Xiaomi MiMo Privacy Policy

Our Privacy Policy was published and became effective as of 25 June 2026. Please take some time to read through our Privacy Policy. If you have any questions, please contact us.

Introduction

Xiaomi MiMo is an API open platform service and a suite of tools, including Xiaomi MiMo Code, provided to you by Beijing Xiaomi Mobile Software Co., Ltd. and its affiliates (hereinafter collectively referred to as "Xiaomi" or "we"), powered by generative artificial intelligence model technology.

We take your privacy seriously. This Privacy Policy serves as a specific statement and commitment regarding privacy for Xiaomi MiMo, and constitutes an important component of the Xiaomi Privacy Policy. In the event of any inconsistency between this Privacy Policy and the Xiaomi Privacy Policy in terms of specific agreements involving Xiaomi MiMo, the terms of this Privacy Policy shall take precedence. Matters not expressly provided for under this Privacy Policy shall be governed by the Xiaomi Privacy Policy. For detailed provisions regarding the protection of minors' information, security measures, and cross-border data transfer, please refer to the Xiaomi Privacy Policy .

This Privacy Policy has been developed with you in mind. It is of utmost importance to us that you fully understand our practices regarding the collection and use of your personal information and that you retain control over the information you provide to us. This Private Policy describes how we collect, use, disclose, process, and store the information you provide to us when using our Xiaomi MiMo services. For the purposes of this Privacy Policy, "Personal Information" refers to any information relating to an identified or identifiable natural person that is recorded electronically or by other means, excluding information that has been anonymised. We will strictly comply with this Privacy Policy in our use of such information.

Ultimately, we are committed to providing you with the best possible experience. If you have any questions regarding our personal information processing practices as described in this Privacy Policy, please contact us by visiting https://privacy.mi.com/support so that we may address your specific needs.

I. WHAT INFORMATION WE COLLECT AND HOW WE USE IT

We shall process your personal information in accordance with the principles of lawfulness, fairness, transparency, and necessity, and for the purposes outlined in this Privacy Policy, as we collect and use the information that you voluntarily provide or that is generated during your use of our products or services. If we intend to use your personal information for any purpose not specified in this Privacy Policy, or for any purpose other than that for which it was originally collected, we shall notify you in a reasonable manner and obtain your consent again prior to such use.

Please note that we have highlighted sensitive personal information in bold to draw your attention to it; we encourage you to pay close attention to these sections as you read this Privacy Policy. Before providing us with any sensitive personal information, you have carefully considered the implications and hereby confirm that such provision is appropriate. You further consent to your sensitive personal information being processed for the purposes and in the manner described in this Privacy Policy.

(i) Circumstances where you must authorise us to collect and use your personal information We collect your personal information for the purpose of providing you with our products and/or services, and to ensure our compliance with applicable laws, regulations, and other normative documents. You have the right to choose whether or not to provide such information; however, in most cases, if you choose not to provide it, we may be unable to provide you with the relevant services or respond to your enquiries. These functions include:

1. Account registration and login

You are required to log in to your Xiaomi Account to access the features of Xiaomi MiMo. To this end, we will collect your Xiaomi Account ID and phone number to generate an API Key. This API Key is used to verify your identity and display your account information when providing API services.

2. Xiaomi MiMo service

We require identity verification when you use or top up the paid services available on the Xiaomi MiMo open platform.

When you apply for individual identity verification, we will collect your full name, ID type, ID number, contact information (such as phone number), and industry details to verify your identity and complete the real-name authentication process.

When you apply for corporate identity verification, we will collect the administrator's name and contact information of your company to complete the real-name authentication process. To provide you with invoice issuance services, we will collect your email address and phone number to send you the completed invoices. To provide you with prepaid API services, we will collect your top-up information and transaction records generated during your use of these services.

To provide you with the Xiaomi MiMo API service and Xiaomi MiMo Code service, we will collect the text, image, video, and audio information you provide to analyse and execute relevant instructions based on your selected model, and to generate the output content. Additionally, we will collect your IP information to enhance service security, such as determining the general region of your device when accessing our services and protecting your account by detecting abnormal login activities.

Without your prior consent, Xiaomi will not use the text content provided by you for model training or any other purposes.

3. Voice mimicry

When you use the voice mimicry feature, we will collect the audio files and the voiceprint information contained therein to generate content based on the voice characteristics from the audio. You shall ensure that you have obtained legal, sufficient, and explicit consent from the data subjects for the use of their personal information (where sensitive personal information is involved, separate consent shall be obtained as required). You shall not upload any audio content that is illegal, non-compliant, or infringes upon the rights and interests of any third party. You authorise Xiaomi MiMo to process the information you upload on your behalf to provide the services, and no further separate authorisation shall be required for such purpose. 4. Issue feedback and notifications

We will collect your name (or form of address), contact number/email address, the description of your reported issue, and any related images to provide you with issue feedback services.

