Privacy Policy
Effective date: October 25, 2026.
Miji is provided by an individual developer in the United States, who is the controller responsible for Miji’s handling of your information. This policy covers the app, its reward service and this website. For privacy questions or requests, contact Miji support.
Miji does not send your vocabulary to its service or Google. Dictionary lookups and learning work on your device. Automatic private iCloud backup can store your saved library and progress with Apple, as described below. Reward services, optional usage counts, purchases and advertising have separate data practices described below. Exports, device backups and information you choose to send to support can contain learning data.
Why Miji processes information
Each use of information has a purpose and a legal basis. Under the EU and UK General Data Protection Regulation, these are:
- Private iCloud backup, daily Flashcards and the reward wallet, crediting a rewarded ad you chose to watch, unlocking Pro you bought: providing the features you use (performance of a contract, Article 6(1)(b)). Storing the reward wallet’s identifier on your device and sending it to Miji’s service is strictly necessary for daily Flashcards to work.
- Dictionary downloads and updates: providing and maintaining the dictionary content you use, including Expanded English when you choose to download it (performance of a contract, Article 6(1)(b)). Apple handles its delivery service under its own privacy and service terms.
- Daily limits, duplicate-claim and fraud checks, short-lived rate limits, the security receipt kept after deletion: Miji’s legitimate interest in keeping rewards fair and secure and in making sure deleted records stay deleted (Article 6(1)(f)). You can object through support. Delete online Flashcard data removes the reward activity described below, but a minimal security receipt and short-lived rate-limit records can remain for the security purposes and periods stated in this policy. Support assesses objections to retaining that security data.
- Checking with Google’s consent service whether a privacy choice is required, and keeping your ad choices available: complying with the law’s consent requirements and Miji’s legitimate interest in keeping your ad privacy choices reachable, including after you switch to Pro (Article 6(1)(c) and (f)).
- Personalized ads and Google’s access to your device for advertising: your consent, collected through Google’s consent message (Article 6(1)(a)). Ads with limited personalization, ad measurement and fraud prevention by Google and its partners rely on the legal bases shown in that message, which can include legitimate interests.
- Apple age assurance and significant-update permissions where required: complying with applicable age-assurance laws (Article 6(1)(c)); the age result stays on your device.
- Optional usage counts: your consent (Article 6(1)(a)), which you can withdraw at any time in Settings.
- Answering support messages and requests: providing the service and Miji’s legitimate interest in resolving your request.
- Hosting this website and measuring visits without cookies: Miji’s legitimate interest in running and improving the website.
Learning on your device
English Core ships inside Miji, and Expanded English is an optional download. Search, pronunciation and practice work offline with the dictionary content on your device, without an account. Saved words, flashcards, settings and practice history live in local storage shared with Miji’s Share Sheet and notification extensions. Review notifications, the daily reminder and the reminder the day before a free trial ends are all scheduled on your device, not sent from a server. During first-run setup, Miji asks what to call you (you can skip this), what to name the bird, two questions about how you learn and a reminder time; these answers stay on your device and in your private iCloud backup, and are never sent to Miji’s service or Google. Live Practice can show a practice question, never its answer, on your Lock Screen, in the Dynamic Island and in Home Screen widgets; it is prepared on your device, and you can turn it off in Miji’s Settings or in iOS. Recent searches stay on this device only: Miji keeps up to 200, excludes them from backups, and Clear History removes them.
Miji does not send vocabulary, search terms, deck names or individual practice answers to its service or Google. Optional usage reports can describe how often features are used, without the words or answers themselves.
Apple-hosted dictionary downloads and updates
Apple delivers dictionary packs through its managed Background Assets service. Miji can check for Core improvements and available pack information automatically, including before you choose Expanded English. Apple can update downloaded packs in the background. Expanded English downloads only after you choose it; setup and the bundled Core dictionary remain usable while it downloads. Apple controls when background transfers run.
Delivery requests identify dictionary packs and their versions, and expose connection information, including your IP address, to Apple. Miji does not add your lookup queries, saved words, deck names, practice answers, reward-wallet credentials or usage reports to these requests. Dictionary search continues to run on your device. These requests do not go to Miji’s reward service or Google.
Miji stores your download choice, installed-pack information and cached dictionaries on your device, shared with its download extension. In Settings → Dictionaries, removing the Expanded download opts out of future Expanded downloads and updates and removes its downloaded files when removal completes. If removal fails, retry there. Saved Flashcards and practice progress stay, and the bundled Core baseline remains available. Cancelling an in-progress download also opts out of future Expanded downloads; previously validated cached files can remain inactive until removed.
