Consumer Health Data Privacy Policy
Version 1.1. Adopted 24 September 2026.
This policy applies to people in the United States, alongside the miræ Privacy Policy, under the Washington My Health My Data Act (RCW 19.373), Nevada SB 370 and Connecticut's consumer health data law. Where the two policies differ, the one that protects you more applies.
Who we are
Mirae Code Labs Ltd, 167-169 Great Portland Street, London W1W 5PF, United Kingdom, company number 16598219. contact@miraecodelabs.com.
What we collect, why, and how we use it
miræ is an inner intelligence for psychological development. What you say in sessions can reveal your mental health and, at times, your physical health, sex life or sexual orientation, or religious or philosophical beliefs. We treat all of it as consumer health data.
To run the sessions you ask for: to generate miræ's responses, keep your record (entries, session summaries, recurring themes) and suggest what to explore next.
To keep your record; shown to you and used to shape later sessions.
With your separate consent; shown to you beside your record.
To show you standing information about independent sources of help; recorded as an event.
We collect consumer health data only with your consent, for the purpose stated, or as necessary to provide the service you asked for. We do not collect it for advertising and we do not infer it from anything other than what you share.
Where it comes from
From you, in sessions; from Apple Health on your device, if you turn it on.
Who we share it with
We do not sell consumer health data and we do not share it for advertising. These companies process it on our instructions, under contracts limited to our purposes:
- Anthropic (United States)
- OpenAI (United States)
- Voyage AI (United States)
- Supabase (European Union)
- Hetzner (Germany)
- Sentry and PostHog (European Union)
We do not share it with affiliates. We disclose it to any other party only where the law requires.
Your rights
At any time you may:
- confirm whether we collect, share or sell your consumer health data, and receive a copy of it and the list above;
- withdraw consent to any collection, for example by turning off Apple Health, and we stop;
- have it deleted. On deletion of your account we delete what you said and wrote, your contact details and your sign-in identity, and instruct each company above to delete what it holds, within 30 days and from backups within six months. What remains is de-identified, as described in section 8 of the Privacy Policy, and is not linkable to you.
Use the controls in the app or email contact@miraecodelabs.com. We respond within 45 days. If we refuse a request we say why and how to appeal; if the appeal fails you may contact your state attorney general.
No geofencing
We do not use location data and we do not geofence.
Changes
Changes are posted here with a new date.