Privacy Policy
Last updated November 02, 2025
This Privacy Notice for Mythos ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Download and use our mobile application (Mythos), or any other application of ours that links to this Privacy Notice
- Engage with us in other related ways, including any sales, marketing, or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].
Summary of Key Points
This summary provides key points from our Privacy Notice.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? We do not process sensitive personal information.
Do we collect any information from third parties? We do not collect information from third parties.
How do we process your information? We process information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.
How do we keep your information safe? We maintain appropriate organizational and technical safeguards. However, no electronic transmission or storage is 100% secure.
What are your rights? Depending on where you live, you may have certain rights regarding your personal information.
How do you exercise your rights? The easiest way is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.
1. What Information Do We Collect?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you register on the Services, express interest in information about us or our products and Services, participate in activities on the Services, or otherwise contact us.
Personal Information Provided by You. The personal information we collect depends on your interactions and choices. It may include:
- Names
- Email addresses
- Debit/credit card numbers
- Billing addresses
Sensitive Information. We do not process sensitive information.
Payment Data. We may collect data necessary to process your payment (e.g., payment instrument number and associated security code). All payment data is handled and stored by RevenueCat. See their privacy notice: revenuecat.com/privacy
Social Media Login Data. If you choose to register using a social media account (e.g., Facebook, X), we will collect certain profile information from the provider, as described in section 6 below.
Application Data. If you use our application(s), we may collect:
- Mobile Device Data. Device ID, model, manufacturer, OS and version, configuration, app IDs, browser type/version, hardware model, ISP/mobile carrier, IP (or proxy), phone network, and features accessed in our apps.
- Push Notifications. We may request to send push notifications. You can turn these off in your device settings.
This information helps maintain security and operation of our apps, troubleshoot, and support analytics and reporting.
All personal information you provide must be true, complete, and accurate, and you must notify us of changes.
Information automatically collected
In Short: Some information, such as your IP address and/or browser and device characteristics, is collected automatically when you visit our Services.
We automatically collect device and usage information (e.g., IP address, browser/device characteristics, OS, language preferences, referring URLs, device name, country, location, usage timestamps, pages/files viewed, searches, features used, device events, error reports, hardware settings). This is primarily used for security, operations, analytics, and reporting.
The information we collect includes:
- Log and Usage Data. Service-related, diagnostic, usage, and performance information (e.g., IP, device info, browser type/settings, timestamps, pages/files viewed, searches, features used, device events like crash dumps, hardware settings).
- Device Data. Information about the device you use to access the Services (e.g., IP/proxy, device and app IDs, location, browser type, hardware model, ISP/mobile carrier, OS, configuration).
2. How Do We Process Your Information?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process personal information depending on how you interact with our Services, including:
- To facilitate account creation and authentication and manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To save or protect an individual's vital interest, such as to prevent harm.
3. What Legal Bases Do We Rely On to Process Your Personal Information?
In Short: We only process your personal information when necessary and when we have a valid legal reason (legal basis), such as your consent, compliance with laws, performance of a contract, protection of your rights, or legitimate interests.
If you are located in the EU or UK: Under GDPR/UK GDPR, we may rely on:
- Consent. You can withdraw your consent at any time.
- Performance of a Contract. Necessary to fulfill contractual obligations or pre-contractual steps.
- Legal Obligations. Compliance with legal obligations (e.g., cooperating with law enforcement, defending legal rights, litigation disclosure).
- Vital Interests. Protecting your vital interests or those of a third party.
If you are located in Canada: We may rely on express or implied consent. You may withdraw your consent at any time. In certain exceptional cases, processing without consent is permitted by law.
4. When and With Whom Do We Share Your Personal Information?
In Short: We may share information in specific situations and/or with the following third parties.
- Business Transfers. In connection with, or during negotiations of, any merger, sale of assets, financing, or acquisition of all or part of our business.
5. Do We Offer Artificial Intelligence-Based Products?
In Short: We offer products, features, or tools powered by AI/ML or similar technologies ("AI Products").
We provide AI Products through third-party service providers ("AI Service Providers"), including OpenAI. Your inputs, outputs, and personal information may be shared with and processed by these providers to enable the AI Products. You must not use the AI Products in ways that violate the providers' terms or policies.
Our AI Products are designed for functions such as:
- AI insights
- AI applications
How We Process Your Data Using AI. Personal information processed via our AI Products is handled in line with this Privacy Notice and our agreements with third parties to ensure security and safeguards.
6. How Do We Handle Your Social Logins?
In Short: If you register or log in using a social media account, we may have access to certain information about you.
