Privacy Policy
Effective: 2026-04-27
Mishkan (the "App") is published by 100-8 Studio ("we", "us"). This Privacy Policy explains what personal data we collect when you use the App and the Mishkan website, why we collect it, and the rights you have over it.
If you have any question about this policy, you can reach us at hello@100-8.studio.
1. Data controller
100-8 Studio is the data controller for the personal data processed through Mishkan. Contact: hello@100-8.studio.
2. Data we collect
Account data: name or display name, email address, language and an optional city. Optional profile picture, and the PIN we generate so friends can add you.
Content you create: messages, photos and any information you choose to add to your profile or send through the App.
Friends and Mem: your friend connections (the people you add by PIN) and your Mem ledger — the amounts you send and receive. We do not collect GPS location.
Device and technical data: device type, operating system version, app version, language settings, IP address and basic diagnostics needed to keep the service running and secure.
3. Why we use your data
To create and maintain your account and let you use the App.
To deliver the friends, direct messaging and Mem currency features.
To keep the community safe: prevent spam, abuse, and illegal content; apply rate limits; investigate reports.
To respond to your support requests and improve the App.
To comply with our legal obligations, including those under French and European law.
4. Legal bases (GDPR)
Performance of our contract with you: providing the account, friends, messaging and Mem features.
Our legitimate interests: keeping the service secure, preventing abuse, and improving the App.
Your consent: where required, for example for optional features or non-essential cookies.
Legal obligations: when we must keep or disclose data to comply with applicable law.
5. Sharing
We do not sell personal data.
Messages and Mem transfers are visible only to the friends and recipients involved.
We share data with service providers that host the infrastructure, deliver push notifications or send transactional emails on our behalf, under written agreements.
We may disclose data to authorities when required by law or to protect users.
6. International transfers
Some providers may process data outside the European Economic Area. When this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Retention
We keep account data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it to comply with a legal obligation or to defend a legal claim.
Direct messages are kept while both participants have an active account; deleted messages are removed from our active systems and purged from backups in due course.
8. Your rights
Under the GDPR and the French "Loi Informatique et Libertés", you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You can exercise these rights by writing to hello@100-8.studio.
You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).
9. Children
Mishkan is not directed to children under 13. If you believe a child has created an account, please contact us so we can remove it.
10. Security
We apply reasonable technical and organisational measures to protect your data, including transport encryption, access controls and rate limiting. No system is perfectly secure; please use a strong, unique password.
11. Changes to this policy
We may update this Privacy Policy. When we do, we will update the effective date above and, for material changes, notify you in the App or by email.
12. Contact
Questions or requests: hello@100-8.studio.
100-8 Studio.