5. Push notifications

You acknowledge and agree that, in order to provide you with balance alerts, notifications, identity authentication, security verification, and invoice issuance services, we may send you notifications via the contact information you have provided (e.g., contact number, email address, etc.). When you participate in relevant promotional activities within the platform, we will collect your email address to send notifications, distribute rewards, and provide relevant follow-up services.

(ii) How we use cookies and similar technologies

To ensure the normal and efficient operation of Xiaomi MiMo and to provide you with a simple, easy-to-use, and personalised online experience, we may store small data files known as Cookie on your terminal device and/or system. We use cookies and similar technologies for the following purposes:

1. To remember your identity. For example, cookies and similar technologies help us identify you as our registered user, save the information you have provided to us, or assist in determining whether your login status is normal and whether there are any anomalies in your account.

2. To enable certain enhanced features on our website, such as remembering your language preferences.

3. To analyse your use of our products and/or services. We will collect information regarding your browsing activities to better understand how you navigate and interact with our website. The information collected by these cookies is used to determine:

   -The performance of our website. For example, page visit counts, session duration, feature usage and click counts, site events, overall usage metrics, performance data, and any specific errors encountered on the website.

   -Information about the device used to access our website. For example, browser, operating system, device model, etc.

We will not use cookies for any purposes other than those described in this Privacy Policy.

You may manage or delete the saved cookies through your browser settings. You have the right to accept or decline cookies. You may modify your browser settings to reject them at your preference. However, this may prevent you from fully experiencing certain convenient and secure features of our products and/or services.

When you browse the Xiaomi MiMo open platform pages whilst not logged in, we will collect essential cookie information necessary to provide the corresponding products and/or services and to facilitate your browsing experience.

(iii) You fully acknowledge that we may collect and use your personal information without your consent in the following circumstances:

1. Where it relates to national security or national defence security;

2. Where it relates to public safety, public health, or significant public interests;

3. Where it relates to criminal investigations, prosecutions, trials, or the execution of judgments;

4. Where it is necessary to protect the life, property, or other major legitimate rights and interests of the personal information subject or other individuals, but it is difficult to obtain the consent of the subject;

5. Where the personal information collected is disclosed to the public by the personal information subject themselves;

6. Where personal information is collected from legally disclosed information, such as through lawful news reports, government information disclosure channels, etc.;

7. Where it is necessary for entering into or performing a contract as requested by you;

8. Where it is necessary to maintain the safe and stable operation of the products and/or services provided, such as for the detection and resolution of faults in the products and/or services;

9. Where it is necessary for lawful news reporting;

10. Where it is necessary for an academic research institution to conduct statistical or academic research based on public interests, provided that the personal information contained in the results is de-identified when the results are provided externally.

(iv) Non-personal information

We may also collect other information that cannot be used to identify any specific individual (i.e., information that does not constitute personal information). Examples include statistical data generated during your use of specific services, such as device-related information, daily active user events, page view events, page view duration events, and session events; network monitoring data, such as request duration, request counts, and error request counts; as well as application crash events. We collect such information for the purpose of improving the services we provide to you. The categories and volume of information collected depend on how you use our products and/or services.

For the purposes of this Privacy Policy, aggregated data is considered non-personal information. If we combine non-personal information with personal information, such combined information shall be treated as personal information for as long as it remains combined.

II. HOW WE SHARE, TRANSFER, AND PUBLICLY DISCLOSE YOUR PERSONAL INFORMATION

(i) Sharing We do not sell your personal information to any third party.

We may, from time to time, share your personal information with third parties (as defined below) in order to provide or improve our products or services, including providing products or services as requested by you. If you wish to opt out of the sharing of such information, please contact us by visiting https://privacy.mi.com/support .

1. Sharing based on your active choice

We may share your information within the scope of your authorisation with third parties you have specified, subject to your explicit consent or active choice.

2. Sharing within Xiaomi Group

To facilitate our business operations and to provide you with the full functionality of our products or services, we may, from time to time, share your personal information with other Xiaomi affiliates.

