by Mimi's Fabulous Creations™
Privacy Policy
Effective September 23, 2026.
This Privacy Policy describes how Mimi's Fabulous Creations, a sole proprietorship (“we,” “us”), handles information when you use Mimi's Knit Studio, its software product. It reflects the current architecture of the Studio. It is not a restatement of our providers’ own policies.
Information we handle
Account information: email address, password (stored by our authentication provider, not in a recoverable form we can read), and email confirmation status.
Authentication and session data: cookies and similar tokens used to keep you signed in.
Membership and billing status: whether you have complimentary access, and subscription status we store after Stripe tells us (for example trialing, active, past due, or canceled), plus related customer and subscription identifiers. We do not store raw payment-card numbers. Stripe processes card details on Stripe Checkout and the customer portal.
Studio content you provide: design descriptions, optional color notes, and images you upload so we can convert them into charts or send them for AI design generation when you use those features.
Operational records: security and application logs, rate-limit records, and similar diagnostics needed to run the service.
How we use information
We use this information to create and secure your account, confirm your email, provide Studio tools, meter AI design generations, start and manage memberships, prevent abuse, and respond to support requests you send us.
We do not sell your personal information. We do not operate ads on the Studio.
Service providers
Supabase provides authentication, database, and related backend services, including account records and membership status we store there.
Stripe processes payments, invoices, and the customer portal. Card numbers are handled by Stripe, not stored by us as raw card data. Stripe’s own terms and privacy notice apply to payment processing.
OpenAI may receive a design description and, when you upload an image for AI generation, that image, so it can return generated artwork. We use this only when you ask the Studio to generate a design. We do not claim to control OpenAI’s training, retention, or logging. See OpenAI’s published policies for how it handles API data.
Cloudflare is used to host and protect the public website (including security features of that hosting).
Email confirmation and other account messages are sent through our authentication mailer (Supabase Auth). We may point that mailer at a third-party SMTP provider. We do not currently operate a separate in-app support mailbox product; mail you send to our support address is ordinary email.
Rate limiting and identifiers
To reduce abuse of sign-up, sign-in, checkout, and similar actions, we use rate limits. For some anonymous actions we store a hashed, key-derived identifier based on a network address rather than the raw address as the database key. Authenticated limits are tied to the signed-in account.
We may also see standard request metadata in hosting and application logs (such as timestamps and request paths) for security and debugging.
Cookies and session technology
We use essential cookies and similar storage so authentication can work (so the Studio can recognize a signed-in session). These are not used as an advertising tracker.
Retention and deletion
We keep account and membership records while your account exists and as needed to provide the Studio, prevent fraud, and meet accounting or legal duties.
Uploaded images and descriptions are processed to provide the feature you requested. We do not currently run a public customer gallery. We do not promise a specific automatic deletion timeline for every processed file.
You may email support@mimisknitstudio.com to ask us to close an account. You may email privacy@mimisknitstudio.com to ask us to delete personal information we control. We may retain limited records when the law or billing requirements require it, and we cannot erase copies held only by a provider under that provider’s rules.
Security
We use industry-typical safeguards such as encrypted connections in production, access controls, and provider-hosted infrastructure. No method of transmission or storage is completely secure.
Your privacy choices
Depending on where you live, you may have rights to ask for access, correction, or deletion of personal information we hold. Contact privacy@mimisknitstudio.com. We will review requests we can honor for information we control.
The Studio is intended for customers in the United States (checkout collects a billing address and uses automatic tax). We do not represent that the service is offered in every country.
Children
The Studio is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes
We may update this policy as the Studio changes. The effective date below will change when we do.
Contact
Privacy and data requests: privacy@mimisknitstudio.com. Customer, account, and billing support: support@mimisknitstudio.com. We do not publish a street address in this policy.