Privacy policy

Last updated: 28 October 2026

Minimoji makes Mini avatars: 3D heads you design, wear in apps and give a voice. This page says what we keep, where your words, photos and voice go, and what you can do about it. It covers minimoji.com, the Minimoji app, the minimoji CLI and the Minimoji API.

Who we are

Minimoji is made by Hypersocial Studio (HyperSocial Inc). Write to legal@hypersocial.ai about anything on this page.

What we keep

• Your account. You sign in through Clerk. We keep the id Clerk gives you, and Clerk keeps your email address, your name and how you sign in (Apple, Google or an email link). When you sign a terminal in with the CLI, we also keep the name and email Clerk had for you, so the terminal can say who it is signed in as.
• Your avatars. Each avatar's design (a small document of face, hair and colour choices), the name you gave it, and the status line you set on it, with what mood it read as and, if you recorded one, its voice clip. We also keep the 3D models and pictures we make from each design.
• Your keys and sign-ins. For API keys and signed-in terminals we keep a fingerprint of the key (never the key itself), its label and when it was made and last used. A revoked key stays as a record.
• The apps you connected. When you let an app wear your avatar, we keep which app, which avatar and when it was last used.
• Spoken lines. When you ask Minimoji to say a line out loud, we keep the audio, its words and their timing so a repeat costs nothing. A line nobody asks for again for 90 days is deleted.
• Early-access requests. If you leave your email on the homepage to ask for an SDK package, we do not store it: it is passed straight to the list where we keep those requests.
• Network addresses. Some requests count your IP address towards a short rate limit, so it is held briefly for that.

We do not keep the photos you make an avatar from, or the recordings you talk into to have them transcribed. They are sent to the services below for that one request and dropped. A status voice clip is timed to its words on your phone; only the clip and its timing come to us.

3D models, pictures, status voice clips and spoken lines are stored on Cloudflare R2 and served from public addresses that are hard to guess: anyone who has the address can open the file.

Who else handles it

We use these services to run Minimoji. Each gets only what its job needs.

• Clerk runs sign-in and holds your account.
• Convex is our database and runs our server code: everything under "What we keep" that is not a file lives there.
• Cloudflare R2 stores the files: 3D models, pictures, status voice clips and spoken lines.
• OpenRouter passes the words you describe an avatar with, any photo you make one from, and the status lines we read a mood from to the AI model that answers (models from companies such as Google, OpenAI, Anthropic and Typesafe). We keep only the answer. What OpenRouter and those model companies keep is governed by their own policies.
• ElevenLabs turns speech into text and text into speech: recordings you have transcribed, and lines you ask to be said, go there. We keep what is listed above and nothing else from it.
• Vercel hosts minimoji.com and counts page views with Vercel Analytics, which sets no cookies and is not used for ads.

We do not sell your data and we do not show ads.

What apps see

An app you connect gets the avatar you picked for it, that avatar's status line and its voice clip, through a connection you approved on minimoji.com. If you also let it, it can add avatars to your list. It never gets your email, your name or your other avatars. Disconnect any app at minimoji.com/me, and it stops getting your avatar.

Your choices

• Delete your data. In the Minimoji app, open settings and tap "delete my data": your avatar list, status lines and app connections are deleted, your terminals and API keys are signed out, and then your account is deleted. "Delete my data" at minimoji.com/me does the same and keeps your account and API keys. Some things stay stored after that: the avatar designs themselves and the 3D models and pictures made from them (a design is filed by its contents and may be shared by anyone who made the same one), status voice clips you recorded, spoken lines until their 90 days run out, and the record of your signed-out terminals with the name and email they had. Write to legal@hypersocial.ai and we will delete those too.
• Revoke keys and terminals at minimoji.com/developers/keys.
• Disconnect apps at minimoji.com/me.
• Ask us at legal@hypersocial.ai for a copy of what we hold about you, or to correct or delete it.

Children

Minimoji is not for children under 13, and we do not knowingly keep data about them. If you think a child has given us data, write to legal@hypersocial.ai and we will delete it.

Changes

When this page changes, the date at the top changes with it. If a change matters, we will say so on the site or in the app before it applies.