Privacy Policy
Effective October 10, 2026
Mira is operated by Vocal, LLC (“Vocal,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, and protect your information when you use the Mira app (“Mira,” the “App”).
Information we collect
Check-in data. A check-in is a single moment in time made up of a timestamp, one or more feelings, physical symptoms, or external factors you select (from our built-in catalog, the feelings wheel, or an item you’ve created yourself), an intensity level for each item, and an optional short note per item. You can also write one note for a whole day, and keep a record of your medications. Check-ins can be started from the full in-app flow, a Favorite chip, the home screen widget, or Apple Watch — all are stored the same way. All of this is kept on your device. It leaves your device only if you sign in for cloud backup, described below. Per-item notes are never included in Insights.
Health & weather snapshot (optional). If you enable this in Settings → Health & weather, each check-in is automatically paired with a snapshot of relevant Apple Health and WeatherKit data for that check-in’s moment — for example heart rate, sleep, steps, exercise, cycle data, or weather conditions. You choose which data types are included, and you can turn this off at any time; check-ins logged before you turn it off keep whatever snapshot they already have. Mira only reads from Apple Health and never writes to it. Weather requests are handled by Apple, and Mira stores only the result, not your location.
Account information (optional). Mira works fully without an account. If you choose to sign in with Apple, we receive an account identifier and, if you allow it, your name and email address (which Apple may relay through a private address). Mira has no passwords.
Cloud backup (optional). If you sign in, a backup of your check-ins, notes, day notes, medications, and settings is stored in Google Firebase under your account, so a lost phone doesn’t mean lost data and your devices stay in step. Only your account can read or write it — that’s enforced by the database rules, not just by the app.
Insights data (optional, opt-in). If you enable Insights, we receive per-day aggregates only — not individual check-ins, not location, not per-item notes, and not the day note (which has its own separate, off-by-default opt-in that switches itself off whenever Insights is turned off). Days are referenced by index rather than calendar date.
Feedback. If you send feedback from the app, we receive only your message and the category you chose — no name, email, device, or app identifier.
Usage data. Mira contains no analytics, advertising, attribution, or crash-reporting software. If Apple shares crash reports with us because you’ve allowed it in your iPhone’s settings, they don’t contain the content of your check-ins.
How we use your information
- To operate core app functionality: check-in logging across the app, widget, and Apple Watch; History; Trends; and your Today view
- To attach the optional health and weather snapshot to a check-in, using only the data types you’ve enabled
- To back up and sync your data, only if you’ve signed in
- To generate day-level Insights, only if you’ve opted in, and only from per-day aggregates
- To maintain and improve the app (bug fixes, performance, feature development)
- To reply to you when you contact us
We do not sell your data. We do not use your data for advertising or share it for anyone else’s marketing.
Third-party services
We use a small number of providers to operate Mira, each only for the feature named:
- Apple — Sign in with Apple, Apple Health, WeatherKit, and App Attest, which confirms requests come from a genuine copy of the app without identifying you.
- Google Firebase — cloud backup and sign-in, if you sign in.
- Cloudflare — hosts Mira’s small server, which handles Insights and feedback. It doesn’t keep your Insights data after answering.
- OpenAI — writes your Insights from the per-day aggregates, if you’ve opted in. OpenAI does not use data sent through its API to train its models.
These providers process data on our behalf under their own confidentiality and security obligations, and do not use your data for their own purposes.
Data security
We use industry-standard safeguards (encryption in transit and at rest, access controls) to protect your data. No system is 100% secure.
Your rights
You can export all of your data as a CSV file from Settings at any time. You can delete individual entries, delete your cloud backup, or delete your account from within the app. Deleting your account permanently removes your account and everything backed up to the cloud; the check-ins on your iPhone are kept until you delete them or the app. For anything else, contact us at hellomirasupport@gmail.com.
Children’s privacy
Mira is not directed at children under 13 (or the applicable minimum age in your region), and we do not knowingly collect data from children under that age.
Health data note
Mira is a self-directed reflection tool, not a medical device, and Vocal is not a HIPAA-covered entity. We treat your check-in data with the same care as sensitive health information regardless of this legal distinction.
Changes to this policy
We’ll notify you in the app of material changes before they take effect.
Contact
Questions about this policy: hellomirasupport@gmail.com