Mira — Privacy Policy
Effective date: 11 July 2026
App: Mira (package net.userstoday.mira)
Provider: Mira ("Mira", "we", "us")
Contact: [email protected]
Mira is a gentle astrology and self-discovery companion. This policy explains what we collect, why, how we share it, and the choices you have. Mira is intended for adults (18+) and offers reflection and entertainment — not predictions, and not medical, legal, or financial advice.
1. Data we collect
| Category | Examples | Why |
|---|---|---|
| Account | email or sign-in identifier, display name | create and secure your account |
| Birth data | date, time, place of birth | calculate your natal chart, transits, compatibility |
| Profile & preferences | intent (love/career/self/calm), chosen language | personalize content |
| AI companion & AI guide messages | messages you send to the Mira AI companion or an AI guide persona | generate responses; maintain conversation context |
| Purchases | purchase channel, product/plan, entitlement status, renewal/cancellation/refund events, and transaction or charge identifiers (processed by Google Play/RevenueCat or Telegram, as applicable) | validate purchases, grant or restore premium features, prevent duplicate or refunded access; we do not receive your card number or Google/Telegram payment credentials |
| Linked Telegram account | numeric Telegram user ID and a short-lived, single-use linking code, only if you choose to link accounts | recognize an independently purchased Telegram Stars entitlement on your Mira account and recognize an eligible Mira entitlement in the bot |
| Usage & device | app events, screens viewed, device model, OS, app version, language | reliability, analytics, abuse prevention |
| Identifiers | app instance ID; advertising ID only if ads/attribution are enabled | attribution and basic analytics |
| App & device integrity | basic Google Play app recognition/integrity, app licensing, and device integrity verdicts; a SHA-256 hash of the protected request | security and fraud/abuse prevention; the hash is not the plaintext request |
We do not intentionally collect special-category data beyond birth date/time/place, which we treat as sensitive and store separately from billing.
For Play Integrity, we request only the basic verdicts listed above; optional signals are not enabled. We do not use or combine integrity information to create a persistent device fingerprint, or for advertising, tracking, profiling, attribution, or product analytics.
On Android, new in-app subscriptions are offered only through Google Play Billing. RevenueCat acts as our service provider to retrieve localized product information, validate Google Play purchases, associate an App User ID with entitlement status, and restore purchases. A Telegram Stars subscription can instead be purchased independently in the Mira Telegram bot. If you voluntarily link your Mira and Telegram accounts, we associate your numeric Telegram user ID and active entitlement with your Mira account. Account linking does not move a purchase between payment providers or disclose your Google Play payment details to Telegram.
2. How we use data
- Build and interpret your natal chart, daily content, tarot, and compatibility.
- Power the AI companion (which is aware of your chart) and remember context within your account.
- Operate subscriptions and premium features.
- Maintain, secure, and improve the app; prevent fraud and abuse.
- Communicate service messages; send notifications you opt into.
We do not sell your personal data. We do not use anxiety-driven manipulation or make guarantees about health, money, relationships, or the future.
3. AI processing
Messages you send to the AI companion or AI guide personas, and the relevant parts of your chart, are processed by us and by our AI model provider(s) (e.g., OpenRouter (and the upstream model providers it routes requests to)) solely to generate responses. We instruct providers not to train their foundation models on your content where such a setting is available, and we minimize what is sent. AI output is for reflection and may be inaccurate; it is not professional advice.
4. AI guides & message safety
The area formerly labeled “Experts” contains AI guide personas only. They are generated AI interfaces, not people. Mira does not offer live experts, an expert marketplace, a public feed, or user-to-user messaging. Messages to these guides are processed as AI chat under Section 3 and are not disclosed to another user or a human guide. In-app reporting and AI safety moderation apply to AI responses; see the in-app AI & Community policy.
5. Sharing
We share data only with:
- Service providers acting on our behalf: cloud hosting, AI model provider(s), analytics, customer support, and (if enabled) attribution.
- Google Play for purchase processing, the Play Install Referrer, and Play Integrity verification. The integrity request contains a SHA-256 request hash, not the plaintext protected request.
- RevenueCat, acting as a subscription-management service provider, for Google Play product, purchase, App User ID, and entitlement information. RevenueCat does not receive your card number from us.
- Telegram, when you independently use the Mira bot or buy with Telegram Stars, for the Telegram user ID, invoice, recurring-subscription, cancellation, charge, and refund information needed to provide that service.
- Legal: when required by law or to protect rights and safety.
We do not sell personal data or share it for cross-context behavioral advertising.
6. Retention & deletion
We keep data while your account is active. You can request deletion of your account and personal data, including birth data, at any time via [email protected] or the in-app account settings; we honor verified requests within statutory timeframes. Some records may be retained where law requires (e.g., transaction records).
Telegram linking codes expire after approximately 10 minutes and are deleted when used. Account links remain until the associated account is deleted or you ask us to remove the link. We retain the minimum purchase and charge records needed to maintain entitlements, handle cancellations/refunds and disputes, prevent duplicate processing, and meet legal, accounting, and fraud-prevention obligations. Deleting a Mira account does not cancel a subscription; you must cancel it with the payment provider where you purchased it.
The Play Integrity process does not log or retain the integrity token, protected request body, or full decoded verdict. Only a minimal result status is written to security logs and kept only as long as operationally necessary.
Google states that Play Integrity request data is encrypted, is not transferred to third parties, and is deleted after a fixed retention period.
7. Your rights
Depending on your region (e.g., GDPR/UK GDPR, CCPA/CPRA), you may access, correct, delete, port, or restrict processing of your data, object to certain processing, and withdraw consent. EU/UK users may lodge a complaint with a supervisory authority. We do not discriminate against you for exercising rights.
8. Children
Mira is not directed to children and is intended for users 18+. We do not knowingly collect data from children. If you believe a minor used the app, contact us to delete the data.
9. Security & international transfers
We use industry-standard safeguards (encryption in transit, access controls). No method is perfectly secure. Data may be processed in countries other than yours; where required we use appropriate transfer mechanisms (e.g., Standard Contractual Clauses).
10. Changes
We may update this policy; we will post the new effective date and, for material changes, notify you in the app. Continued use after changes means you accept the updated policy.
11. Contact
Questions or requests: [email protected]. Postal: Mira, available on request — write to [email protected].