MimicAI (Beta)

Sophisticated Chatbot AI for Discord

Create, share, and chat with creative AI personas; powered by Google Gemini & OpenRouter.

Official Bot:
Invite our managed instance to your server to get started instantly. We handle the hosting; you bring the characters.
Invite to DiscordSelf-Hosted:
Take full control. Run MimicAI on your own hardware. Your data, your keys, your rules. Provided under the Prosperity Public License.
View on GitHub

Terms of ServiceEffective Date: 15 October, 2026 (UTC).1. Scope of Agreement
These terms govern the use of the MimicAI Software (the "Software") and the Official MimicAI Discord Instance (the "Service"). By inviting the bot, or interacting with the software, you agree to be bound by these Terms. You must meet the minimum age of digital consent in your country as required by Discord's Terms of Service.2. Software License (Self-Hosted)
The Software is provided under the Prosperity Public License 3.0.0. You are granted the right to use, modify, and distribute the Software for non-commercial purposes, and to try it for commercial purposes for thirty days. Commercial use beyond that trial requires a separate agreement from the contributor.3. User Responsibility & Content
You are solely responsible for the content generated by your profiles. MimicAI is a tool for creative expression; the user (or the administrator of a self-hosted instance) bears all liability for generated output. Profiles are rated before they can be shared or published (Section 7). Outside age-restricted channels, every profile is instructed to keep its replies suitable for a general audience, and Gemini's safety filters are applied; the underlying API providers may also apply their own safety policies to what is sent to them.Prohibited use. Regardless of where a profile runs, you must not use the Software or the Service to: generate or solicit sexual content involving minors; threaten, harass or incite violence against a real person or group; publish another person's private information; obtain instructions for weapons, explosives or other activity likely to cause serious real-world harm; or coordinate fraud or other criminal activity. These prohibitions apply to what you prompt as well as to what a profile produces, and they apply in age-restricted channels.Voices. Upload a voice sample only of your own voice, or of a speaker who has given you permission to clone theirs. A profile's cloned voice is used by anyone who borrows that profile.4. API Costs & Liability
By providing a personal API key, you acknowledge that you are solely responsible for all financial charges incurred on that key. This includes calls made on your behalf rather than in reply to you: rating your profiles' content, Global Chats you host, and the sessions of any server you assign your key to. MimicAI and its developers are not responsible for your API spend, including costs resulting from bugs, loops, high-volume usage, or expensive model selection. This applies universally to both the official Service and self-hosted instances.5. Operational Token Overhead
To provide advanced features such as Persona Injection, Long-Term Memory retrieval, and Training Example matching, MimicAI automatically appends context and metadata to every request sent to the AI. This increases the input token count of your requests. Some features also make model calls of their own, such as memory summarisation, the anti-repetition critic, and web search. By using the service, you agree to this overhead.6. Security & Data Architecture
Official Instance: Utilises Google Cloud Secret Manager to securely store master encryption keys. Self-Hosted: Utilises a local encryption key generated during setup and stored in the instance's .env file. Never enter sensitive personal data, real-world passwords, or financial secrets into the bot. You use the service at your own risk.7. Content Rating & Public Library
Before a profile can be published to the Public Library, shared with another user, or used in Global Chat, an AI model rates it as General or Adult (18+) from its text and avatar images. The rating runs on the profile owner's own API key; without one, the profile stays Pending. A profile rated Adult cannot be published, shared, or used in Global Chat, and runs only in age-restricted channels. You must be 18 or older to use a profile rated Adult. A profile you declare 18+ yourself is checked by the same model before it runs, and again after each edit. A profile the rating finds sexualises a minor is refused: it runs nowhere and cannot be published, shared, or used in Global Chat until a new rating or the instance owner's review clears it. If the model returns no verdict, the profile is not refused: it stays Pending until the instance owner reviews it and rates or refuses it. A profile edited after its rating is rated again before it is next shared or published, and leaves the Public Library if it is rated Adult or refused. A General rating is not an endorsement: every profile remains bound by Section 3. Official Instance: We reserve the right to remove any public content at our discretion.8. Compatibility & Modifications
