1. What this policy covers

This policy explains how Migami handles personal information in the Migami iPhone app, on the Migami website and when you join the Android waitlist or contact us. “Migami”, “we” and “us” refer to the team providing the Migami app and website. For privacy questions or requests, email support@migami.app.

The app and website work differently. The app keeps your work records on your device. The website needs to receive your email if you choose to join the Android waitlist. This policy does not govern Apple, your email or messaging provider, your contractors, or other services you choose to use.

2. Information stored in the app

You do not need to create an account. Migami stores the information needed to organise your work and prepare invoices in its private storage on your iPhone.

The current app stores work records in a local data file and preferences in iOS settings storage. It has no Migami-operated account database, cloud sync service or analytics backend. We cannot browse, retrieve or edit the work records on your phone remotely.

Migami does not sell personal information, use your work records for advertising, track you across apps or websites, or send those records to an AI service. It does not access your contacts, microphone, photos or bank account to perform its current functions. ABN validation in the app checks the number locally; it is not an online ABR lookup.

3. Location, maps and notifications

Optional site detection

If you turn on shift detection and give permission, iOS monitors geographic regions around sites you mark. Background detection requires the relevant iOS location permission, including “Always” access when enabled. iOS can notify Migami when you enter or leave a site even when the app is not on screen.

Migami uses site coordinates and arrival/departure times to offer a visit for review. It does not record a continuous GPS route. A detected visit is a prompt, not proof of hours worked. You confirm the shift and add extra time yourself. We do not receive a location feed from the app.

Finding a site on the map

You can search an address, drop a pin or choose “I'm at the site now”. Address search, map display and turning coordinates into an address use Apple's MapKit and geocoding services. Those services may send search text, coordinates and related technical information to Apple to fulfil the request, subject to Apple's privacy terms. Local storage does not mean these Apple-powered features never use a network.

Notifications and control

With your permission, Migami creates local notifications reminding you to check a finished site visit. Notification text can include a site name and visit times, so consider your lock-screen preview settings. Migami does not use its own remote push notification service.

Turn off Shift detection under You → Settings to stop watching sites, or change location and notification permissions in iPhone Settings. Manual shift logging remains available without location permission. Turning off a permission does not itself delete existing records; use the data deletion control described below.

4. Sending and exporting invoices

When you choose Email invoice or Share PDF, Migami creates the document on your phone and passes it to the mail composer or iOS share sheet. You choose the recipient and service and confirm the action. Email invoice requires a mail account configured for iOS Mail. Share PDF uses the apps and save destinations available on your device; when appropriate, Migami asks you whether the shared invoice was sent.

An invoice can contain your name, ABN, email, phone, bank details, contractor details, site names or invoice nicknames, shift dates, hours, rates, GST status and totals. Check these details before sharing. Extra time is folded into the hours on the invoice rather than labelled separately.

The service and recipient you choose receive the information you send. Their own privacy and retention rules apply. We do not send invoices through a Migami email server and cannot recall a PDF, delete a recipient's copy or see what happens after you share it. Temporary PDF files may remain in the app's temporary storage until cleaned up by the app or iOS.

5. Subscriptions and Apple services

Apple processes Migami Pro purchases, free-trial eligibility, renewals, cancellations, refunds and restoration through the App Store and StoreKit. The app receives product and transaction or entitlement information needed to verify subscription access, such as the product purchased and whether an entitlement is active. It caches subscription status on your device.

We do not receive your payment card number or banking credentials from these purchases. Apple handles your Apple Account and payment information under Apple's privacy policy and its App Store privacy information. Apple may separately provide developer sales or financial reports and diagnostics where enabled through your Apple settings. Migami does not install a third-party crash-reporting or analytics SDK.

Manage or cancel a subscription through your Apple Account settings. Deleting app records, deleting the app or leaving the Android waitlist does not cancel a subscription.

6. Website and Android waitlist

Browsing the website

The website does not currently include advertising pixels, analytics scripts, tracking cookies or externally hosted fonts. It does not use browser storage to build a visitor profile. Fonts and page assets are served with the site.

A web server necessarily processes technical request information, including your IP address, requested page, request time and browser-provided headers, to deliver pages and handle requests. The production website is hosted by Cloudflare. Cloudflare processes this information to deliver and secure the site and may retain technical logs under its service policies. The signup handler does not deliberately log signup bodies. See Cloudflare’s privacy policy. The map and shift examples on the website are illustrations: they do not request your location or save work records.

Joining the Android waitlist

If you submit the form and tick the consent box, we receive your email address, signup time and a record of the consent wording version. We use this only to send the Migami Android updates you requested, including availability or testing opportunities when applicable. Joining is optional and is not a promise of a launch date or access to a beta.

The website sends each signup to our inbox through Cloudflare Email Routing. No signup database is maintained on the website; signup information is held in the resulting email, separate from the iPhone app. Cloudflare may include the country associated with the request. We do not link the email to your app records, sell it, add it to unrelated marketing lists or use it for advertising audiences.

Cloudflare delivers signup emails to our Gmail inbox, provided by Google. There is no separate mailing-list database or automatic welcome-email service. To leave the list or correct your address, email support@migami.app from the address you used. You can also reply to an Android update to unsubscribe. See Google’s privacy policy.

7. Information you send us directly

If you contact Migami, we receive the information you choose to send, such as your email address, message and attachments. We use it to respond, investigate a problem and manage the request. Do not send ABNs, bank account details, invoices, precise site information or other people's personal information unless necessary. Remove or obscure sensitive information from screenshots where possible.

