Privacy Policy

How we collect, use, store, and share your data.

Last Modified: June 12, 2026

01. Who we are

This website is operated by MMKKI INC. (business ID 3494510‑9, Finland). It hosts a blog and an AI chat interface with connected tools, available both through the website and through an API. For any privacy question or request, contact hello@mmkki.com.

This policy explains what personal data we process, why, on what legal basis, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).

02. What we collect

  • Account data. If you sign in with Google (Firebase Authentication), we receive and store your email address, display name, and a user ID. If you register for API access, we store the email and name you provide together with your generated API key.
  • Content you submit. Prompts you type and files you upload to the chat or API are processed to produce a response and may be stored temporarily in your session so the tools can operate on them. You can remove them at any time (see retention below).
  • Usage data. We log basic usage of the API and tools — the endpoint used, the model, token counts, and a timestamp — to operate billing and prevent abuse.
  • Payment data. Token purchases are processed by Stripe. Your card details are entered on Stripe and are never seen or stored by us; we receive only a confirmation, the amount, and a payment reference.
  • Cookies and local storage. Used for authentication and to remember your cookie-consent choice. See section 05.

We do not ask for special-category (sensitive) personal data, and you should not submit such data into the tools.

03. Why we use it and the legal basis

  • To provide the service (run the tools, return responses, manage your account) — performance of a contract.
  • To process payments and credit tokens — performance of a contract and legal obligation (accounting).
  • To secure the service and prevent abuse — legitimate interest.
  • To show advertising, where enabled — consent (via the cookie banner).

04. Who we share it with

We use the following processors and third parties:

  • Google (Firebase & Cloud). Authentication, database, and hosting. Governed by Google’s Privacy Policy.
  • Google (Gemini API). Prompts and uploaded content are sent to Google’s generative-AI API to produce responses.
  • Stripe. Payment processing. Stripe’s Privacy Policy.
  • Google AdSense (when advertising is enabled). Used to serve ads on the public blog. See section 05.

We do not sell your personal data. Some of these providers may process data outside the EU/EEA under appropriate safeguards (e.g. Standard Contractual Clauses).

05. Cookies & advertising

  • Essential cookies / local storage — required for Firebase Authentication and to store your cookie-consent choice. These cannot be switched off without breaking core functionality.
  • Advertising cookies — if and when ads are enabled on the blog, third-party vendors including Google use cookies to serve ads based on your prior visits. Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this and other sites. These load only after you accept the cookie banner; non-personalised ads are served if you decline or are in a jurisdiction requiring consent.

You can withdraw consent at any time by clearing the cookie_consent key from your browser’s local storage, and you can manage Google ad personalisation at adssettings.google.com.

06. Retention

  • Account data is kept while your account exists.
  • Uploaded files and session content are transient: they can be removed with the in-app delete/flush controls and are cleared from active sessions; do not rely on them being stored long-term.
  • Usage and payment records are kept as long as required for billing and legal/accounting obligations.

07. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interest. You may also withdraw consent for advertising cookies at any time. To exercise any of these, email hello@mmkki.com. You also have the right to lodge a complaint with your local data protection authority (in Finland, the Office of the Data Protection Ombudsman).

08. Changes

We may update this policy as the service evolves. Material changes will be reflected here with an updated “Last Modified” date.