Removing a dictionary does not erase request records Apple already holds. Miji does not receive or keep Apple’s delivery logs, and a specific retention period for those logs is not established in Apple’s Background Assets documentation. Apple’s handling follows Apple’s Privacy Policy and its App Store privacy information. You can use Apple’s Data and Privacy options for Apple-held information.
Private iCloud backup
When iCloud is available and automatic backup is enabled, Miji stores saved and archived words, definitions and examples, deck names and assignments, learning history and card schedules, level progress, portable learning settings, your first-run answers (what to call you, the bird’s name, the two learning questions, the reminder time and which offer you chose) and permanent earned Flashcard capacity in your private iCloud database through Apple’s CloudKit. Miji’s developer dashboard cannot read these private records. The data is not sent to Miji’s reward service, analytics reports or Google, and is not used for advertising. Unsaved dictionary searches are not included.
Open Settings → Your library to view backup status and the last successful backup, turn automatic backup off, retry a backup or delete the iCloud backup. Turning backup off retains an existing backup. Deleting the iCloud backup removes its learning data and capacity and leaves a minimal empty generation marker to stop old devices from silently putting the deleted data back. Local learning remains on each device; other devices pause backup when they next connect. You can explicitly start a new backup later.
Recovery requires the same iCloud account, Miji enabled for iCloud, a connection and available iCloud storage. Changes that have not finished uploading cannot be recovered after deleting the app. Check that your latest backup completed before reinstalling. Apple purchases are verified separately through StoreKit. Pro ownership is always verified with Apple, never from this backup. This private backup does not contain purchase ownership, authentication secrets, advertising consent or usage-sharing consent. Any previous Miji reward account is separate; deleting it does not delete this iCloud backup. Apple handles iCloud storage under Apple’s Privacy Policy.
Reward wallet and daily Flashcards
When the reward service is available and the age protections below permit it, Miji can automatically claim daily Flashcards when you open the app online. This creates or uses a reward wallet for that installation, without requiring Sign in with Apple. Miji creates the wallet’s random installation identifier and authentication secret on your device the first time it opens, and sends them the first time it is online and age protections permit reward activity. This applies to Free and Pro users alike; Pro users’ daily Flashcards are kept as permanent capacity. The service stores the identifier and a hash of the secret. Requests also include a time-zone offset to determine your local reward day.
When age protections permit reward activity, each time Miji opens online it also uses the same identifier and secret to ask the service for any earned Flashcards that did not reach the phone, such as an ad reward whose reply was interrupted. This check creates no records; it only notes the day the phone was last online, which sets when its records expire.
The service stores wallet creation information, the last day the phone was online, granted local dates, check-in streaks, grant amounts and times. For ad rewards it also stores random ticket identifiers, ad-unit and reward details, claim and verification status, and Google transaction identifiers. These records authenticate requests, apply daily limits, prevent duplicate or fraudulent claims, and preserve earned capacity. They are pseudonymous records linked to an installation or recovery account, and Miji’s service never receives your name or email address.
Your reward wallet does not contain vocabulary or practice answers. Miji does not send its installation identifier, authentication secret or Apple recovery account identifier to Google. A random reward ticket is sent with a rewarded ad so a completion receipt can be matched to the reward.
These records become eligible for automatic deletion 183 days (about six months) after the phone was last online with Miji. Cleanup runs daily in bounded batches; a backlog or service failure can delay completion. A phone that returns later simply starts a fresh wallet; Flashcards it already earned stay on the phone. A phone once linked to a previous reward account is instead deleted together with that account, as described under Previous reward accounts. To delete them sooner, open Settings → Privacy → Account & privacy and choose Delete online Flashcard data; no Apple sign-in is needed. This removes this phone’s online daily claims, streaks, ad tickets and grants, including their recovery backup. It preserves local words, practice history, the one-time offline gift, earned Flashcards and Apple purchases. Signing out of a previous reward account leaves its server records until deletion or expiry; deleting that account also erases its associated reward data as described below.
Miji saves a pending deletion request on your phone before contacting the service. If protected storage is unavailable, deletion cannot proceed. While a saved request is pending, Miji shows Deletion pending and new daily claims and reward offers stay off. Reconnect and choose Retry online data deletion. After confirmation, online Flashcards remain off until you choose Enable online Flashcards. Enabling creates a fresh identifier and secret; it does not reset the one-time offline gift or remove existing local capacity.
After erasing the installation records, the service retains a minimal security receipt for 183 days: the old random installation identifier, a hash of its secret, the environment and deletion time. During that time it prevents delayed or replayed requests, or a restored device backup, from recreating deleted records. The receipt contains no daily claims, streaks, ad activity, grants or Apple identity. Cloudflare database recovery backups can retain deleted records for up to 7 days.