3. Sharing with third-party service providers

Some of our services are provided by third-party service providers. To this end, we need to provide some of your personal information to these third-party service providers. Click to view the circumstances under which we share your personal information with affiliates, business partners, and third parties. If we share your personal information with these third parties, we will protect your information security through measures such as encryption. We conduct reasonable reviews of the data security environment of the companies and organisations with which we share your personal information. We also enter into strict data processing agreements with them, requiring these third parties to adopt adequate protective measures for your information and to strictly comply with applicable laws, regulations, and regulatory requirements.

(ii) Transfer

Xiaomi will not transfer your personal information to any entity, except for the following circumstances:

-Obtaining your explicit consent.

-If Xiaomi is involved in a merger, acquisition, or sale of all or part of its assets, which may affect your personal information, we will provide a prominent notice via email and/or on our website, or by other appropriate means, to inform you of any changes in the ownership or usage rights of your personal information, as well as any choices you may have regarding your personal information.

-In circumstances already explained in this Privacy Policy or notified to you through other means.

(iii) Public disclosure

Xiaomi may publicly disclose your personal information under the following circumstances:

-When we have obtained your explicit consent, or when you have disclosed the information yourself through our services, such as on social media pages or public forums.

-Based on legal requirements or reasonable grounds, including compliance with laws and regulations, legal procedures, litigation, or requests from government authorities.

III. HOW WE STORE AND PROTECT YOUR PERSONAL INFORMATION

(i) Security measures

We are committed to ensuring the security of your personal information. To prevent unauthorised access, disclosure, or other similar risks, we have implemented all legally required physical, electronic, and managerial measures and procedures to protect the information we collect from your mobile device. We will ensure that your personal information is protected in accordance with applicable laws. Your personal information is stored on secure servers and protected in controlled facilities. We classify your information based on its importance and sensitivity, and we ensure that your personal information is maintained at an appropriate level of security. Similarly, we maintain dedicated access control measures for cloud-based data storage. We regularly review our information collection, storage, and processing practices, including physical security measures, to prevent any unauthorised access and use.

We will conduct due diligence on third-party service providers and business partners to ensure they are capable of protecting your personal information. We will further ensure that third parties maintain appropriate security standards by implementing contractual restrictions and, where necessary, conducting audits and assessments. In addition, we ensure that all employees, third-party service providers, and business partners who have access to your personal information in order to provide products or services to you are subject to strict contractual confidentiality obligations.

We conduct security and privacy protection training courses and assessments to enhance our employees' awareness of the importance of protecting personal information. We will take all feasible and legally required measures to protect your personal information. However, you should be aware that the use of the internet is not entirely secure. Therefore, we cannot guarantee the security or integrity of any personal information during its transmission to or from us via the internet.

We will handle any personal information breaches in accordance with applicable data protection regulations and, where required, promptly notify the relevant supervisory authorities and affected data subjects of the breach.

(ii) Personal information security incidents

Although we will take all legally required measures to protect your personal information, you should be aware that the use of the internet is not entirely secure. In the event that our physical, technical, or managerial safeguards are compromised, resulting in unauthorised access, public disclosure, alteration, or destruction of your personal information that causes damage to your legitimate rights and interests, we will promptly activate our emergency response plan and take all reasonable and necessary measures to minimise the impact on you. In the event of a personal information security incident, we will, in accordance with applicable laws and regulations, inform you of the following: the basic details and potential impact of the incident, the measures we have taken or intend to take to address it, suggestions on how you can proactively prevent or mitigate risks, and the remedies available to you. We will notify you via push notifications or other appropriate channels. Where it is difficult to notify each individual data subject, we will issue a public announcement in a reasonable and effective manner. In addition, we will report the progress and outcome of the handling of personal information security incidents to the regulatory authorities in accordance with their requirements.

(3) Retention policy

We retain your personal information for the period necessary to fulfill the purposes for which it was collected as described in this Privacy Policy, or as required by applicable laws and regulations. Upon completion of the purposes for which your personal information was collected, or after we confirm your request for deletion or account cancellation, or upon the termination of our operation of the corresponding products or services, we will cease retention of your personal information and proceed to delete or anonymise it. In cases where data is retained for reasons of public interest, scientific or historical research, or statistical purposes, we will continue to retain such data in accordance with applicable laws, even if further processing is incompatible with the original collection purposes. This agreement applies to your use of Xiaomi MiMo services within the territory of the People's Republic of China. Accordingly, your personal information will be stored within the territory of the People's Republic of China. If you use our services outside the People's Republic of China, you acknowledge and agree that the terms of the privacy policy applicable to services outside the People's Republic of China, as published on Xiaomi MiMo, shall govern.