While MimicAI allows for Software modification under the Prosperity Public License, data portability and the "Import/Export" features are only guaranteed between standard, un-modified instances. Significant alterations to the Software’s underlying data structures, encryption logic, or shard formatting may result in permanent incompatibility with the Official Instance or other standard self-hosted versions. The developers bear no responsibility for data loss or the inability to migrate profiles and memories resulting from such user-end modifications.9. Child Bot Architecture Restrictions
To strictly comply with Discord's Developer Terms of Service and credential-sharing policies, the creation, token submission, and management of "Child Bots" are restricted exclusively to the administrator/owner of the instance. End-users are strictly prohibited from submitting Discord Developer Tokens to the Software. Users may still interact with and borrow profiles linked to owner-created Child Bots via the unified Chat Sessions architecture.10. Termination
We reserve the right to terminate or suspend your access to the Official Instance (including blacklisting your Discord ID) without notice for violations of these terms, attempting to exploit the service, or actions that threaten platform stability.A profile refused under Section 7 also counts as a strike against its owner's account, once per profile, for one year. At three strikes, access is suspended automatically until we review it. Your strike count is shown in /settings.Access may be suspended for a fixed period or permanently. Whatever the restriction, your current standing is shown in /settings, and your data remains available for export or deletion through /privacy. We may also decline to operate in a particular Discord server and remove the bot from it. Where we act, we keep a record of the account or server, the date, the restriction applied, and the reason, until one year after the restriction ends.---Privacy PolicyEffective Date: 15 October, 2026 (UTC).1. Data Controllership
Official Instance: MimicAI developers act as the data controller for information stored on the official infrastructure. Self-Hosted: The individual or entity hosting the instance is the data controller. The Software sends nothing to the MimicAI developers, who have zero access to data stored on self-hosted instances.2. Data Storage Architecture
MimicAI utilises a sharded and encrypted data architecture. Each user's profiles, memories, training examples, voice recordings, API keys, and shares are kept in their own encrypted files, as are Chat Session and Global Chat logs. In the Official Instance, Master Encryption Keys are managed via Google Cloud Secret Manager. In Self-Hosted instances, the key is stored locally in the instance's .env file. Encrypted files are unreadable without that key.So that data can be found without decrypting it, a small set of index files is stored unencrypted: profile names and IDs, which profiles borrow which, your About Me settings and defaults, each server's active sessions, key assignments and data policy, the Public Library listing, and enforcement records, including the review list of profiles the content rating refused or could not rate.3. Data We Collect & Store
The Software stores the following categories:
* Profile Identity: Personas, traits, AI instructions, lorebook entries, and each profile's content rating.
* Profile Customisation: Custom display names and avatar URLs, including mood avatars.
* Voice Recordings: Up to three voice samples per profile, with their transcripts, the speaker's recorded consent where Gemini requires it, and which user uploaded each recording and when.
* Memory & Training: Long-term memories an AI model writes from conversations, which can record what anyone in the conversation said, and Training Examples added by the profile's owner.
* Bonds: Where a profile's owner turns them on, an affection and a resentment score for each person the character talks to, stored with the profile under an ID derived from that person's Discord ID.
* Conversation Context: Unified Chat Session logs, holding the messages sent in a channel with an active session, by anyone, with the sender's display name, Discord ID and timestamps; the profiles' replies; whispers; and text read from linked pages. Global Chat logs. Both are retained temporarily to maintain conversation history (Section 5).
* About Me: Your provider choice, registration date, timezone, birthday (day and month only), sharing preferences, blocked sharers, recent Public Library publish times, and Override Defaults.
* Technical Credentials: API keys (Google/OpenRouter) and the servers you assign them to. Discord Bot Tokens are strictly collected and stored only for the instance owner.
* Server Settings: Each server's sessions, webhooks, key assignments, and data policy.
* Enforcement Records: where access is restricted, the Discord account or server ID, the date, the restriction applied, when it ends, a short reason, and who applied it; and, for a profile the content rating refused or could not rate, its owner's Discord ID, the profile's ID and name, and the date, on the review list and, if refused, as a strike.