Our Services let you register and log in using third-party social media account details (e.g., Facebook, X). We receive certain profile information from your provider (often name, email, friends list, profile picture, and other public information). We use this information only for purposes described in this Notice or otherwise made clear to you. We do not control the provider's use of your information. Review their privacy notices for details and settings.
7. Is Your Information Transferred Internationally?
In Short: We may transfer, store, and process your information in countries other than your own.
Our servers are located in the United States and France. Your information may be transferred to, stored by, and processed by us and third parties in these and other countries.
If you are in the EEA, UK, or Switzerland, such countries may not have laws as comprehensive as yours. We will take necessary measures to protect your personal information in accordance with this Notice and applicable law.
8. How Long Do We Keep Your Information?
In Short: We keep your information as long as necessary to fulfill the purposes outlined in this Notice unless otherwise required by law.
We retain personal information only as long as needed for purposes set out here (or longer if required/permitted by law). No purpose will require retention longer than the period in which users have an account with us. When no longer needed, we delete or anonymize it, or securely store it until deletion is possible.
9. How Do We Keep Your Information Safe?
In Short: We aim to protect your personal information through organizational and technical security measures.
Despite safeguards, no electronic transmission or storage is 100% secure. We cannot guarantee that unauthorized third parties will never defeat our security. Transmission of personal information to/from our Services is at your own risk; access the Services within a secure environment.
10. Do We Collect Information from Minors?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
If we learn we collected personal information from users under 18 (or local equivalent), we will deactivate the account and promptly delete the data. If you become aware of such data collection, contact [email protected].
11. What Are Your Privacy Rights?
In Short: Depending on your location, you may have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, subject to local law.
In some regions, rights include: (i) access/copy, (ii) rectification or erasure, (iii) restriction, (iv) data portability (if applicable), and (v) not to be subject to automated decision-making. You may also have the right to object in certain circumstances. Contact us using the details in section 15.
If you are in the EEA/UK and believe we process your personal information unlawfully, you can complain to your Member State data protection authority or the UK data protection authority. If in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent. Where we rely on consent, you may withdraw it at any time by contacting us. This won't affect processing prior to withdrawal or processing based on other lawful grounds.
Account Information
If you'd like to review/change your account information or terminate your account, you can contact us at [email protected].
Upon request to terminate your account, we will deactivate or delete your account and information from active databases, though we may retain some information to prevent fraud, troubleshoot, assist investigations, enforce legal terms, and/or comply with legal requirements.
12. Controls for Do-Not-Track Features
Most browsers and some mobile OS/apps include a Do-Not-Track ("DNT") setting. No uniform standard for recognizing/implementing DNT has been finalized; therefore, we do not currently respond to DNT signals. If a standard is adopted that we must follow, we will inform you in a revised Notice.
13. Do United States Residents Have Specific Privacy Rights?
In Short: If you are a US resident, you may have rights to request access, details about processing, corrections, copies of, or deletion of your personal information, and to withdraw consent.
Categories of Personal Information We Collect
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details such as real name, alias, postal address, phone, unique identifier, online identifier, IP, email, account name | YES |
| B. Protected classification characteristics | Gender, age, DOB, race/ethnicity, national origin, marital status, other demographics | NO |
| C. Commercial information | Transactions, purchase history, financial/payment info | NO |
| D. Biometric information | Fingerprints, voiceprints | NO |
| E. Internet or similar activity | Browsing/search history, online behavior/interactions | NO |
| F. Geolocation data | Device location | NO |
| G. Audio/electronic/sensory | Images, audio, video, call recordings | NO |
| H. Professional/employment | Business contact details, job title, work history, qualifications | NO |
| I. Education information | Student records, directory information | NO |
| J. Inferences | Profiles or summaries from collected personal information | NO |
| K. Sensitive personal information | NO |
We have not disclosed, sold, or shared personal information to third parties for business or commercial purposes in the preceding twelve (12) months. We will not sell or share such information in the future.
Your Rights (US States)
You may have the right to:
- Know whether we are processing your personal data
- Access your personal data
- Correct inaccuracies
- Request deletion of your personal data
- Obtain a copy of personal data you shared with us
- Non-discrimination for exercising your rights
- Opt out of processing for targeted advertising, sale of personal data, or profiling
How to Exercise Your Rights
Submit a data subject access request or email [email protected].
14. Do We Make Updates to This Notice?
In Short: Yes. We will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top. If we make material changes, we may notify you by prominent notice or direct communication.
15. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, email [email protected].
16. How Can You Review, Update, or Delete the Data We Collect from You?
Depending on the laws of your country or US state of residence, you may have the right to request access to the personal information we collect from you, details about processing, corrections, or deletion, and to withdraw consent (where applicable). These rights may be limited by law. To request to review, update, or delete your personal information, please submit a data subject access request.