Privacy Policy

Who we are

Slime OS is made by Mulai Pte. Ltd., a company registered in Singapore ("we", "us"). We are responsible for the personal data described here. Questions and requests go to [email protected].

Slime OS connects a device in front of you (a Membrane or the app on a tablet) to a cloud computer we call your Brain. We collect what we need to run that connection, and nothing for advertising. We don't sell personal data.

What we collect, and why

Your Slime ID account

• Your name and email address, to identify your account and contact you about it.
• Your password, stored only as a salted hash. We can't read it.
• Your sign-ins: when and on which device (for example "Living room Membrane"), so you can see and sign out devices from your dashboard.
• Failed log-in attempts (email address and IP address), to block password guessing.

Your Brains

• The name and network address of each Brain you save, so your devices can list them and connect.
• For a paid Brain, its Windows user name and password, stored encrypted and only sent to your own signed-in devices so they can sign in for you.
• Your files, apps and activity on a Brain stay on that Brain. We don't look at them. A paid Brain runs on Microsoft Azure; a Brain you add yourself runs wherever you host it.

Payments

Payments are handled by Stripe. Your card details go to Stripe and never reach us. We keep your Stripe customer reference and a record of what you ordered.

Connecting your devices

When you pair a device with a Brain, it gets an encryption key and a private address on our relay (WireGuard). The relay forwards the encrypted connection between your device and your Brain; it can't read what's inside. It sees which device connects to which Brain, and when, so it can wake a sleeping Brain and let it sleep again when you're done.

A Membrane has a Remote Support switch. Only while you have it turned on, our team can sign in to that Membrane, with full access to it, to help you fix a problem. It doesn't give access to your Brain.

Camera, microphone and screen (the Slime OS app)

The app asks for your camera and microphone so you can use them in apps on your Brain, such as video calls. You choose whether to allow them, and they work without them. During a session, the camera picture, your microphone, and your touches and key presses go straight to your Brain over the encrypted connection, and your Brain's screen and sound come back the same way. We don't record or store any of it.

On your device

The app keeps its pairing, your saved Brains, your Slime ID sign-in and your app PIN on the device, encrypted where Android allows. They don't leave the device, except the sign-in token it sends to slimeos.com. Reset in the app's settings, or uninstalling it, removes them.

Crash reports and feedback

Crash reports are off unless you turn them on. When on, or when you send feedback, the device sends the error or your message together with technical details: app version, device model, Android or Membrane version, memory, screen settings and network type. Our server also notes your network provider and country (from Cloudflare), never your IP address. Email addresses, IP addresses and similar details are removed first, and reports are not linked to your Slime ID.

Reports are published. Each one becomes an issue in our public GitHub repository (github.com/mulai/slimeos) so they can be fixed in the open, so please don't put personal information in feedback messages.

Contact form

Your name, email address and message, to answer you.

Website analytics

slimeos.com uses Google Analytics, which sets cookies, to count visits and see which pages are used. The Slime OS app and Membranes don't use analytics. Your Slime ID sign-in on the website uses one cookie, needed to keep you logged in.

Who processes it for us

We share data only with the services that run Slime OS for us:

• Cloudflare: the website, Slime ID and its database.
• Google Cloud: our relay between your devices and your Brain.
• Microsoft Azure: paid Brains.
• Stripe: payments.
• GitHub: published crash reports and feedback.
• Google Analytics: website statistics.

These services may process data outside your country, including in Singapore, Indonesia and the United States. We may also disclose data if the law requires it.

How long we keep it

• Account data: until you delete your account.
• Sign-ins: until you sign out, or 30 days after you signed in.
• A paid Brain and its contents: until the plan ends or you delete your account.
• Payment records: as long as tax and accounting law requires.
• Crash reports and feedback: as long as they help us fix Slime OS.

Your choices and rights

• Delete your account at slimeos.com/delete-account, or by emailing [email protected].
• See and change your details, and sign out devices, from your dashboard.
• Turn crash reports on or off at any time in Settings.
• Allow or deny the camera and microphone in your device's settings.
• Ask for a copy of your data, or for a correction, by emailing [email protected]. We answer within 30 days.

Slime OS isn't directed at children under 13, and we don't knowingly collect their data.

Security

Connections between your devices, our relay and your Brain are encrypted. Passwords are hashed and Brain sign-ins are encrypted at rest. An optional app PIN protects the app on a shared tablet. No system is perfectly secure; if you find a problem, email [email protected].

Changes

If we change this policy, we update the date at the top. For significant changes we also tell signed-in users by email or in the app.