IV. YOUR RIGHTS

(i) Control settings

We acknowledge that privacy concerns vary from individual to individual. Therefore, we provide several examples and options through which you may choose to limit the collection, use, disclosure, or processing of your personal information, and manage your privacy settings within Xiaomi MiMo:

-You may log out of your Xiaomi Account by navigating to Personal centre > Sign out.

If you have previously provided your consent for us to use your personal information for the purposes described above, you may change your decision at any time by contacting us in writing or by visiting https://privacy.mi.com/support .

(ii) Your rights regarding your personal information

In accordance with the laws and regulations of the country or region applicable to you, you have the right to request access to, rectification of, or deletion of any personal information we hold about you (hereinafter referred to as the "Request").

For further details regarding the personal information associated with your Xiaomi Account, you may access, modify, or delete such information by logging into your account via https://account.xiaomi.com/ or on your device. For any other enquiries, please contact us by writing to us or by visiting https://privacy.mi.com/support .

Most applicable laws require that requests made by data subjects follow specific requirements. Under this Privacy Policy, your request must satisfy the following criteria:

· Your request must be submitted through our designated channels. For the protection of your information security, your request should be in writing (unless oral requests are explicitly recognised by applicable local laws).

· You must provide sufficient information to enable us to verify your identity, ensuring that the requester is the data subject themselves or their legally authorised representative.

Once we have obtained sufficient information to confirm that your request can be processed, we will respond to your request within the timeframe stipulated by applicable data protection laws. Specifically: · In accordance with your request and applicable laws, we may provide a copy of the personal information records we have collected and processed about you, free of charge. If you make further requests regarding the relevant information, we may, in accordance with applicable laws, charge a reasonable fee based on actual administrative costs.

· If you believe that any information we hold about you is incorrect or incomplete, you may request that we rectify or complete your personal information, based on the purpose of its use.

· In accordance with applicable laws and regulations, you may have the right to request that we delete your personal data. We will assess your request for deletion, and if the applicable requirements are met, we will take appropriate steps, including technical measures, to process such deletion. Following the deletion of information by you or by us on your behalf, we may not be able to immediately delete the corresponding information from our backup systems due to applicable laws and security technologies. We will securely store your personal information and isolate it from any further processing until the backup can be cleared or the information is anonymised.

We reserve the right to decline any request that is manifestly unfounded or excessive, infringes upon the privacy rights of others, is technically impractical, requires disproportionate technical effort, is not legally required by applicable local laws, or pertains to information that has been made public or provided under conditions of confidentiality. We may also decline your request for deletion or access if we determine that complying with certain aspects of your request would prevent us from lawfully using the data for the aforementioned anti-fraud and security purposes.

(iii) Withdrawal of consent

· You may withdraw your consent for the collection, use, and/or disclosure of your personal information held or controlled by us by submitting a request. You may contact us to exercise these rights by visiting https://privacy.mi.com/support. We will process your request within a reasonable timeframe after it has been submitted, and in accordance with your request, we will subsequently cease to collect, use, and/or disclose your personal information.

· Please note that the withdrawal of your consent may entail certain legal consequences. Depending on the scope of the authorisation you have granted us to process your information, this may result in your inability to enjoy Xiaomi's products or services. However, your decision to withdraw your consent or authorisation will not affect the processing of personal information carried out based on your prior authorisation.

(IV) Termination of services or account cancellation

If you wish to terminate specific products or services, and the privacy policy of such product or service specifies a dedicated procedure, you may apply for the termination of the corresponding service through such procedure. In the absence of specific provisions, you may contact us to request service termination by visiting https://privacy.mi.com/support . If you wish to cancel your Xiaomi Account, please exercise caution, as doing so will prevent you from accessing the full range of Xiaomi products and services. In order to protect your legitimate interests or those of others, we may determine whether to grant your request for account cancellation by taking into account your usage of Xiaomi products and services.

V. CONTACT US

We have established a dedicated department for personal information protection. If you have any comments or questions regarding this Privacy Policy, or if you have any enquiries concerning our collection, use, or disclosure of your personal information, please contact us via the address below or by visiting https://privacy.mi.com/support . Under normal circumstances, we will provide a response within fifteen (15) business days. We have a dedicated team to address your enquiries and requests concerning your personal information rights. If your enquiry involves matters of a more significant nature, we may request that you provide additional information. If you are dissatisfied with the response received, you may escalate your complaint to the relevant supervisory authority in your jurisdiction. If you consult us, we will provide you with information regarding potential avenues for complaint that may be applicable to your specific circumstances.

Contact address: #018, 8th Floor, Building 6, 33 Xi’erqi Middle Road, Haidian District, Beijing, China Postcode: 100085