Last updated: 2026-08-07
Deepform Oy builds mainiø, an AI literacy and learning app. This notice explains what data we collect through the website and app, why we use it, and where it is stored.
mainiø is developed by Deepform Oy, based in Finland. Controller: Deepform Oy. Contact: hello@deepform.fi
We do not ask for age, date of birth, official school identifiers, government IDs, payment card numbers, contacts, or precise location. Payments and subscriptions are handled by Apple or the relevant app store provider, so we do not receive raw card details.
We process account, subscription, and learning data to provide the service you request. We use limited diagnostics and security data based on our legitimate interest in operating and protecting mainiø. Optional website and Academy analytics are based on your consent, which you can refuse or withdraw at any time through Analytics settings in the website footer.
mainiø uses Supabase for authentication, database, and backend services. The primary database is in the EU, in Frankfurt, Germany. The app may also keep a local cache on your device so it can display progress and respond quickly.
We use service providers only where needed to operate the product. These include Supabase, Apple, Vercel, Anthropic for AI features powered by Claude, and Black Forest Labs for image generation features. Website analytics and speed measurement may be provided by Vercel and, where configured, other analytics tools. These providers process data on our behalf or as independent providers for their part of the service.
The web Academy uses local browser storage to save completed lessons, exercise answers, practice progress, and your analytics choice. This functional storage is needed to provide the progress-saving experience you request and remains available when you choose Essential only.
Optional analytics are disabled until you select Allow anonymous analytics. If allowed, we may use Vercel Web Analytics and Speed Insights for aggregated traffic and performance measurement, our structured Academy analytics in Supabase, and Plausible or Google Analytics only when configured. Google advertising storage and personalisation signals are disabled. You can change your choice at any time through Analytics settings in the footer.
If you allow anonymous analytics, we record limited, structured events in Supabase when an Academy page, course, chapter, lesson, or practice mission is opened, when a lesson or practice mission is completed, and when an App Store link is selected. An event may include the page path, course, chapter, lesson or mission identifier, language, referral website, campaign labels, environment or test status, and a timestamp.
For lesson engagement, we also record active reading time while the page is visible, focused, and recently active, together with an interaction count and maximum scroll depth. We do not record what you type, click, or answer. A random anonymous session identifier is kept in session storage to understand movement between Academy pages in the same browser-tab session. It is not kept as a permanent account, fingerprint, or cross-session identity.
Academy analytics do not contain lesson answers, free-text input, names, email addresses, account identifiers, IP addresses, or device fingerprints. Academy progress and answers remain in your browser's local storage unless you clear them. We retain Academy event data for up to 13 months and use it only to understand and improve the learning experience.
mainiø includes AI-powered learning features. When you use them, the input needed for that feature may be sent to an AI provider to generate a response. Do not submit sensitive, confidential, medical, financial, official school, or third-party personal data unless you have a clear right and reason to do so. AI output can be incomplete or incorrect, so important information should be checked before relying on it.
These providers process data under their own terms and policies: Anthropic Privacy Policy and Black Forest Labs Privacy Policy. We do not sell AI feature inputs, use them for third-party advertising, or use them for cross-app tracking.
Generated images are normally returned to the app for your use. They are not intended as a permanent storage service. If you save generated content to your device or share it elsewhere, that later use is under your control.
mainiø is not designed to collect age or date of birth, and it is not currently built as a formal school administration system. If a school or other organization wants to use mainiø with minors, the school and Deepform should agree the privacy roles, lawful basis, instructions, and any extra safeguards before deployment.
mainiø should not be used to make official decisions about admission, grading, placement, discipline, exam monitoring, or other formal educational outcomes without a separate written review and agreement.
We keep account and learning data while your account is active or as long as needed to provide the service. You can delete your account in the app or contact us to request deletion. We may keep limited records where required for legal, accounting, fraud prevention, security, or dispute purposes.
If you're in the EU or EEA, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can also withdraw consent where processing is based on consent.
To exercise these rights, email hello@deepform.fi. You can also contact the Finnish Data Protection Ombudsman if you believe your rights have not been respected.
We use authenticated access, database access controls, and service-level security controls to protect user data. No online service can guarantee absolute security, but we aim to keep data collection limited and access controlled.
If we change how we handle your data, we'll update this page. The "last updated" date at the top will reflect any changes.