Privacy Policy

Last updated: October 6, 2026

This Privacy Policy ("Policy") explains how Supono Holdings LTD ("we", "us", or "Company") collects, uses and protects your information when you use justmimic.ai: the justmimic.ai website, the justmimic.ai browser extension (Chrome, Edge and other Chromium browsers) and the justmimic.ai Mac app (together, the "Services"). This Policy is in addition to our Terms of Service. By using the Services, you agree to both this Privacy Policy and the Terms of Service.

The short version: justmimic.ai reads a page or your screen only when you ask, never reads password fields, and sends only what is needed to answer your request. We don't sell your data and we don't show ads.

We reserve the right to change this Policy at any time. We will notify you of changes by a prominent notice on our website or in the app, or by email if you have an account. Material changes take effect thirty (30) days after notice; non-material changes or clarifications take effect immediately. Your continued use of the Services after a change means the updated Policy applies.

1. Legal basis

We only collect and process Personal Information where we have a lawful basis: consent (where you have given it), contract (where processing is necessary to deliver the Services you asked for) and legitimate interests (such as keeping the Services secure and preventing abuse).

2. What justmimic.ai reads on your device

  • Pages you ask about. When you ask justmimic.ai something about a page, or ask it to do something there, it reads that page's visible text and a short list of its buttons and fields (for example Button "Send"), as text.
  • Never password fields, one-time-code fields, or pages you haven't asked about.
  • Your selection. If you select text and choose Explain, Translate, Rewrite or Reply, justmimic.ai uses that text.
  • Recordings. When you teach justmimic.ai a task, it notes the steps you take (clicks and typing on that page) and saves them on your device as an automation.
  • Voice. In the Mac app, what you say is turned into text on your Mac for that request; the audio is not stored and is not sent to us. In the browser extension, speech is turned into text by your browser's built-in speech recognition, which your browser's maker (for example Google, in Chrome) may process under its own privacy policy. We receive only the resulting text.
  • Mac app, when you ask: it can read the text of the window in front (for example the email you want to reply to), an area of the screen you point at, your calendar and reminders, your unread emails in Apple Mail, and a file you name. Files whose names or contents look like passwords or keys are never read to the AI.
  • Watching and schedules: if you ask justmimic.ai to watch a page or run a task on a schedule, it does so at those times, on your device.

3. What we collect on our servers

  • Your requests. The text of a request and the page or screen excerpt it needs (limited to a few thousand characters; never passwords), so our AI can produce the answer, reply, translation or next step. Only when a request needs AI.
  • Install information. A random install ID created by justmimic.ai, your app version and platform, and usage counters (how many requests per install per day or week), to run the service, apply plan limits and stop abuse.
  • Your account, if you sign in. When you sign in with Google or Apple we receive your email address, your name (if the provider shares it) and the provider's account ID, so your plan works on the website, in every browser with the extension and on every Mac. We never see your Google or Apple password.
  • Payments, if you buy a plan. Payment happens on Stripe's checkout page; we never see or store your card number. From Stripe we keep your customer and subscription IDs, your plan and its renewal date.
  • Scheduled emails and reminders (optional). When you ask justmimic.ai to do something later or on a schedule, our server keeps that scheduled job so it happens even when your Mac is closed: what it is, when it runs, its recipients' email addresses, the exact email to be sent (subject, text and any attached file) until it's sent, and the history of its runs. Nothing is sent until you approve that exact email, unless you chose "Approved for this schedule" for it. When your Mac is closed, reminders are emailed to your account's address.
  • Pages you ask justmimic.ai to watch (optional). For a public page, our server keeps its address and what it last saw there (a price, or a fingerprint of the page) and checks it about once an hour. Pages that need your login are never read by our server: justmimic.ai on your Mac reads them in your own browser.
  • Workflows you share (optional). When you share one of your commands or projects, our server keeps its name, steps and web links (never your files) for 30 days under a short code, so the person you give the code to can import it.
  • Mailboxes you connect (optional). If you connect Gmail or Outlook so scheduled emails go out from your own address, we keep an encrypted access token for that mailbox. It is used only to send emails you scheduled and approved; we never read your inbox. Without a connected mailbox, scheduled emails go out from justmimic.ai's sending address with your address to reply to.
  • Synced automations (optional). If you link your devices, the automations you saved (their names and steps, never passwords) are stored on our server so your other devices can use them.
  • Messages you send us (optional). When you use the Contact page we keep your email address, your name if you give it, the topic, your message and any files you attach, plus your IP address, the country and city looked up from it, your browser and the page you came from, so we can answer you and keep spam out. Only our team sees them.
  • Technical information. Your IP address and basic request information in our server logs (never the text of your requests), for security and debugging. From the IP address we look up, on our own server, your approximate location (country, region and city). We also receive your operating system and version, browser, language and time zone.
  • Usage stats (you can turn them off). Once a day: how many times each kind of justmimic.ai skill was used and how many answers got a thumbs up or down. Counts only, never what you asked, the pages you read, your screen, your files or the answers. Turn them off in the extension's Settings → Privacy or the Mac app's Settings → Privacy; they are always off with Local AI, and with them off we don't receive your language or time zone either.

We do not receive your browsing history, screenshots you didn't ask about, passwords or cookies from other websites. Requests that justmimic.ai handles with saved steps or on-device features send nothing to us.

