Privacy Policy
Last updated May 31, 2026
At Mira, we care deeply about privacy because the things people share with an AI companion can be personal. This Privacy Policy explains what we collect, why we collect it, how we use it, when it may be shared, how it is stored and protected, and the choices you have.
This Privacy Policy applies to the Mira mobile app, the Mira website at getmira.me, and related services that link to this policy. Mira is an AI companion for private reflection, emotional check-ins, journaling, conversation, memory-based personalization, and personal support. Mira is not therapy, not a crisis service, and does not diagnose. Mira is not a therapist, doctor, healthcare provider, medical device, crisis service, emergency service, or replacement for professional mental health care or trusted human support.
By using Mira, you understand that information you provide may be processed as described in this policy. You are responsible for the information you choose to share with Mira. Please do not share information you do not want Mira or its service providers to process.
Information We Collect
The information we collect depends on how you use Mira. Some information is needed to provide the service. If you choose not to provide certain information, or if you ask us to delete it, some features may not work.
Information you provide directly
- Account information: email address, password or authentication data, account ID, user ID, account settings, and login activity where applicable.
- Profile and personalization information: name, nickname, preferences, goals, check-in settings, communication preferences, personalization settings, and any details you choose to add to customize Mira.
- Chat, journal, reflection, and check-in content: messages sent to Mira, journal-style reflections, daily check-ins, mood entries, emotional state entries, written thoughts, prompts, responses, conversation history, and any other content you choose to share in the app.
- Memory and personal context: saved memories, recurring preferences, goals, routines, important personal details, emotional patterns, recurring themes, context from past conversations, and user-requested remembered information that helps Mira personalize future replies.
- Voice input: if you use voice features, speech may be converted into text. Depending on the feature, we may process audio or transcripts to provide voice input, and transcripts may be treated like chat content.
- Support communications: emails to [email protected], support messages, feedback, bug reports, screenshots, files you voluntarily send, and the contents of your communications with Mira.
Information collected automatically
- Usage information: screens viewed, buttons tapped, features used, session activity, frequency of use, app interactions, onboarding progress, paywall views, check-in activity, notification interactions where available, and general engagement data.
- Device and technical information: device type, operating system, app version, browser type, IP address, approximate location inferred from IP where applicable, device identifiers or app-specific identifiers where applicable, logs, crash reports, diagnostic data, and performance data.
- Purchase and subscription information: subscription status, product purchased, entitlement status, renewal or cancellation state where available, transaction identifiers, Apple App Store purchase information, and RevenueCat customer or app user ID. Full payment card details are handled by Apple or payment processors, not directly by Mira.
- Notification information: whether notifications are enabled, reminder and check-in preferences, scheduled reminder time if you set one, and device push token if used for sending push notifications.
Information from third parties or other sources
We may receive limited information from third-party platforms and providers when you interact with Mira through them, such as purchase or subscription status from Apple and RevenueCat, analytics information from PostHog, platform or device information, referral sources if you arrive from ads, links, campaigns, or website referrals, and public social media messages if you contact Mira publicly.
Sensitive Personal Information
Because Mira is used for reflection and emotional support, you may choose to share sensitive or highly personal information. This may include emotions, mental wellbeing, stress, anxiety, loneliness, relationships, family, friendships, school or work, habits, routines, lifestyle, personal struggles, health-related experiences, identity-related details, private experiences, and anything else you choose to type, speak, or save.
Sensitive information is not required to create an account. Mira processes user-provided sensitive information only to provide, personalize, secure, support, and improve the service as described in this policy. Mira is not a confidential therapist, doctor, or lawyer, and information shared with Mira may not have the same legal protections as information shared with a licensed professional.
How We Use Information
We use information to:
- Provide, operate, maintain, and improve Mira.
- Create and manage accounts, authenticate users, and sync account settings.
- Generate AI responses, personalize conversations, and remember useful context.
- Provide memory-based features, check-ins, journaling, reflection tools, insights, and summaries where available.
- Process voice input and transcripts.
- Send notifications, reminders, account notices, and service messages if enabled or necessary.
- Manage subscriptions, verify purchases and entitlements, and provide paid access.
- Respond to support requests, feedback, bug reports, and other communications.
- Debug errors, fix crashes, monitor app performance, and improve reliability.
