Privacy Policy
Mio + Mugi and Mugify Me are operated by Wit & Folly LLC, a Washington limited liability company ("we," "us," "our"). This policy explains what information we collect when you visit mioandmugi.com, contact us, or order a Mugify Me illustration and animation, and how we use, share, keep and delete it.
Contact: [email protected]
Mailing address: Wit & Folly LLC, 6947 Coal Creek Pkwy SE, Suite 326, Newcastle, WA 98059-3136, United States
The short version
- We use your photos only to make, deliver and support your order. We never post your photos.
- We use OpenAI's ChatGPT to create your illustration from your photos, and Higgsfield to animate and upscale the finished illustration. Higgsfield doesn't receive your photos.
- What to know: we've switched off OpenAI's model training for our ChatGPT account, and each order has its own private conversation that we delete after your order is finished. Higgsfield may use the illustration to train its AI models, and deleting it later doesn't undo past training. Both providers process data in the United States and other countries, and may keep deleted content for a limited time under their own policies (§4).
- We delete your photos and working files within 30 days after delivery, and your finished files after 90 days (§6).
- No ads, no analytics, and we don't sell or share your information for advertising.
- We'll only share your finished artwork if you say yes after delivery.
1. Information we collect
When you order (through our order form, provided by Tally): your name, email address, the country you live in, your chosen scene, the photos you upload of yourself and your cat, and your answers to the form's checkboxes, with the date and time you submitted.
When you pay: Stripe processes your payment inside the order form. We receive the amount, status, date, a payment ID, the name on the card, your email, and limited card details (card brand, last four digits, card country). We never see or store your full card number or security code.
What we create: drafts and your finished illustration and animated video.
When you contact us: your emails and anything you include in them, and your answer if we ask whether we may feature your finished artwork.
When you visit the website: our own pages use no analytics, advertising pixels or cookies. Our hosting provider, Cloudflare, processes technical data such as your IP address and browser type to deliver and protect the site. The order form loads Tally, Stripe (payments) and hCaptcha (bot protection), which set their own cookies (§10).
Please upload only what's needed: clear photos of you and your cat. Don't upload ID documents, photos of other people, or photos of anyone under 18.
2. How we use your information, and why
| What we do | Why we're allowed to (where the law asks) |
|---|---|
| Check your photos, create your illustration and 10–15 second animation, deliver them, handle one correction if something is significantly wrong | To perform our contract with you |
| Take payment, issue refunds, handle billing questions | Contract; legal obligations |
| Email you about your order (confirmation, starting, photo questions, delays, delivery, support) | Contract |
| Prevent fraud and misuse; keep our accounts secure | Our legitimate interest in running a safe business |
| Keep business, tax and accounting records | Legal obligations |
| Feature your finished artwork | Only with your separate permission, given after delivery |
We don't sell your information, use it for targeted advertising, or send marketing emails unless you ask for them.
We don't use facial recognition and don't create face templates or other biometric identifiers from your photos. Your photos are visual references for an artwork. We also avoid AI features that create a reusable face or "character" model of you.
3. Featuring your artwork (only with your permission)
We never publish your uploaded photos. After delivery we may ask whether we can share your finished artwork, for example on the Mio + Mugi Instagram or website. Saying no doesn't affect your order. If you say yes, you choose how you're credited (first name or no name). You can withdraw permission at any time by emailing us, and we'll remove the artwork from our own accounts within 7 days. We can't recall copies others have already saved or reshared.
