This Policy explains how MYTH handles personal information when you visit our website, use account services or use the Windows desktop application. MYTH operates from Islamabad, Pakistan. It does not replace the privacy notices of apps you build or of independent services you connect.
For a privacy question or a rights request, contact myth.team.ai@gmail.com. Please identify the account concerned so we can direct your request appropriately.
We collect the name, email address and authentication information needed to register, verify and manage your account. If you choose Google sign-in, we receive the account information needed for that sign-in. We do not receive your Google password.
If you complete onboarding, we save your answers about your role, how you found MYTH and how you intend to use it. We also hold subscription status, plan and allowance information, account preferences and support communications.
Project source files, chat history, versions, assets and project settings are primarily stored in your project folder on your computer. Your MYTH account holds lightweight project records, such as a project identifier and name, to associate those folders with your account.
Local storage does not mean project content never leaves your computer. When you ask AI to work, your prompt, attachments and relevant source or conversation context are transmitted for processing. Build and verification results, errors or snippets can also be returned to the service to help complete or repair a request.
The amount of context depends on the feature and request. Do not submit material you are not authorised to share. Remove unnecessary personal information and use dedicated secret inputs instead of ordinary chat for credentials.
We process generation and model-usage records to meter allowance, prevent overlapping requests from exceeding limits, and investigate failures or abuse. Technical information can include IP addresses, request times, browser or app version, operating system, errors and service logs. This operational processing is distinct from optional website analytics.
Paddle handles subscription checkout and payment details as Merchant of Record. MYTH receives the payment and subscription references, status, amounts and related billing information needed to manage access and support purchases. We do not store your full card details.
Chat feedback and ratings can be associated with a project and sent to MYTH’s quality-review tools. Information you send by email is processed to respond to your request.
We use information for the following purposes. Where applicable law requires a legal basis, processing can be necessary to perform our agreement with you, meet a legal obligation, pursue legitimate interests such as security and service reliability, or act on consent for a specific optional purpose.
- Create and authenticate accounts, complete desktop sign-in and remember requested preferences.
- Process AI requests and connected features, run usage controls and provide project-related services.
- Manage subscriptions, receipts, refunds and customer support.
- Detect fraud, investigate misuse, diagnose errors and maintain service security.
- Review feedback and improve the product, and communicate important account or service changes.
- Meet legal, tax and accounting obligations and respond to lawful requests.
Content needed for a generation is processed by the AI provider or providers used for that request. Their processing terms, retention and service locations can differ. Your selected model and the feature being used affect which provider processes the request.
Relevant request records and feedback may be reviewed to investigate a failure or improve the Service. We do not represent that a local-first project means no provider retention, that all processing is anonymous, or that all AI providers have identical data practices. If your work has confidentiality or regulatory requirements, confirm the applicable arrangements before submitting it.
We do not sell your personal information. We share information where needed with service providers that help operate MYTH, including hosting and database providers, AI providers, authentication, email and payment services. Access is limited according to the purpose of the service.
If you connect Supabase or another integration, content and commands needed for that integration go to the service you selected. For example, Stripe integration secrets for a generated app are handled through the connected project rather than being intended for the app’s distributed source.
Information may also be disclosed where law requires it, to protect legal rights or security, or as part of a business transfer with appropriate safeguards. Independent providers handle information under their own notices as well as any applicable service agreements.
MYTH’s desktop speech transcription runs on the computer using the bundled speech engine. Recordings are not sent to a cloud transcription service by that feature. If you send transcribed text as a prompt, that text is then processed like any other AI request.
Local tools can read and modify files or run development actions under the permissions you grant. Those actions may contact external package registries, development-tool vendors or connected services. Review approval requests before authorising them.
Dedicated secret storage and connected-service controls are intended to reduce accidental exposure. A credential copied into ordinary chat, generated code, an attachment or a screenshot can be processed as content. Rotate credentials if you disclose them accidentally.
The website uses essential device storage for requested functions such as sign-in, redirect state, checkout continuity and remembering your cookie choice. It currently does not load optional analytics or advertising trackers.
The Cookie & Storage Policy describes the current storage purposes and controls. Cookie settings can be reopened from the website footer. A storage preference is not consent to unrelated processing, account terms, marketing email or a payment.
We retain personal information while your account is active or as needed for the purpose for which it was collected. Different records have different needs: active account data supports the Service, security records help investigate abuse, and transaction records may be needed for tax, accounting or disputes.
After account deletion, we remove or anonymise personal account data within 30 days, except where retention is required by law or for legitimate purposes such as fraud prevention or an unresolved dispute. Copies in restricted backups may remain until the relevant backup is replaced and are not intended for ordinary active use.
Files in your own project folders and records held by an independent provider require separate attention. Removing an account does not erase source folders, independent backups, an app you have distributed, or information you separately placed in Supabase or another service.
We use reasonable technical and organisational measures to protect information, including access controls and safeguards appropriate to the service. No storage system or internet transmission is completely secure. Protect your devices and credentials, keep backups, and report suspected unauthorised access promptly.
MYTH and its providers may process information in countries other than where you live. Applicable protections can differ. Where legally required, appropriate transfer safeguards must apply. This Policy does not claim a particular audit certification or guarantee that all information stays in one country.
Depending on the law applicable to you, you may be entitled to request access, correction, deletion or a portable copy of personal information, object to certain processing, restrict its use or withdraw consent for an optional purpose. Withdrawing consent does not affect processing that was lawful before withdrawal.
Send requests to myth.team.ai@gmail.com from the account email where possible. We may need proportionate information to verify your identity or clarify the request. We will respond within the period required by applicable law and explain any lawful limitations.
You can edit supported account details and request account deletion in desktop Settings → Account. Subscription cancellation is separate from deletion. You can ask us about marketing preferences by email; essential security, transaction and account messages may still be necessary.
Where applicable, you may raise a concern with a competent data-protection authority. Contacting us first can help resolve an issue, but does not prevent you exercising that right.
MYTH is not intended for children under 13. We do not knowingly collect personal information from children below that age. If we learn that this has occurred, we take steps to remove the information. A higher age or parental-consent requirement may apply where you live.
A parent or guardian concerned about a child’s information should contact us with enough detail to identify the relevant account, without sending unnecessary sensitive documents.
We may update this Policy to reflect changes to the product, providers or legal requirements. The date at the top identifies this version. Material changes will receive additional notice where required, and a new optional purpose requiring consent will not be authorised merely because the page was updated.
For privacy questions, email myth.team.ai@gmail.com. For information about a third party’s processing, also consult that provider’s current privacy notice.