- Understand how users use the app and improve onboarding, product experience, safety, and product decisions.
- Protect against fraud, abuse, misuse, spam, security incidents, and unauthorized access.
- Enforce our Terms of Service and other policies.
- Comply with legal obligations and protect the rights, safety, and security of Mira, users, and others.
- Develop new features, without using private conversations to train Mira's own AI models unless this policy is updated and user choices or permissions are provided where required.
We may aggregate or de-identify information so it can no longer reasonably identify you, and use that information for analytics, research, product improvement, or business purposes. We will not attempt to re-identify de-identified information except to confirm that it remains de-identified.
AI Processing
Mira uses third-party AI infrastructure to generate responses. When you send a message or use an AI feature, Mira may send your message, relevant conversation history, saved memories, voice transcripts, and technical request data to AI processing providers.
OpenRouter routes AI requests to model providers. Models may include GPT-4o mini and other available AI models, and the exact model or provider may change over time as Mira improves performance, cost, safety, reliability, or quality. Mira may send only the context needed to provide a feature, but you should assume that anything you type or say to Mira may be processed by AI providers.
Third-party AI providers process information under their own terms, data processing rules, and retention policies. Where available, Mira may configure providers or routes to limit retention, training, or logging, but we do not promise that every AI provider has zero retention or no logging.
Mira does not use private conversations to train Mira's own AI models unless this policy is updated and user choices or permissions are provided where required. AI responses are generated automatically and may be inaccurate, incomplete, inappropriate, delayed, or not suitable for your situation. Mira should not be used for medical, legal, financial, emergency, crisis, or safety-critical decisions.
Third-Party Service Providers
We use service providers to operate Mira. These providers may process information only as needed to provide services to Mira, subject to their own contracts, policies, and legal obligations.
| Provider | Purpose | Information processed |
|---|---|---|
| Supabase | Authentication, database, storage, and app infrastructure. | Account data, user IDs, app data, chat history, memories, preferences, check-in data, and technical data. |
| OpenRouter | AI request routing. | Messages, prompts, conversation context, relevant memories, transcripts, and technical request data. |
| AI model providers, including GPT-4o mini and other providers | AI response generation. | Prompts and context required to generate replies. |
| RevenueCat | Subscription management, entitlement verification, and purchase status. | App user ID, purchase status, product IDs, transaction identifiers, and entitlement data. |
| Apple | App Store purchases, subscriptions, device permissions, and platform services. | Purchase and platform data, subscription management data, and permission settings. |
| PostHog | Analytics, product improvement, and usage measurement. | Usage events, screens viewed, interactions, device/app information, and user identifiers where enabled. |
| Email/support provider | Support communication. | Email address, support messages, and attachments or screenshots you send. |
| Push notification provider / Apple Push Notification service | Sending reminders and app notifications, if enabled. | Device push token, notification preferences, and reminder settings. |
Analytics
Mira uses analytics to understand product usage and improve the service. Analytics may include screens viewed, buttons tapped, session activity, feature usage, device/app information, and user or account identifiers where enabled. Analytics help improve reliability, onboarding, retention, app performance, and product decisions.
Mira does not use analytics to track you across other companies' apps or websites for advertising, and we do not sell analytics data to advertisers. Analytics data may be aggregated or de-identified.
Cookies, Website Data, and Similar Technologies
The Mira website may collect basic usage data, such as pages viewed, referral source, browser and device information, IP address, approximate location, and interactions. Cookies, local storage, pixels, or similar technologies may be used if implemented.
These technologies help keep the site working, understand traffic, measure campaigns, and improve the website. You can control cookies through your browser settings. Some website features may not work properly if cookies are blocked.
How We Share or Disclose Information
We do not sell or rent your personal information. We may share or disclose information in the following situations:
- Service providers: infrastructure, AI processing, database/storage, analytics, subscriptions and payments, crash reporting, support, security, hosting, and similar providers.
- AI providers: messages, context, memories, and transcripts may be shared as needed to generate responses.
- Legal requirements: to comply with law, legal process, subpoenas, court orders, regulatory requests, or to enforce our rights and policies.
- Safety and protection: to protect Mira, users, or others; prevent fraud, abuse, misuse, security incidents, or harmful behavior; and protect public safety where appropriate.
- Business transfers: in connection with a merger, acquisition, financing, sale of assets, reorganization, bankruptcy, or similar event.
