Privacy Policy

In short

Your data is yours. Nothing you record in your account is sold, shared or used for anything other than running mise for you. Your prices, quantities, suppliers and counts are never shown to other customers.

1. Who we are

mise is an inventory management app for restaurants, bars, stores and food service businesses, operated by mise INTELLIGENCE LTDA, a company registered in Brazil (CNPJ 60.745.631/0001-61), headquartered in Campinas, São Paulo. This policy covers the mise app (iOS, Android, web) and the mise.ws website.

2. Data we collect

2.1 Data you give us

Data	Why
Name	To identify your account
Email	Login, password recovery, service messages
Password	Authentication — stored only as an irreversible hash
Business name, address and tax ID (when needed)	Business profile and billing
Phone (optional)	Account recovery and support
Product photos	Your inventory catalog

2.2 Data created by using the app

Inventory counts, quantities, prices and recipe cards
Invoices you import (file or photo)
History of scanned products
Access logs (IP address, date and time, device) for security and troubleshooting

2.3 Device permissions

Camera — only to read barcodes and take product photos. We don't record video or access your photo library without your action.
Bluetooth — to connect barcode scanners and scales.
Storage — to save product photos and exports.

None of these permissions is used in the background without a direct action by you in the app.

2.4 What we don't collect

Your contacts, microphone, health or biometric data
Browsing history outside the app
Advertising identifiers for cross-app tracking

3. How we use your data

To run the app: save counts, produce reports, sync the systems you connect.
Authentication: verify your identity and protect your account.
Billing: through a payment processor. Card details never pass through our servers.
Support: answer your messages.
Security: detect and prevent fraud and abuse and meet legal obligations.
Improvement: aggregated, anonymized usage statistics.

We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising.

4. Shared product database

mise keeps a shared product catalog (barcodes, names, brands, sizes, categories). When a customer adds or completes a product, only its public characteristics may be added to the shared catalog. Never included: purchase prices, quantities or counts, suppliers, dates, or anything that identifies the business or person that recorded it.

5. Who we share data with

Only with service providers needed to run the Service:

Provider	Purpose	Data
Fly.io	Server hosting	Operational data (encrypted at rest)
Cloudflare R2	Product photo storage	Images and file names
AI providers (Anthropic, Google)	Identifying and categorizing products, reading invoices	Barcode, product name, product or invoice photo. Never your name, email or business details.
Payment processor	Subscription billing	Name, email, tax ID where required, amount
Email provider	Service e-mails	Name, email, message content

We disclose data to public authorities only under a court order or an express legal requirement.

6. Where data is stored and international transfers

Data is stored on servers in Brazil (Fly.io, São Paulo region) and on a global CDN for photos. Some providers process data in the United States. Transfers rely on standard contractual clauses or equivalent safeguards.

7. How long we keep data

Active account: while you use the app.
After cancellation: 90 days in case you reactivate, then anonymized or deleted.
After a deletion request: personal data deleted promptly; billing records kept for the legally required period without being linked to you.
Security logs: 90 days.

8. Your rights

Depending on where you live — for example under the UK GDPR, the EU GDPR, US state privacy laws such as California's CCPA/CPRA, or Brazil's LGPD — you can:

know whether we process your data and get a copy of it;
correct inaccurate data;
ask us to delete your data;
export your data in an open format (Excel/CSV), at any time from the app;
object to or restrict certain processing, and withdraw consent;
complain to your data protection authority (in the UK, the ICO).

We will not treat you differently for exercising these rights. To use them, email mise@mise.ws from your account address; we reply within 15 days. You can also delete your account directly in the app (Account → Delete my account).

9. Security

Traffic protected by HTTPS/TLS
Passwords stored with bcrypt
Card data tokenized by the payment processor — never on our servers
Encrypted daily backups
Internal access restricted to authorized people

If a security incident affects your personal data, we will notify you and the relevant authorities within the legal deadlines.

10. Children

mise is a professional tool for people aged 18 and over. We do not knowingly collect data from children. If we find such data, we delete it.

11. Cookies

The website uses only essential cookies and local storage for login and preferences (language, theme). We do not use advertising cookies or third-party analytics that profile you outside the app.

12. Changes

We may update this policy. Material changes will be announced by email and in the app at least 15 days in advance.

13. Contact

Privacy questions or requests: mise@mise.ws (subject: "Privacy — your request").