, for each generation, to the engines in section 6, some outside Argentina, on your express consent and the AAIP's model clauses (6.5). Purposes and recipients, with their countries, are on the signing screen and in section 6. A new recipient needs your Allow tap. Consent is freely revocable (CCC Art. 55), including for existing content, by the 9.1 tap. You may access your data free at intervals of at least six months, unless you show a legitimate interest. The AAIP, as control body, handles complaints. Your express consent to sending your kit abroad has its own box on the signing screen. The Spanish version of this notice carries the AAIP's required wording. Registration: Mirai's database is registered with the AAIP's national register, number [to be added].

13.9 Hong Kong (PDPO), once served. This is our Personal Information Collection Statement: purposes in 4, transferees in 6, access and correction in 9.

13.10 Korea (PIPA), at launch there. A confirm sheet asks separately for the private model, transfer abroad, public display and partners (optional). We will add the Art. 28-8 transfer details, our privacy officer and domestic agent, and your Art. 37 right to suspend processing. Age 19. Complaints: the PIPC.

13.11 Mainland China (PIPL). Not served. A resident's account is closed and its data deleted. Serving China would first need a local entity, a transfer mechanism and separate consents (PIPL Art. 29, 39).

13.12 Chile (Ley 19.628 as amended by Ley 21.719), from 1 December 2026. Your kit and face data are sensitive data, processed only on your express consent on the signing screen. You have the rights in section 9: access, correction, deletion, objection, portability and blocking, and to withdraw consent, including for existing content, with the 9.1 tap. Transfers outside Chile follow 6.5: contract clauses with each recipient, or your consent on the signing screen. You can complain to the Agencia de Protección de Datos Personales.

13.13 Mexico (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, 2025). Mirai Talent Inc., at the address in 1.1, is responsible for your data. We treat your kit and face data as sensitive data and process them only on your express consent, given by your signature on the signing screen. The purposes needed to provide Mirai are in section 4. Those you can refuse without losing the service are personal use by others, Mirai's advertising featuring you, autopilot and, once offered, training, each a switch. You can access, correct, cancel or object (ARCO), revoke consent, and limit use or disclosure, in Settings or at legal@mirai.inc; we answer within the time the law sets. We share data with the recipients in section 6, as processors, or with your consent where the law needs it. Changes follow 14.3. You can complain to the Secretaría Anticorrupción y Buen Gobierno.

13.14 Peru (Ley 29733 and its 2024 regulation). Your kit and face data are sensitive data, processed only on your express consent, given by your signature on the signing screen. You have the rights in section 9 (access, correction, cancellation and objection), and to withdraw consent, including for existing content, with the 9.1 tap. Transfers outside Peru follow 6.5. You can complain to the Autoridad Nacional de Protección de Datos Personales. Registration: [to be added].

13.15 Colombia (Ley 1581 de 2012). At launch Mirai collects no face data from Colombian residents (Licence 23.8). This notice is our data-processing policy: purposes in 4, your rights (to know, update, correct and revoke, and to ask for deletion) in 9, the contact in 1.3, and transfers in 6.5. We answer queries within 10 business days and claims within 15. You can complain to the Superintendencia de Industria y Comercio.

13.16 Philippines (Data Privacy Act of 2012). At launch Mirai collects no face data from Philippine residents (Licence 23.8). You have the rights in section 9, including to object, to withdraw consent and to erasure. Our data protection officer is named in 1.3. You can complain to the National Privacy Commission.

13.17 Other countries in Latin America. You have the data rights your law gives, including to withdraw consent, as section 9 sets out, and you can complain to your country's data protection authority.

14. Security, children and changes

14.1 Security. Encryption in transit and at rest. Face data stored apart, with logged, role-limited access. We report breaches to regulators on time (72 hours in the EU and UK) and to you without undue delay. A face-data breach is treated as high risk.

14.2 Children. Mirai is for adults. We do not knowingly collect data from children under 13, or from anyone under the minimum age. The Verified Human Check proves a unique human, not age. Our age signals: your age-and-identity box; the check's in-person verification level, which our identity-verification partner issues only to adults; its minimum-age proof; app store age signals; and the payout provider's verified age. Any signal under the minimum blocks face features. If we find a minor, all use stops at once, sold licences are revoked, kit and face data are deleted within 30 days, and earnings are held, never taken back. Parents can write to legal@mirai.inc.

14.3 Changes. Each version gets a number and date. Old versions stay at /legal/versions. We give 30 days' notice and you confirm with Continue. A change here never widens your Licence. Longer retention needs your fresh signature. General questions: info@mirai.inc.

Version 5.3, 22 October 2026.