- With your direction or consent: if you ask Mira to share information, connect services in the future, or participate in a feature that makes information visible to others.
- Aggregated or de-identified information: for analytics, research, reporting, or business purposes if it cannot reasonably identify you.
Tracking and Advertising
Mira does not track users across other companies' apps or websites for third-party advertising. Mira does not sell personal data to advertisers. Mira does not use private chat content for third-party ad targeting. If Mira starts using advertising or tracking technologies in the future, we will update this policy and request permissions where required by law or platform rules.
Data Storage and Security
Mira stores information using infrastructure providers. We use reasonable technical, administrative, and organizational measures designed to protect information, such as authentication, access controls, encrypted transport where applicable, provider security controls, monitoring and debugging, and limited access where practical.
No internet service is 100% secure. You are responsible for keeping your login credentials safe. Please contact us if you believe your account has been compromised.
International Data Transfers
Mira and its providers may process or store information in countries other than where you live. These countries may have privacy laws that differ from the laws in your location. When required, Mira uses appropriate safeguards for international data transfers. By using Mira, you understand that your information may be processed internationally.
Data Retention
Mira keeps information as long as needed to provide the service, operate accounts, support product features, comply with legal obligations, resolve disputes, enforce agreements, protect security, prevent fraud, and meet business needs. Retention depends on account status, feature use, legal needs, security needs, and your choices.
Chat history and memories may be retained while your account is active so Mira can personalize the experience. Support messages may be retained for support, quality, legal, or dispute reasons. Purchase records may be retained as required for tax, accounting, fraud prevention, refunds, chargebacks, and legal compliance. Logs, analytics, and diagnostic data may be retained for shorter or longer periods depending on business and security needs.
Deleted data may remain in backups for a limited period before being fully removed. Some data may be anonymized instead of deleted. If data is anonymized or de-identified, it may no longer be associated with you.
Account Deletion
You can initiate account deletion inside the Mira app settings, or contact [email protected]. Account deletion deletes or anonymizes account data, chat history, saved memories, preferences, and related personal data unless retention is required or permitted for legal, security, fraud prevention, accounting, tax, dispute, backup, or operational reasons.
Once deleted, personalization, memories, and history may not be recoverable. Deleting the Mira app from your device does not delete your account. Deleting your Mira account does not automatically cancel an Apple subscription. You must cancel subscriptions through your Apple ID subscription settings.
Memory Controls
Mira may save personal context to personalize replies. Memories may be created from conversations, check-ins, preferences, or user-provided details, and may include goals, routines, preferences, recurring patterns, important life context, or other information you choose to share.
You may request deletion of saved memories, and where in-app memory controls are available, you can manage memory in the app. You can also contact [email protected]. Deleting memories may make Mira less personalized. Account deletion deletes or anonymizes associated memories unless retention is legally or operationally required.
Notifications
Mira may send push notifications, check-in reminders, daily reminders, motivational messages, product updates, account or security alerts, and subscription-related notices. You receive push notifications only if enabled or allowed. You can disable push notifications in device settings. Some administrative or account messages may still be sent by email if necessary.
User Choices
You can control certain processing through:
- Account settings and profile controls.
- Notification settings and device notification permissions.
- Microphone, speech recognition, and other device permissions where applicable.
- Memory controls where available, or by contacting support.
- Analytics choices where available.
- Marketing email unsubscribe controls if marketing emails are sent.
- Cookie and browser controls for the website.
- Privacy requests sent to [email protected].
Privacy Rights
Depending on where you live, you may have rights to request access to personal information, request a copy, request correction, request deletion, object to certain processing, restrict certain processing, withdraw consent where processing is based on consent, request portability, opt out of certain sales, sharing, or targeted advertising where applicable, not be discriminated against for exercising privacy rights, and complain to a data protection authority or regulator.
Mira may need to verify your identity before completing a request. Some information may be exempt from requests under law. If we cannot verify your identity, we may not be able to fulfill the request. To exercise rights, contact [email protected].
Legal Bases for Processing
If privacy laws require a legal basis for processing, Mira may rely on the following legal bases:
- Contract: to provide Mira and operate accounts, subscriptions, and core app features.
- Consent: for optional features, permissions, notifications, voice input, or where legally required.