4. AI providers
Mugify Me is made with AI tools and reviewed by a person before delivery. We use two AI providers, both based in the United States:
| OpenAI (ChatGPT): OpenAI OpCo, LLC | Higgsfield: Higgsfield Inc. | |
|---|---|---|
| What we use it for | Creating your illustration from your photos | Animating the finished illustration, and upscaling the animation |
| What it receives | Your original photos and the illustrations it generates. No name, email or order details | The finished illustration and the video it generates. Not your photos, name, email or order details |
| Where | United States and other countries where OpenAI or its service providers operate | United States and other countries where Higgsfield's service providers, including the third-party AI model and compute providers it uses, operate |
| Model training | Before processing any customer photos, we turned off OpenAI's setting that allows our conversations to be used to train its models ("Improve the model for everyone"), and we check it at the start of each order. We don't rate these conversations (thumbs up/down), because feedback can make a conversation available for training. Under OpenAI's terms, conversations with this setting off aren't used to train its models | Higgsfield's standard terms let it use content uploaded to it, and the videos it generates, to train and improve its AI models. There's no opt-out on our plan |
| Our deletion | Each order has its own private ChatGPT conversation, which we keep while we make your artwork and handle any correction. We then delete the conversation and the order's uploads and images saved in ChatGPT's Library within 30 days after delivery (later only while a correction, refund or support issue is open) | We delete the illustration and video from Higgsfield on the day we deliver them |
| Provider retention after we delete | Under its own policies, OpenAI may keep deleted conversations and files for up to 30 days, and longer where it needs to for safety, security or legal reasons. We can't make it delete them sooner | Up to 30 days on active servers and longer in backups. Content already used to train a model can't be removed from it; deletion only stops future use |
| Privacy policy | https://openai.com/policies/privacy-policy/ | https://higgsfield.ai/privacy-policy |
Our protections:
- we keep everything private in both accounts and never publish customer content there
- we don't use features that build a reusable face or "character" model of you
- each order has its own conversation, and we never create share links to it
- we don't use or share your photos for anything except your order
Both providers also handle this content under their own terms and privacy policies, for example for safety, abuse prevention and legal compliance. We use a standard OpenAI account (ChatGPT Plus), so OpenAI's consumer terms and privacy policy apply to what we upload. We keep our creative methods private; that doesn't change anything this policy says about your data.
If we add or change an AI provider, we'll update this policy first.
5. Other service providers
| Provider | What it does | Where | Privacy information |
|---|---|---|---|
| Tally (Tally BV) | Order form; stores your answers and uploaded photos | EU (Belgium) | https://tally.so/help/gdpr |
| Stripe | Payments, receipts and refunds. Stripe also uses payment data for its own fraud prevention and legal compliance | US and other countries | https://stripe.com/privacy |
| hCaptcha | Bot protection inside the order form | US and other countries | https://www.hcaptcha.com/privacy |
| Porkbun (email hosting) | Our email: order emails and file delivery | US | https://porkbun.com/legal/agreement/privacy_policy |
| Cloudflare | Website hosting, delivery and security | US and global network | https://www.cloudflare.com/privacypolicy/ |
We share only what each provider needs. We may also disclose information if the law requires it, to protect rights or safety, or as part of a sale or reorganization of our business, in which case this policy would continue to apply to it.
6. How long we keep information
Copies we control (our order form account, email, computer, and one encrypted backup drive of active orders):
| Information | How long |
|---|---|
| Your uploaded photos, our drafts and working files | Deleted within 30 days after delivery (or after a correction, cancellation, refund or support issue is closed, if later), including from our ChatGPT account (§4) and, on the same day, from our backup drive |
| Your finished illustration and video | Kept 90 days after delivery so we can re-send them, then deleted (including from our backup), unless you've let us feature them |
| Order record: name, email, country, scene, dates, payment ID, your checkbox answers, refund and support notes (no photos) | As long as needed for tax, accounting and legal purposes, generally up to 7 years |
Copies providers keep under their own terms: Tally removes deleted submissions from its backups within 90 days. OpenAI may keep deleted conversations and files for up to 30 days, and longer for safety, security or legal reasons. Higgsfield may keep deleted content for up to 30 days on active servers and longer in backups, and can't remove content from models already trained (§4). Stripe keeps payment records as its legal obligations require. We can't control or guarantee deletion from providers' systems, so we keep what we send them to a minimum.