Purchases through Apple
Apple handles payment, subscriptions and purchase restoration through StoreKit. Miji reads purchase status on your device to unlock Pro. Miji does not receive your card details or send purchase receipts to its reward service. An optional usage report can include a coarse plan category or a Pro-start event, as described below. A Miji recovery account is not required to buy or use Pro. Apple’s handling of purchase and account data follows Apple’s Privacy Policy.
Optional rewarded ads
Watching an ad is optional and does not require an Apple recovery account. Each time Miji launches, if age protections permit it, it asks Google’s consent service whether a privacy choice is required where you are, so the consent message and your ad privacy choices work correctly. Google receives that request, including your IP address, from which it can estimate your approximate location, and basic device and app information; it is not an ad request. For a Free user, Miji may also preload an ad when opening the Flashcards sheet, an eligible Pro offer, or a word page with little saving capacity remaining. This can happen before you tap Watch Ad. Ad requests proceed only after a consent choice where one is required, and only when Google’s consent system permits them. Pro users never request ads.
Google Mobile Ads, its consent service and authorized advertising partners may process IP addresses and approximate location, device or app identifiers, ad impressions, ad and app interactions, and crash, performance and other diagnostic data. These support consent management, third-party ad delivery and measurement, analytics, security and fraud prevention. Google’s bundled SDK privacy declarations also list “Developer’s Advertising or Marketing” for approximate location, device identifiers, app interactions, advertising data, performance data and other diagnostic data. Ads with limited personalization can still collect data. Miji enables Google’s publisher first-party ID feature for advertising within the publisher’s apps. When you choose to prepare an ad, Google’s consent flow may also ask for Apple’s App Tracking Transparency permission. If you allow tracking, Google can use the advertising identifier (IDFA) and information from other companies’ apps and websites to personalize ads and measure their performance. If you decline, Google’s ad requests omit IDFA. Other permitted identifiers and data collection can still apply. If an ad shown in Miji leads you to install another app, iOS can send the ad network an attribution report through Apple’s SKAdNetwork, which Apple designs not to identify you.
Google can send a signed completion receipt containing the random reward ticket and transaction details to Miji’s reward service. Miji does not attach vocabulary or Apple sign-in credentials to Google ad requests. Read Google’s Privacy Policy, how Google uses information from apps that use its services and Google’s SDK data disclosures.
Advertising choices
Where required, Google presents European consent choices before ads can be requested. The European consent message identifies participating ad partners and links to their policies. Where Google makes privacy options available, open or return to regional consent and opt-out choices in Miji’s Settings → Privacy → Account & privacy → Ad privacy choices. The control appears only when Google’s consent system requires it. You can change or withdraw the choices offered there.
Declining consent or tracking permission, skipping an ad or being unable to receive one leaves dictionary search and practice available. Granting tracking permission does not earn extra Flashcards. Miji allows personalized ads when your consent and privacy settings permit them; Google may instead serve nonpersonalized or limited ads, or no ad. You can change Apple’s tracking permission in iOS Settings → Privacy & Security → Tracking. Changes apply to later ad requests; they do not erase earlier advertising records. Google’s Ad Settings provides additional Google-account controls. Changing ad choices or deleting a Miji recovery account does not itself erase records already held by Google or its partners; Google’s retention policy and the partners’ policies describe their retention and data-request options.
Do Not Track: Miji’s app and website do not respond to browser Do Not Track signals. In the app, Apple’s tracking permission and Ad privacy choices control whether Google can use the advertising identifier or personalize ads. When ads are shown, Google and its advertising partners may collect information about your activity over time and across different apps and websites, as described above.
Previous reward accounts
New Miji reward-account signup is retired; private iCloud backup preserves your full library and earned capacity without a Miji login. Older builds offered an optional Apple sign-in account for ad-earned Flashcards. For those existing accounts, the service retains a random account identifier, Apple’s app-specific user identifier, encrypted authorization credentials, sessions and reward links until deletion, or until 183 days pass with no sign-in, no active session and no linked phone online, when the service deletes the account the same way as a deletion you request. The service no longer creates new accounts. No name or email is requested. Account & privacy retains cleanup, including for signed-out accounts under Previous reward accounts. Fresh Apple identity proof can download or delete an existing account without a login exchange, session creation or new reward link. Download previous account data returns that account’s identifier and metadata, session expiry dates, its owned and backed-up rewards, related ad transactions and linked-installation references. It excludes authentication secrets and unrelated records belonging to other accounts. Vocabulary is never sent to the reward service.
