Privacy Policy

Effective date: September 29, 2026. This policy describes how Suelio, LLC ("we," "us," or "our") collects, uses, and shares information when you use the MIX app and website ("the Service").

1. Information We Collect

We collect the following categories of information:

• Account information. When you sign in with Apple, Apple may share your name and email address with us if you choose to share them. If you select "Hide My Email," we receive only your Apple-assigned relay address. When you sign in with Google, Google may share your account name, email address, and profile photo with us according to your Google settings.
• Waitlist information. When you join a MIX waitlist, we collect your email address and any optional information you provide so we can manage your signup and send the updates described on the form. To prevent automated abuse, we also store a truncated SHA-256 hash of the requester’s IP address in Firebase. You may unsubscribe from update emails at any time.
• Precise location. During an active Live session or walk, MIX collects your precise GPS coordinates and timestamps to trigger stops and keep the experience working. Collection may continue while the app is backgrounded or the screen is locked, and stops when you end that session or walk. These points are associated with your account and scheduled for automatic deletion after 30 days. We use them to reconstruct and diagnose problems with the experience. We do not sell your location data.
• Listening and usage events. We keep session history, including beats heard and walk progress, while your account is active so you can view and manage past sessions. During an active Live session or walk, we also log diagnostic events such as requests, music starting or stopping, pauses, interruptions, and app backgrounding. This diagnostic copy is associated with your account and scheduled for automatic deletion after 30 days.
• Product-feedback outreach. When you start Explore, we record the session identifier, start time, app language, time zone, and whether a single feedback email was sent. We do not use open-tracking pixels or tracked links in these messages.
• Device information. We collect device model, operating system version, app version, and a device identifier for debugging and crash reporting.
• Install attribution. On first open, before sign-in, MIX creates a stable app-scoped install ID and may retain app language, settings, and a MIX shared-walk link. For pre-auth install attribution on iOS, MIX also resolves Apple AdServices attribution fields for Apple Search Ads; the raw AdServices token is not retained. After you sign in on Android, MIX sends its server the Singular app-scoped Singular Device ID (SDID), limited-data-sharing setting, OS version, manufacturer, model, locale, and app version. This record is kept without automatic expiry for attribution and cohort reconciliation, including when you never sign in and after deletion of a linked account. It is linked to your account only after you sign in.

2. How We Use Your Information

We use the information we collect to:

• Generate location-relevant audio narration in real time as you walk.
• Improve walk quality and narration relevance over time.
• Debug crashes and diagnose technical issues.
• Operate and secure the Service.
• Manage waitlists and send requested availability notices and updates.
• Send one product-feedback request after you start Explore so we can learn from your experience and improve MIX. We use this information for our legitimate interest in understanding how people experience the product.

We do not use your information to serve advertising.

3. Data Retention

Precise active-walk location and playback diagnostic events are scheduled for automatic deletion after 30 days. Waitlist rate-limit records are scheduled for automatic deletion 24 hours after the most recent accepted submission attempt. When you delete your account (in-app via Settings, or by emailing us), we delete your location history, account data, and associated usage events. We may retain anonymized, aggregated statistics that cannot be linked back to you.

4. Optional Research Consent

Active-walk location and playback diagnostics are part of operating and supporting a walk; they are separate from optional research use. If you explicitly opt in to research participation, we may also use movement data — including location sequences and listening patterns — for research aimed at improving location-aware audio experiences. Research participation is voluntary. You may withdraw by emailing contact@mixexperiences.com; withdrawing stops future research use but does not affect data already included in completed research.

5. How We Share Your Information

We share your information only in the following limited circumstances:

• Cloud infrastructure. We use Google Firebase (Firestore, Cloud Functions, and related services) to store and process data. Firebase operates under Google's data processing terms.
• Email delivery. We use Resend to manage waitlist contacts and deliver email, including the one-time product-feedback request described above. Resend reports delivery and bounce events; open and click tracking are disabled.
• Analytics and diagnostics. We use Mixpanel for product analytics and Firebase Crashlytics for crash diagnostics.
• Advertising measurement. We use Singular to measure whether ads on Reddit, Google Ads, Meta, X, and TikTok lead to installs and completed walks. On iOS, Apple’s tracking permission controls IDFA use. If you grant Apple’s tracking permission, Singular may use your device advertising identifier (IDFA) for this attribution. If you decline, IDFA collection stays disabled and measurement uses Apple’s privacy-preserving attribution. After sign-in on Android, our server sends Singular the device context and Singular Device ID (SDID) described above. Fingerprinting, probabilistic matching, and cross-company deferred-link identity joins remain disabled.
• Creator waitlist ad measurement. If you reach our creator page from a Reddit ad, the Reddit Pixel records that visit, and when you join the creator waitlist we tell Reddit that a signup happened. We send Reddit a one-way (SHA-256) hash of your email address, never the address itself, together with the Reddit click identifier, your IP address, and your browser user agent. Visits that do not come from a Reddit ad load no Reddit tracking at all.
• AI narration providers. To generate audio narration, we send your current GPS coordinates and the names of nearby places to AI services. We do not send your name or email address to these services.
• Legal requirements. We may disclose information if required to do so by law or in response to valid legal process.

We do not sell your personal data or share it with data brokers. We share only the limited attribution data described above with Singular and participating advertising networks for measurement.

6. Security

We use commercially reasonable safeguards to protect your data, including encrypted storage and transport. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Delete Your Account and Other Rights

You may delete your account at any time from Settings > Delete Account in the Android app. You may also request deletion by emailing contact@mixexperiences.com and we will respond within 30 days. When you delete your account, we delete your location history, account data, and associated usage events. Pre-auth install-attribution records have no automatic expiry and can remain after linked-account deletion. We may retain anonymized, aggregated statistics that cannot be linked back to you.

8. Children's Privacy

MIX is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe your child has provided us with personal information, please contact us.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy at this URL and update the effective date above. We encourage you to review this page periodically. Continued use of MIX after a change constitutes acceptance of the revised policy.