Privacy Policy
Mira AI LLC ("we," "us," "our") built Mira to be local-first and privacy-first. This Privacy Policy explains what limited information we collect through our website and hosted services, why we collect it, and what we do not collect.
1. Our Core Privacy Principle
The Software runs on your own hardware. Your conversations, files, prompts, generated content, and local data are not transmitted to us, stored on our servers, or used to train any model, except where you explicitly opt into a hosted feature (such as Mira Community's relay for peer-to-peer connection, or cloud-based features you separately enable).
2. Information We Collect
The information we collect is limited to what is needed to operate accounts, payments, support, and optional hosted services.
2.1 Account Information
Email address and password (hashed) — collected via Mira Auth when you register. Subscription tier (community_free or suite) and billing status.
2.2 Payment Information
Payment processing is handled entirely by Stripe. We do not store full credit card numbers. We receive limited billing metadata (such as subscription status and renewal dates) needed to manage your account.
2.3 Technical Information
IP address and basic device/browser information when you visit our website (standard web server logs). Crash or error reports, only if you explicitly opt in to share diagnostic information.
2.4 Mira Community Relay Metadata
If you use Mira Community's optional relay for peer-to-peer connection, the relay may handle connection metadata necessary to establish a session (such as which peers are connecting). We do not read, store, or have access to the content of your messages, calls, or file transfers, which are encrypted peer-to-peer.
3. How We Use Information
To create and maintain your account and authenticate you (Mira Auth). To process subscription payments and billing (via Stripe). To send essential account-related emails (verification, password reset, billing notices) via Resend. To respond to support requests and improve the Software based on voluntarily-provided feedback. To comply with legal obligations, such as responding to valid legal process.
4. What We Do Not Do
We do not sell your personal information. We do not use your local conversations or generated content for advertising, profiling, or model training. We do not display third-party advertising in the Software.
5. Data Sharing
We share information only with the service providers necessary to operate Mira AI's hosted infrastructure, including Stripe (payments), Resend (email), and Cloudflare (hosting, authentication infrastructure, and tunnel services). These providers process data on our behalf under their own privacy and security commitments. We do not share your information with data brokers or advertisers.
6. Data Retention and Deletion
We retain account information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us through mirakindred.com. Because the Software is local-first, deleting your hosted account does not delete data stored locally on your own device — that remains entirely under your control.
7. Your Rights
Depending on where you live, you may have specific legal rights regarding your personal data.
7.1 GDPR (European Users)
If you are located in the European Economic Area, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Our legal basis for processing account and billing data is performance of a contract (providing the Software and subscription) and legitimate interest (maintaining security and providing support). You may exercise these rights by contacting us.
7.2 CCPA (California Users)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising these rights. As noted above, we do not sell personal information.
8. Children's Privacy
The Software is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
9. Security
We use reasonable technical and organizational measures (including encrypted transport, hashed credentials, and tunneled infrastructure with no exposed home IP addresses) to protect account information. No system is perfectly secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date and version number.
11. Contact
Questions about this Privacy Policy, or requests to access, correct, or delete your data, can be directed to [email protected].