* Diagnostic Logs: Status and error lines written by the instance, which can include Discord IDs and profile names.4. Third-Party Data Processing
AI Providers: To generate a reply, the Software sends the profile, the recent conversation, any attached media and, where enabled, the server's and channel's names and topic to the provider the profile uses: Google (Gemini); OpenRouter, which passes the request to the company hosting the chosen model; or an Ollama server run by the instance owner. The same providers handle memory writing, embeddings, images, speech, content ratings, and web searches. Each request is billed to an API key (your own, a key assigned to the server, or in Global Chat the host's) and is handled under the terms and privacy settings of that key's provider account.Training: By default, no server's conversations are sent to Google's free Gemini tier or to OpenRouter hosts whose policy allows training on prompts. Only the instance owner can open a server to either, and /privacy in that server shows its current policy. A Global Chat follows the policy of the server it is opened in. What you send in a DM under your own key follows your own provider account's settings.Voice Cloning: A profile's selected voice recording is sent only to speech models that can clone a voice, whenever the profile speaks, including for anyone who has borrowed it.Web Search & Links: Web searches run through Google Search or OpenRouter's web search. Depending on its settings, the instance also fetches pages linked in a conversation itself, and downloads a profile's avatar images to rate them.Media: Gemini can receive attached media through Google's Files API, which deletes uploaded files under Google's own terms.Infrastructure: Discord carries every message, attachment, and data export. The Official Instance runs on Google Cloud.5. Data Retention & Control
You control the data stored under your account, and can permanently delete profiles, memories, training examples, or voice recordings at any time. Memories, training examples, Bonds, and voice recordings are kept until they, their profile, or your account are deleted.To minimise our data footprint, a Chat Session log is automatically purged after 30 days of inactivity, or when its channel is deleted. An active session keeps at most its most recent 400 turns, and server administrators can clear it sooner. Global Chat logs are also purged after 30 days of inactivity.Through /privacy, Request Data Export gives you a decrypted copy of the profiles, memories, training examples, voice recordings, API keys, and settings stored under your account. The archive holds your API keys unencrypted, so keep it safe. Delete My Account erases everything stored under your account, withdraws your Public Library listings, unassigns your keys from servers, and ends other users' borrows of your profiles within a day. It does not erase the messages you sent in session channels, which remain until their log is purged; what other people's profiles remember about you, including Bonds, which belong to those profiles; or copies of your profiles you sent as clones, which belong to their recipients.Data held in a server's session logs or in other people's profiles cannot be deleted through /privacy. Deleting one of your messages in Discord while the bot is online removes it from the session log too, though not any long-term memory already written from it. To ask for the removal of anything else, contact us (Section 8).Users may also export profiles, with their memories and training examples, as encrypted .mimic files through /export. A passphrase export can be imported on a self-hosted instance, allowing migration from the managed Service to self-hosted hardware.Enforcement records are kept while a restriction is in force and for one year after it ends, then deleted. Deleting your profiles or your account does not remove them. A profile stays on the review list until it is cleared, rated, or deleted, and a refused profile's strike is deleted a year after the refusal, or sooner if the refusal is cleared. Diagnostic logs on the Official Instance are deleted after 30 days.6. No Sale of Data
We do not sell, trade, or rent your personal identification information or conversation logs to others. Your data is used to provide the chatbot service, to maintain your personalised experience, to rate profiles' content, and to enforce these terms.7. Changes to Policy
We may update this privacy policy to reflect changes in our practices or Software offerings. Each revision is announced in the bot's /news, and the Effective Date above shows when the current version took effect. Continued use of the Software or Service after such changes constitutes acceptance of the new policy.8. Contact
Questions about these terms or your data, and requests to remove data that /privacy cannot reach, can be sent to [email protected]. For a self-hosted instance, contact the individual or entity hosting it.---

Contact Us

Have questions or need support?

Email: [email protected]

Discord Support: Discord Server