7. Security
Accounts protected by strong, unique passwords; customer files kept only on an encrypted computer, not in cloud-sync folders, with a single encrypted backup drive for orders in progress; established providers for payments and forms. No system is perfectly secure. If a security incident affects your information, we'll notify you and authorities as the law requires.
8. Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy,
- correct it,
- delete it (we may need to keep order and payment records the law requires),
- withdraw any permission you've given (for example, to feature your artwork), and
- explain how we've handled it.
Email [email protected] from the address you ordered with, or include your order details so we can confirm it's you. We'll reply within 30 days (sooner where your law requires). We won't treat you differently for using these rights. If we decline, we'll explain why, and you can complain to your local data protection authority.
9. Customers outside the United States
We're a US business and we serve customers worldwide in English. Your information is processed in the United States, the European Union and other countries where our providers operate. These countries' privacy laws may differ from yours. The United States doesn't have a single national privacy law, though some US states have their own. Where your law requires it, we ask for your permission in the order form to process your information with our AI providers, including outside your country. You can't order without giving it, because the artwork can't be made any other way. You can still ask us to delete your information at any time (§8).
EEA, UK and Switzerland: we rely on the legal bases in §2. Providers that receive your data internationally use recognised safeguards such as standard contractual clauses or the EU-US Data Privacy Framework, where they offer them. OpenAI and Higgsfield also act under their own terms for some purposes (§4). Higgsfield's model training is its own decision. You also have rights to object to or restrict processing and to data portability, and you can complain to your data protection authority.
South Korea: we provide personal information to these third parties outside Korea:
| Recipient (country) | Purpose | Items | How long they keep it |
|---|---|---|---|
| OpenAI OpCo, LLC (United States and other countries where its service providers operate) | Create your illustration | Your photos; the generated illustrations | Until we delete them (within 30 days after delivery), then up to 30 days under OpenAI's policies, longer where needed for safety, security or legal reasons. Not used for model training under our settings |
| Higgsfield Inc. (United States and other countries where its service providers, including third-party AI model and compute providers, operate) | Animate your illustration and upscale the animation. Higgsfield may also use it to improve its AI models | The finished illustration (no name or contact details) | Until we delete it (after delivery), plus up to 30 days on active servers and backups. Not removable from models already trained |
Data is transferred over the internet when we produce your order. You may refuse, but we can't make your order without it. Contact: [email protected].
Japan: your photos and artwork go to OpenAI and Higgsfield, which are in the United States and may also use service providers in other countries. Those other countries aren't listed by the providers, so we can't name them. Our other providers are listed in §5. The US has no comprehensive national privacy law equivalent to Japan's APPI; some states have their own laws. Recipients' measures (security, training settings, retention) are described in §4 and §5 and in their linked policies.
Brazil, India, Indonesia and other countries: we process your information to perform our contract with you and, where needed, with your consent in the order form. You have the rights in §8. You can withdraw consent at any time, though we can't complete an order already in production without it.
10. Cookies, tracking and "Do Not Track"
- Our own pages set no cookies and run no analytics, advertising or tracking scripts.
- The order form (Tally) loads Stripe and hCaptcha, which set cookies for payment security, fraud prevention and bot detection. These are part of a secure checkout, not advertising.
- We don't track you across websites, so browser "Do Not Track" and Global Privacy Control signals don't change anything we do.
- If we add analytics or advertising tools, we'll update this policy first and ask for consent where the law requires.
11. Children
Mugify Me is only for adults 18 or older, and our website isn't directed to children. If we learn we've received a child's information or photo, we'll delete it and cancel the order with a full refund.
12. Changes to this policy
We'll post any new version here with a new effective date. If a change materially affects how we use information from an order you've already placed, we'll email you before it applies.
13. Contact
Questions, requests, or anything about your photos: [email protected]
Wit & Folly LLC, 6947 Coal Creek Pkwy SE, Suite 326, Newcastle, WA 98059-3136, United States
Related: Terms of Service · Refund Policy