4. How we use the information

We use it only to provide justmimic.ai: answering your requests, running your tasks, keeping your plan on your account, applying usage limits, sending essential service messages (such as receipts and security notices), and protecting the Services and our users against fraud and abuse. We also look at location, device and usage information in aggregate (for example, how many people use justmimic.ai in each country, or which features are used most) to improve justmimic.ai and decide which languages and markets to support. Your requests are not used to train AI models.

We do not sell or rent your Personal Information, use it for advertising or show ads, or use it to build profiles or determine creditworthiness.

5. Who we share it with

We share Personal Information only as needed to provide the Services:

  • AI processing: our AI service (AI Hub), which runs models on servers operated for us, processes your request to produce the answer.
  • Web search: when you ask justmimic.ai to research something, your search words go to Brave Search through our server (or to DuckDuckGo or Wikipedia), and justmimic.ai reads the top pages like a browser would.
  • Sign-in providers: Google and Apple, when you choose to sign in with them.
  • Payment processor: Stripe, for paid plans. Please see Stripe's privacy policy for how it handles your payment information.
  • Google Analytics and Google Ads: only if you accept cookies on the website — page visits, the campaign you came from, and whether you downloaded, installed or bought, to measure our advertising. See Google's privacy policy at policies.google.com/privacy.
  • Service providers: hosting, database and file storage providers (such as Amazon Web Services, where the Mac app downloads are stored), under contract and only for our purposes.
  • Apps you connect: if you connect Notion, Linear, Jira, GitHub or Google Calendar, justmimic.ai talks to them directly from your device with the key you entered. Those keys stay on your device.
  • Legal reasons: when required by law or valid legal process, or to protect our users, the security of the Services, or the rights and property of Supono Holdings LTD. In a merger, acquisition or reorganization, your information may be transferred to the successor; we will notify you and, where required, ask for your consent.

6. How long we keep it

  • Request text and excerpts: processed to answer you and not stored after the response.
  • Scheduled jobs: kept until you delete them; a finished one-time job's email text and files are removed 30 days after it was sent. Mailbox access: kept until you disconnect the mailbox or delete your data.
  • Install ID, usage counters, usage stats, IP address, location, device details and synced automations of an install without an account: deleted automatically 180 days after the install was last used.
  • Contact messages and their attachments: deleted automatically 2 years after you sent them, or sooner if you ask us at support@suponoholdings.com.
  • Account and plan: kept while your account exists. Billing records are kept as long as the law requires, even after you delete your data.
  • Backups: removed within 30 days of deletion from our active systems.

7. Your choices and rights

  • Delete your data: press "Delete my data on your server" in justmimic.ai's settings (the extension's Privacy section, or Settings → Privacy in the Mac app). It deletes that install's records and synced automations right away. You can also email support@suponoholdings.com.
  • Access, correct or download: ask us for a copy of your Personal Information (in a machine-readable form) or to correct it, at support@suponoholdings.com. We may need to verify your identity first.
  • Stop sending anything: don't use AI features, or use the app's Local AI, where the AI runs on your computer.
  • Usage stats: turn them off in the extension's or the Mac app's Settings → Privacy.
  • Site access: the extension starts with access only to the tab you open it on; you can turn "Allow on all sites" on and off in its settings.
  • Local data: removing the extension deletes everything it stored in the browser. For the Mac app, delete the app and its data folder ~/.aimation.
  • GDPR and similar laws: if you are in the European Union, the UK or another place with data protection laws, you also have the right to object to or restrict processing, to withdraw consent at any time, and to complain to your local data protection authority.

8. Cookies and tracking

The justmimic.ai website asks before using any cookies for measurement. If you press Accept on the cookie banner, it loads Google Analytics and the Google Ads tag, which use cookies to see which ads and links bring visitors here, which pages they view, and whether they download the Mac app or add the extension. If you press Decline, none of that runs and nothing about your visit is sent to Google.

To count which campaign brought a download, install or purchase, the website keeps a random visitor key in your browser's storage together with the campaign tags in the link you followed (such as utm_source or Google's click id). When you download the Mac app, our server notes the download for that key and keeps a one-way hash of your network address (never the address itself) for up to 3 days, to recognise the app's first start on the same network. If you accepted cookies, our server then tells Google Analytics that the app was installed and, later, about purchases and renewals of your plan (the plan, amount and currency — never your payment details), so we can see which campaigns work.

The website also keeps a few small items so it works: whether you finished the tour, your cookie choice and, if you sign in, your sign-in session. Stripe, Google and Apple may set their own cookies on their pages when you use them. To change your cookie choice, clear this site's data in your browser; the banner will ask again.

Some browsers send a "Do Not Track" signal. We don't change our practices in response to it; use the cookie banner's Decline to turn measurement off. To learn more, visit allaboutdnt.com.

9. Security

Data sent to our servers is encrypted in transit (HTTPS) and protected with access controls. AI and payment keys stay on our servers and are never shipped in the extension or the app. No system is 100% secure, but we work to protect your information and will notify you of a breach where the law requires.

10. Links to other websites

justmimic.ai may open or link to other websites. We don't control them and they have their own terms and privacy policies.

11. Children

The Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect Personal Information from children under 16. If you believe we have, please contact us at support@suponoholdings.com and we will delete it.

12. International transfers

Our Company is based in the United States. Your information may be stored and processed in the United States and other countries where we or our service providers operate, which may have data protection rules different from those of your country. By using the Services, you consent to these transfers.

13. Contact us

If you have any questions about this Policy or your Personal Information, contact Supono Holdings LTD through the Contact page on our website or at support@suponoholdings.com (website: suponoholdings.com).