OhMy.xin (“we”, “us”) hosts bots for Mixin Messenger. Each bot runs a community we call a circle. This policy explains what we collect when you visit ohmy.xin, sign in, join a circle or run one, and how we use it.
What we collect
- Your Mixin profile. When you sign in, Mixin shares your profile with us (the
PROFILE:READpermission): your Mixin user ID, Mixin ID number, display name and avatar, and your phone number and wallet address if Mixin includes them. Signing in to a circle also asks forMESSAGES:REPRESENT, which lets that circle’s bot send messages on your behalf for the circle features that need it. - Circle activity. Which circles you join, your role, when your membership starts and ends, and what you post, comment on, like or send to a circle bot.
- Payments. Records of the payments you make or receive through circles — memberships, rewards, red packets, lotteries and VIP plans — including amount, asset, time and Mixin transaction references. Payments run on Mixin Network; we never see or hold your PIN or private keys.
- Sign-in and device data. The IP address and browser or app user agent of each sign-in, so you and we can spot unfamiliar sessions.
- Product analytics. We use PostHog to record pages viewed, clicks, performance metrics, errors and, after you interact with a page, session replays. When you are signed in, these events are linked to your account (name, Mixin ID and language).
- Cookies and local storage. A signed session cookie keeps you signed in for up to 14 days. Your browser also stores your theme, and PostHog stores its own identifier.
- If you run a circle. Your bot’s credentials (keystore and OAuth client secret). We encrypt them at rest and erase them when you delete the circle.
How we use it
- To run circles: deliver messages, show posts, check membership and send notifications.
- To process payments and pay out rewards and membership revenue.
- To keep circles safe: detect spam and message floods, and act on abuse.
- To answer you when you contact us.
- To understand how the product is used and fix what is broken.
Who can see it
- Circle owners and admins see the members of their circle: name, Mixin ID, role, membership dates, and what members post or send to the circle.
- Other members see what you post in a circle, according to that circle’s settings.
- Mixin Network processes every message and payment, under Mixin’s own terms.
- Service providers that host and analyse the service for us, such as PostHog.
- Authorities, when the law requires it.
We do not sell your personal information.
How long we keep it
We keep your account and circle data while you use the service. Messages that bots have processed are purged on a rolling schedule. Bot credentials are erased when a circle is deleted. Payment records stay as long as we need them for accounting and disputes. Transactions on Mixin Network are permanent and outside our control.
Your choices
- Sign out at any time. You can also revoke OhMy.xin’s or a circle’s access in Mixin Messenger’s authorization settings.
- Ask us for a copy of your data, or to correct or delete it, through the contact below. Some records, such as payment history, may have to be kept.
- Leave a circle to stop receiving its messages.
Security
We use encrypted connections, encrypt bot credentials at rest, and limit who on our side can reach production data. No system is perfectly secure; tell us right away if you think your account has been misused.
Age
OhMy.xin involves crypto payments and is not intended for anyone under 18.
Changes
When we change this policy, we update the date at the top of this page. If a change is significant, we will also tell you in the product.