Optional usage counts
Usage sharing is off unless you turn on Share usage counts in Settings → Privacy, where you can also turn it off at any time. Unless you opt in, Miji does not record or transmit these usage reports. Age protections also prevent recording and sending usage reports for a known child under 13. Turning sharing off stops future reports and clears the local report tally and the sharing-period start date. Turning it on again starts a new period; reports already received cannot be recalled.
If you opt in, Miji can send summaries to its own service containing the app version, the week your current sharing period began, a rough count of days since it began, plan category, bucketed save, practice and reward counts, and limit, offer or Pro-start events. A random batch identifier prevents duplicate processing; it is not a persistent user or device identifier. Reports contain no vocabulary, search terms, individual answers, Apple account identifier or reward-wallet credential, and are not sent to Google or used for advertising.
The current production service discards these submitted reports without storing their contents in its database. Network requests still reach the hosting infrastructure. This describes the current configuration; this policy will be updated before that storage practice changes. Google’s separate ad and diagnostic processing is not controlled by the usage-sharing switch.
Hosting, sharing and security
Miji’s reward service uses Cloudflare Workers and D1 to process requests and store reward and recovery records on the developer’s behalf. Requests expose connection information, including an IP address, to Cloudflare. Miji’s rate limits store short-lived, secret-keyed IP digests and request counts rather than raw IP addresses. Miji has not enabled application request logging for the reward service; Cloudflare’s own infrastructure processing and records are separate. See Cloudflare’s Privacy Policy.
Miji uses HTTPS for service requests, hashes installation and session secrets stored by its service, and encrypts stored Apple authorization credentials. Miji requires third parties receiving information through the app—including hosting providers, advertising networks and SDK providers—to provide the same or equivalent protection described in this policy and required by Apple’s App Review Guidelines. Their handling of information is also governed by applicable provider agreements and the linked privacy policies. Miji is operated from the United States, so information Miji’s service receives is processed in the United States and in the other countries where Cloudflare operates. Google and Apple also process information outside your country; their policies explain their international processing and safeguards. No online system can guarantee absolute security.
Retention and account deletion
An installation’s wallet and reward records become eligible for automatic deletion 183 days after the phone was last online with Miji, with daily bounded cleanup as described above; records of a phone once linked to a previous reward account are deleted with that account. Ad tickets that never paid out are deleted 30 days after they expire. You can erase this phone’s records sooner using the account-free control above, or delete the backup account. Local earned capacity does not depend on retaining those server records.
In Settings → Privacy → Account & privacy, use Delete backup account for a retained login, or expand Previous reward accounts and choose Delete a previous account after sign-out. This deletes the previous Miji reward identity, its sessions and associated reward records. Installations associated only with that account are erased, including their daily and ad history. On an installation also associated with another account, the deleted account’s backed-up ad records are removed while the other account’s records remain. The app separately erases this phone’s whole online reward history and pauses new claims before contacting the service. After confirmation, online Flashcards stay off until you explicitly enable them again.
Historical anonymous records that no longer have an account association cannot be located through Apple account deletion. Delete online Flashcard data authenticates this phone’s own records without an Apple account. Shared daily activity that has no per-account attribution is not assigned to a former account by guessing. Contact support for access or deletion requests; never send authentication secrets.
Signing out requests revocation of this phone’s recovery session; it does not delete the account. Protected credentials needed to finish an interrupted deletion can remain on this device until cleanup completes. Use the pending-deletion controls on the same screen to retry or finish cleanup. Your Apple account remains unaffected.
After account deletion, a minimal encrypted Apple authorization-revocation record can remain temporarily to retry revocation. Retries stop after seven days; cleanup is scheduled hourly after that period. Expired sign-in challenges and rate-limit records are also periodically removed. Cloudflare’s database recovery history can contain earlier copies of deleted records; its current Free-plan recovery window is 7 days.
Earned Flashcards and vocabulary already stored on your device remain after recovery-account deletion, but account-based recovery on another installation is removed. Deletion does not remove a Lifetime purchase, cancel an Apple subscription or automatically erase provider-held advertising records. Manage subscriptions separately through Apple. Apple, Google and Cloudflare retain their own records according to their policies and service requirements.
Local data, exports and device backups
Removing a word in Miji archives it from the active collection; its saved records and learning history can remain in local storage. Deleting the app removes its app-container data but does not notify the reward service or delete server records, existing exports or device backups. Some account credentials use the device-only iOS Keychain and may survive app removal. If you use Miji Test, it has its own app data.