- Legitimate interests: security, fraud prevention, service improvement, analytics, support, debugging, product development, and enforcing policies.
- Legal obligations: tax, accounting, legal process, and compliance.
- Vital interests and safety: where processing is necessary to protect someone's safety.
Regional Privacy Disclosures
Users in certain regions, including the EEA, UK, California, and other US states, may have additional privacy rights. Mira will respond to applicable rights requests as required by law. Mira does not sell personal information, and Mira does not use personal information for third-party targeted advertising unless disclosed in an updated policy. Contact [email protected] for region-specific requests.
| Category | Examples collected | Purpose | Shared with |
|---|---|---|---|
| Identifiers | Email address, account ID, user ID, device or app identifiers. | Account access, authentication, support, security, and service operation. | Infrastructure, analytics, support, and security providers. |
| Account and profile information | Name, nickname, preferences, goals, settings, and personalization choices. | Personalization, account management, and app features. | Infrastructure and AI processing providers as needed. |
| Commercial and purchase information | Subscription status, product IDs, entitlement data, and transaction identifiers. | Paid access, purchase verification, refunds, tax, accounting, and fraud prevention. | Apple, RevenueCat, infrastructure, and compliance providers. |
| Internet, device, and activity information | Screens viewed, buttons tapped, app version, browser type, IP address, logs, and diagnostics. | Analytics, reliability, debugging, security, and product improvement. | Analytics, infrastructure, crash, and security providers. |
| User-generated content | Messages, journal entries, check-ins, mood entries, reflections, and voice transcripts. | AI responses, journaling, memory, syncing, support, and personalization. | Infrastructure and AI processing providers as needed. |
| Sensitive information you choose to provide | Emotions, wellbeing, relationships, routines, health-related experiences, or private life context. | Providing, personalizing, securing, supporting, and improving Mira. | Infrastructure and AI processing providers as needed. |
| Inferences and personalization data | Memories, recurring themes, broad emotional patterns, preferences, and suggested insights. | Memory-based personalization, check-ins, insights, and app experience. | Infrastructure and AI processing providers as needed. |
| Support communications | Emails, feedback, bug reports, screenshots, and files you voluntarily send. | Support, troubleshooting, quality, legal, and dispute management. | Email/support, infrastructure, and security providers. |
Children and Teens
Mira is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we collected data from a child under 13, we will take steps to delete it.
Users between 13 and 18 should use Mira only with permission from a parent or legal guardian. Mira is not a replacement for a parent, guardian, trusted adult, therapist, doctor, school counselor, emergency service, or crisis hotline. Parents and guardians can contact [email protected] for deletion requests.
Medical, Mental Health, and Emergency Disclaimer
Mira is designed for reflection and support, not professional care. Mira is not a medical device, healthcare provider, therapist, counselor, crisis service, or emergency service. Mira does not provide medical advice, diagnosis, treatment, therapy, counseling, or clinical mental health care.
Mira's AI responses are not professional advice. Mira may misunderstand your situation and may provide inaccurate, incomplete, delayed, unsafe, or inappropriate responses. Mira cannot guarantee detection of emergencies, crisis situations, self-harm, abuse, danger, or harmful intent. You should not rely on Mira in emergencies.
If you may harm yourself or others, feel unsafe, are in immediate danger, or need urgent help, contact local emergency services, a crisis hotline, or a qualified professional immediately.
HIPAA Disclaimer
Mira is not a healthcare provider, health plan, healthcare clearinghouse, or HIPAA business associate. Information you share with Mira may not be protected by HIPAA. Mira protects information according to this Privacy Policy, not as a HIPAA-covered medical service.
Third-Party Links and Services
The app or website may link to third-party websites, App Store pages, social media pages, payment or subscription interfaces, or other services. Mira is not responsible for third-party privacy practices. You should review third-party privacy policies. Third-party services are governed by their own terms and policies.
Security Incidents
If Mira becomes aware of a security incident affecting personal information, we will investigate, take reasonable steps to address the issue, and notify affected users, regulators, or others where required by law.
Changes to This Privacy Policy
Mira may update this policy as the service evolves. The updated date above shows when it changed. If changes are material, Mira may notify users through the app, website, email, or other reasonable methods. Continued use after updates means you have read the updated policy.
Contact Us
Questions or privacy requests? Email us at [email protected]. You can also read our Terms of Service.