Privacy Policy

Introduction

MIRAH provides a women's health companion for cycle tracking, pregnancy support, wellness insights, and related services. This policy describes how we handle personal information when you use the website, mobile app, and support channels.

Information we collect

• Account details such as name, email, language, and authentication identifiers
• Health entries you choose to log, including cycle, pregnancy, and wellness data
• Device and usage information needed to keep the service reliable and secure
• Messages you send to support or through contact forms
• What you choose to give our AI features: a face photo, a voice recording, or messages to the AI Therapist

How we use information

• To operate the product you requested and personalize insights
• To protect accounts, detect abuse, and meet legal obligations
• To improve features, with aggregated or de-identified data where possible
• To communicate service updates you can opt out of where the law allows

AI features and our AI provider (OpenAI)

Face Analysis, Voice Analysis and the AI Therapist use artificial intelligence from an outside provider, OpenAI, L.L.C. These features are optional. Before a feature sends anything for the first time, the app shows a notice that says what will be sent, who receives it and how it is handled, and the feature works only after you agree. You can withdraw that agreement for each feature at any time in Settings, under AI data sharing. The app then asks again before it sends anything.

• Provider: OpenAI, L.L.C. processes the data on our behalf as our service provider. It uses its GPT-4o mini model, plus its Whisper speech-to-text model for Voice Analysis.
• What is sent: only the photo, recording or message you submit, together with our instructions to the model. Your name, email address and other account details are not sent.
• Transfer: the data goes from our server to OpenAI over an encrypted connection (HTTPS) and may be processed in the United States.
• OpenAI's use: OpenAI does not use data sent through its API to train or improve its models. It may keep that data for up to 30 days solely to monitor for abuse, and then deletes it, unless the law requires otherwise.
• No other use: data sent to OpenAI is never used for advertising, never sold, and not shared with anyone else.
• Accuracy: read-outs and replies are generated automatically, may be wrong, and are not a medical diagnosis or medical advice.

Face data (Face Analysis)

Face Analysis is optional. It runs only when you take or choose a photo of your face and tap "Analyse my skin", after agreeing to the notice shown in the app. MIRAH does not use Face ID, the TrueDepth camera, ARKit, or any face-mapping, depth, or facial-recognition technology. We do not create face geometry, face templates, or any biometric identifier.

• What we collect: the single photo you choose to submit. From it, our AI provider returns a text read-out: estimated emotions, dominant mood, fatigue, stress and hydration levels, a confidence score, a short wellbeing note, and recommendations.
• How we use it: only to produce that read-out for you and show it in your analysis history. Face data is never used to identify you, for advertising or marketing, for profiling or data mining, or to train AI models, and it is never sold.
• Sharing: the photo is sent over an encrypted connection (HTTPS) to OpenAI, L.L.C., which processes it on our behalf to produce the read-out. OpenAI does not use data sent through its API to train its models and may keep it for up to 30 days solely to monitor for abuse before deleting it, unless the law requires otherwise. We do not share face data with anyone else.
• Storage and retention: the photo is held in private storage on our server only while it is being analysed, and is deleted as soon as the analysis finishes or fails, usually within seconds. We never keep the photo. The text read-out is stored in your account on our server until you delete it.
• Deletion: you can delete any analysis from the Face Analysis screen at any time. Deleting your account permanently removes all of your analyses.

Voice data (Voice Analysis)

Voice Analysis is optional. It runs only when you record a clip on the Voice Analysis screen and tap "Analyse my voice", after agreeing to the notice shown in the app. We do not use your voice to identify you, and we do not create a voiceprint or any other biometric identifier.

• What we collect: the recording you make, up to two minutes long. OpenAI's Whisper model turns it into text, and GPT-4o mini reads that text to return a read-out: mood, stress and energy levels, voice characteristics, emotional insights, and recommendations.
• Sharing: the recording and its transcript are sent to OpenAI, L.L.C. as described above. We do not share them with anyone else.
• Storage and retention: the recording is held in private storage on our server only while it is being analysed, and is deleted as soon as the analysis finishes or fails. We never keep the recording. The transcript and the read-out are stored in your account on our server until you delete them.
• Deletion: you can delete any reading from the Voice Analysis screen at any time. Deleting your account permanently removes all of them.

AI Therapist conversations

The AI Therapist is optional. Its replies are written by AI, not by a person, and it does not replace a doctor or therapist. In an emergency, contact your local emergency services.

• What we collect: the messages you send in the chat and the replies generated for them. Please do not include your name, contact details, or anything else that identifies you.
• Sharing: each message is sent to OpenAI, L.L.C. as described above, to write the reply. We do not share your conversations with anyone else.
• Storage and retention: your messages and the replies are stored in your account on our server so you can come back to the conversation. They are permanently deleted when you delete your account.

Sharing

We do not sell your personal information. We share data only with processors who help us run MIRAH under contract, such as OpenAI for the AI features described above, or when required by law. Health content is never used for advertising.

Your choices

You may access, correct, export, or request deletion of your information from in-app settings or by contacting us. You can withdraw your agreement to any AI feature in Settings, under AI data sharing. Some records may be retained where we must keep them for security, accounting, or legal reasons.

Contact

Questions about privacy can be sent through the contact page or to the email listed in website settings.