A vocabulary export can include saved words, cards, learning history and decks. You choose its destination through Apple’s file picker, which may include iCloud Drive or another provider; Miji does not upload it to its reward service. Exports do not include reward-wallet credentials or purchase records. You are responsible for copies you create or share.
Your iCloud or computer backups may contain app data according to your device settings. Manage those backups through Apple. The reward wallet’s original identifier and secret are stored with your library, so a device backup (iCloud Backup or a computer) can include them, and restoring it to another phone can continue that wallet. A wallet turned back on after deleting online Flashcard data is kept only in this phone’s Keychain and does not travel in a backup. Reward journals are excluded from device backup, and device-only Keychain credentials do not migrate to another device through a backup. Reward recovery does not back up vocabulary, and Miji’s developer cannot access your personal device backups.
Support and the website
If you email support, the developer receives your email address, message and any attachments you choose to send, and uses them to respond and resolve your request. Cloudflare Email Routing and the email services used to deliver and answer the message process that correspondence. Messages can remain in support mailboxes after the conversation ends; you can request deletion. Do not send passwords, authentication secrets, payment details or vocabulary you do not want to share.
This website is hosted by Cloudflare. Web requests reveal ordinary connection and request information to the host. Cloudflare Web Analytics measures visits and page performance; Cloudflare says this analytics service does not use cookies or local storage to track visitors or fingerprint them by IP address or browser. Miji also uses traffic statistics to understand page and crawler activity. The site adds no advertising trackers. Following a provider link or opening an email app uses that service’s own privacy practices.
Children
Miji is designed for people aged 13 and older and is not directed to children. If a child under 13 has used Miji’s online features, choose Delete online Flashcard data on that phone in Settings → Privacy → Account & privacy to remove its online records, or contact support for help.
Age range from Apple
Where a law requires it, such as for some Apple Accounts in Texas, Miji asks Apple for your age range using Apple’s age range feature, and Apple may show a dialog. Miji keeps a result (under 13, 13 to 17, 18 and older, or unavailable) on this device, plus when it asked and which significant updates have been shown or approved. These records are not included in backups and are never sent to Miji’s service or to Google. Miji checks with Apple on each eligible launch; Apple manages the age range’s cache. If Apple’s requirements check is unavailable, reward claims, Google contact and usage uploads stay paused. On eligible devices using iOS 26.2 or 26.3, the necessary requirements information is unavailable; updating to a supported iOS version is needed before the check can succeed. If Apple does not provide a usable range, Miji preserves known age protections, uses restricted defaults and checks again on a later launch. If Apple reports that you are under 13, continuing to use Miji requires Pro: no ads, no Google consent check, no online rewards and no usage counts. Existing saved words remain available to read and export if Pro ends. Apple purchases, your private iCloud backup and controls to download or delete existing online data remain available, including from the stop screen. For ages 13 to 17, Miji does not initiate Google advertising or consent requests or ask for tracking permission. Previously prepared ads are discarded when Miji learns that the user is under 18. This stops new requests; information already received by a provider remains subject to that provider’s handling and request controls. If a parent or guardian must approve a significant update, Apple sends them the request and the new features wait for their answer. Adults see Apple’s acknowledgment where required.
Your requests and changes to this policy
Depending on applicable law, you may have rights to access, correct, delete or receive a copy of information, restrict or object to processing, withdraw consent, or complain to your local data-protection authority. Contact Miji support to make a request, including concerns about a child’s information. Miji answers rights requests within one month, or tells you within that month if it needs longer as the law allows. You can also use support to complain about Miji’s handling of personal information. Miji acknowledges privacy complaints within 30 days, investigates, provides progress updates and explains the outcome without undue delay. No special form or subject line is required.
You can get a copy of this phone’s reward records with Download my online data in Settings → Privacy → Account & privacy (Miji 1.1 and later). A separate Download previous account data action uses fresh Apple proof for an earlier reward account, including when signed out. You can delete those records using the controls described above. Miji’s service holds no name or email. It can locate reward records only through an installation’s random identifier, which appears in your downloaded copy, or, for a previous reward account, fresh Sign in with Apple proof in the app. Deleting records and fresh copies still go through the controls on your phone, which prove the records are yours. If Miji cannot identify records that belong to you, it will tell you so. Do not send authentication secrets. Local vocabulary is not held by the developer, and separate requests to Apple, Google or another provider may be needed for information they control.
Changes will be posted on this page with an updated date. Where applicable law requires additional notice or consent, it will be provided before the relevant change. Material changes to collection or sharing will also be reflected in Miji’s App Store privacy information.