Mikata is pre-launch. All content is subject to change without notice.
Mikata
Sign in Get started
Your data, your control

Privacy Policy

We built Mikata to be an ally you can trust, so we handle your data the way we'd want ours handled: plainly, and only to make the app work for you. This is the full policy behind the notice you see in the app the first time a feature sends data to our cloud: what we handle, why, who processes it, where it's stored, how long we keep it, and the choices and rights you have.

Last updated: 6 July 2026 · In-app notice version 2 · Controller: Pacific Maxim LLC

Plain-language summary: We use your data only to run the features you choose. We don't sell it or use it for advertising. Microsoft Azure hosts it on our instructions. Where it's stored follows your account's registration location (EU, Japan, or the United States). You can export or delete your data at any time, and cancelling always lets you keep what you created.
On this page

1. Who's responsible

Pacific Maxim LLC, which operates Mikata, is the data controller and the business handling your personal information. "Mikata" (味方) is our product; Pacific Maxim LLC is the company behind it.

Mikata's surfaces include the desktop app, our mobile apps, and the Mikata browser extension. This policy covers all of them: our cloud handles your data the same way whichever surface sends it.

You can reach us about anything in this policy. See Contact for our address and privacy email.

2. What data we handle

Mikata is an app whose primary copy of your study data lives on your own device. Some features send data to our cloud; depending on which features you use, that can include:

  • Account & profile: the identifiers needed to sign you in and run your account.
  • Study data: your lists, words, saved content, progress, and study history, when cloud sync is on — including, for a word you save from a web page, the address (URL) of the page you saved it from.
  • Content you send to cloud features: text or images you submit for processing (for example, a page you scan to pull out its text, a composition you send for AI feedback, or the text and title of a web page you explicitly capture with the browser extension's "Study this page" action to build study material).
  • Class & organization data: if you join a class or institution, your membership, and the progress your instructor is entitled to see (aggregated where applicable).
  • Entitlements & purchase records: your plan and purchase history.
  • Basic diagnostics: limited information about how the app runs, to keep it reliable.

If you never enable a cloud feature, the corresponding data stays on your device and is not sent to us.

3. Why we use it & legal basis

We use your data only to provide the features you choose to use and to keep the app and your account working reliably. We do not sell your data or use it for advertising.

  • GDPR (EU/EEA/UK): our legal basis is performance of our contract with you (the app's terms) for the features you invoke. Features that are off by default ask for your separate consent before they turn on.
  • Japan (APPI): we handle your personal information for the purpose of use described here: providing the features you choose and operating your account.

4. Data-sharing features & consent

This section expands the in-app notice. The first time you engage a feature that sends personal data to us as controller, Mikata shows you that notice and records your acknowledgment. Several features are off by default and only turn on with your action:

  • Cloud sync: off by default. When enabled (and you're signed in), your study data syncs to your account so it's available across devices.
  • Photo scanning: off by default. When you scan a page or photo, the image is sent to our cloud scanning provider to read its text. If you decline the notice, Mikata reads it on your device instead and the image never leaves it.
  • AI feedback: off by default. When you request feedback on a composition, its text is sent to our cloud for analysis and returned with rubric scores and annotations.
  • Diagnostics: basic app-health information. Detailed usage telemetry stays on your device unless and until a cloud diagnostics option is offered, which would ask for consent first.

You can turn any data-sharing feature off at any time in Settings. Turning a feature off stops new data from being sent.

5. Who else processes it

To run these features we share your data with Microsoft Azure, which provides our cloud hosting, storage, and processing on our instructions (a data processor acting for us). We do not share your data with other companies for these features, and we don't sell it to anyone.

6. Where it's processed (international transfer)

Where your data is processed and stored depends on the location your account is registered in:

  • EU / EEA registration → processed and stored within the EU.
  • Japan registration → processed and stored in Japan.
  • All other locations → processed and stored in the United States of America.

7. How long we keep it

  • Your synced and stored data is kept while your account is active.
  • Content you send only for processing isn't stored by us; our infrastructure provider may retain it briefly (up to 30 days) for security and abuse prevention.
  • Basic activity logs are kept for up to 30 days.
  • When you request deletion, we delete your data within 30 days. Some records are retained where we are legally required to (e.g. purchase/tax records) or under a documented basis (security audit logs), holding the minimum necessary data.

8. Your rights & choices

You can access, correct, export, delete, or restrict your data, object to processing, and turn off data-sharing features at any time. Under Japan's APPI you may also request disclosure or correction of your personal information.

  • Export: download a copy of your account and cloud-side data from the customer portal.
  • Erase your data: in the app under Settings → Stop Syncing & Delete. This erases your cloud-side study data while keeping your account and any organization access active.
  • Close your account: erases your data and releases any organization seat you hold. Available on the website.

Before you delete: sign out of, or disable upload on, every other place Mikata runs, including the browser extension, so no other device re-syncs your data back afterward. Deletion stops cloud sync and is irreversible.

You have the right to lodge a complaint with your data protection authority: in the EU/EEA, your local supervisory authority; in Japan, the Personal Information Protection Commission (個人情報保護委員会).

Go to the customer portal →

9. This website

This marketing website does not use tracking or advertising cookies. It loads web fonts from Google Fonts to render our brand typography; no analytics or profiling is performed here.

10. Changes to this policy

We may update this policy as the product evolves. The in-app notice is versioned: when we make a material change, we bump the version and ask you to review it again the next time you engage a data-sharing feature. This page always reflects the current version shown at the top.

11. Contact

Questions or requests about your privacy? Email mikataprivacy@pacificmaxim.com or write to Pacific Maxim LLC, 522 W Riverside Ave Ste N, Spokane, WA 99201-0581, USA.