Contacting support does not grant remote access to your phone or work records. We only see what you provide. Email support@migami.app. Cloudflare Email Routing forwards messages sent to this address to our Gmail inbox, where Google processes and stores the correspondence.

8. When information may be disclosed

The app does not upload your work records to us. Information leaves your device when you direct a share/export action, use an Apple-powered network service or use an operating-system backup service. These situations are described above and below.

For website, waitlist or support information we actually hold, we use it to operate the website, deliver requested updates and answer support requests, with Cloudflare and Google providing the hosting and email services described above. We may disclose information where legally required, to respond to a valid legal process, or where reasonably necessary to protect legal rights and investigate abuse, subject to applicable law. We do not have remote access to local app records to hand over.

Migami is intended for use in Australia, but that does not mean every website, Apple, email or support service processes data only in Australia. Cloudflare and Google operate internationally, including in the United States and other countries where they and their service providers operate. Website requests and email correspondence may be processed outside Australia. We do not select an Australia-only storage region for the Gmail inbox; their privacy policies explain their international processing and transfer protections. Apple and services you choose may process information internationally under their own policies.

9. Retention and deleting information

Your app records

Records remain on your device until you delete them, delete all app data, remove the app, or the operating system removes them. Individual records can be protected from deletion when needed to preserve existing shifts or invoices. Sent invoices keep snapshots of the details used when created, even if you later edit your profile, contractor or site.

You → Delete all my data clears the app's work records, visits in progress, pending and delivered local notifications and temporary PDFs, then returns to onboarding. This does not cancel your Apple subscription, remove files you saved elsewhere, recall sent invoices or delete data held by your chosen services. Removing the app generally removes its local storage; operating-system backups can be separate.

Save any records you need before deleting. Tax and business record-keeping obligations may require you to retain your own copies. Migami cannot recover local records it never received.

Waitlist and support records

Waitlist information is kept while it is needed to operate the Android list and provide the updates you requested, until you withdraw consent or the list is closed. We delete signup emails when you request removal or once the Android launch updates are complete and the list is closed. This is handled manually in our inbox, not by an automatic expiry job. We do not reuse the list for unrelated marketing.

Support correspondence is kept for as long as reasonably needed to resolve the request and handle follow-up, security or legal requirements. Any legally required retention must be limited to the relevant information and purpose. You can request deletion at support@migami.app. Deletion from our active inbox does not immediately erase residual copies in Google’s backup systems; those follow Google’s deletion processes. We do not keep a separate website signup backup. A request cannot erase a copy independently held by an email recipient.

10. Security and device backups

Migami uses iOS's app sandbox and platform protections for local data. We do not claim a separate end-to-end encrypted cloud service or custom encrypted database. Protect your phone with a strong passcode, keep iOS updated and take care when sharing invoice PDFs. No device, transmission or storage method is guaranteed completely secure.

Depending on your Apple and device settings, local app files may be included in iCloud or computer backups. Those backups are managed by you and Apple or your backup software; Migami does not run a separate cloud backup or sync service. Deleting app data does not necessarily remove historical device backups. Manage those copies through the relevant backup settings.

The local website preview is for development only. Public waitlist collection uses HTTPS and Cloudflare Email Routing. Signup and support records are held in the receiving email account rather than a publicly accessible website file or database.

11. Your choices, access and privacy rights

• App data: view and edit your details in Migami, review shifts and invoices, export invoice PDFs and use Delete all my data.
• Permissions: control location and notification access in iPhone Settings, and disable shift detection in Migami.
• Sharing: choose which invoices to send, to whom and through which service.
• Waitlist: joining is voluntary. You may withdraw consent, ask to correct your address or request deletion. Email support@migami.app or reply to an update to unsubscribe. Every update will include removal instructions.
• Information held by us: depending on the law that applies, you may ask for access, correction, deletion or other available privacy rights. We may need proportionate verification that the request relates to you. We cannot access data stored only on your phone.

We will assess requests under applicable law and explain any lawful reason we cannot fulfil a request. Withdrawing optional consent does not affect earlier lawful processing or prevent you using unrelated functions.

12. Children

Migami is designed for people managing paid work and invoices, and the website waitlist is not directed to children under 13. We do not knowingly seek children's information for the waitlist. If you believe a child has submitted personal information, email support@migami.app so it can be reviewed and, where appropriate, removed. App Store age ratings describe content suitability and do not change this purpose.

13. Changes to this policy

We may update this policy as Migami or its services change. The updated version will state its revision date. Material changes to collection or use will be explained where appropriate, and fresh consent obtained when required. A change to the policy does not itself grant consent to collect app records or use waitlist addresses for unrelated purposes.

14. Contact and privacy complaints

Email support@migami.app for privacy questions, access or correction requests, consent withdrawal, waitlist removal and complaints. Please use the address associated with your request where possible, so we can locate the relevant correspondence. We cannot retrieve app records that remain only on your phone.

When contacting us about a complaint, explain what happened and the outcome you are seeking, without including unnecessary financial or identity details. We will investigate and respond within a reasonable period and any applicable legal deadline. If you are in Australia and your concern is not resolved, you may be able to contact the Office of the Australian Information Commissioner, where it has jurisdiction, or another relevant regulator. The availability of statutory rights depends on the circumstances and applicable law.