Privacy Policy

Vision Publishing LLC (“we,” “our,” or “us”) operates the Miraya mobile app (the “App”). This privacy policy explains how we collect, use, and protect your personal information when you use our App.

1. Information We Collect

1.1 Information You Provide

When you use Miraya, you may provide personal information during onboarding and while using the App, including:

• Your first name
• Your age and location
• Your personal goals and aspirations
• Information about your relationships and family life
• Your work and lifestyle preferences
• Your tone and voice preferences
• Your gratitude notes and personal reflections
• If you choose voice cloning, a microphone recording of your own voice and the reference text displayed

1.2 Local-First Architecture

Miraya is designed with a local-first architecture. Your profile, sessions, affirmations, gratitude notes, and preferences are saved locally on your device. We do not maintain a persistent server database of this personal content. When you request AI generation or contact support, the necessary request data may pass through our servers before reaching the relevant service provider.

1.3 Processing Personalized Content

To generate personalized sessions, affirmations, and audio content, the App sends certain profile information to Miraya’s secure server infrastructure. Miraya uses specialized, contractually bound processing services for text generation, speech synthesis, synchronization, transcription, and optional voice cloning. This includes:

• Profile details needed to personalize your sessions (such as your first name, goals, and preferences)
• Requests to modify a session
• Generated narration text and audio files needed for speech synthesis and word-by-word synchronization

These transmissions are used solely to generate your personalized content. We do not allow our processing service providers to use this data for advertising, analytics, or any purpose unrelated to this service.

1.4 Optional Voice Cloning

Voice cloning is optional and requires a separate, explicit confirmation that the recording is of your own voice. If enabled, the recording and its transcription are sent through Miraya’s secure infrastructure to create a private voice model. Miraya retains on its server only the private model identifier and a pseudonymous installation identifier (App Attest on iPhone, a system-protected installation key on Android), so the model remains limited to your installation. A new recording replaces the previous model. You can delete the model from the voice selection screen at any time.

1.5 Subscription Information

On iPhone, subscription purchases are handled entirely by Apple through the App Store using Apple’s StoreKit framework. On Android, purchases are handled by Google Play. No third-party subscription platform is involved. We do not collect, process, or store any payment card information.

To confirm that Premium access corresponds to a valid subscription, the App sends the transaction cryptographically signed by Apple to our own server, which verifies it against Apple’s root certificates. Our server stores Apple transaction IDs, the product ID, the environment, the initial purchase, renewal, or expiration dates, offer information, the amount and currency when Apple provides them, the App Store storefront country, and a random subscription token generated on your device. This signed data is used to verify access and produce aggregated sales statistics. The server never receives your Apple ID, name, email address, or any payment card details. Apple also notifies our server directly when a subscription is renewed, expires, or is refunded.

On Android, the App sends our server the Google Play purchase token and a random installation ID so we can verify your subscription with Google. Our server stores this token, the product, the subscription status and expiration, and the pseudonymous link that allows access to be restored and usage limits to be shared across your devices. It never receives your Google password or payment card details. Google also notifies our server when a subscription is renewed, expires, or is refunded.

1.6 Privacy-Respecting Usage Measurement

Miraya’s usage measurement is first-party : measurement events are sent only to Miraya’s backend and are never shared with an advertising network, an analytics tool provider, or any third party. The App contains no advertising identifiers, cross-app tracking, or third-party analytics SDKs.

When measurement is enabled, the App records a limited set of pseudonymous technical events: app opens, onboarding completion, subscription screen views, successful or failed purchases or restorations, generation starts, completions, or daily limit reached, and whether subscription access is active. Each event carries only a random installation ID, a random session ID, the app version, and a short allowlist of technical properties.

The App cannot transmit anything outside this allowlist: journal entries, gratitude texts, goals, profile answers, generated sessions, audio, your name, email address, an advertising identifier, and payment data are rejected before the event leaves your device. There is no session replay, screenshot capture, interaction recording, questionnaire, or automatic crash reporting. You can disable or re-enable this measurement at any time in Settings > Data > Help Improve Miraya.

When measurement is enabled, we may also count major onboarding steps (welcome, profile, intentions, preferences, and preparation), playback starts or resumes, sessions reaching the end, and completed affirmation rituals. Only the general step ID is sent, never its questions or your answers. The App Store or Google Play storefront country may accompany these events; this is not GPS or IP address geolocation. Pseudonymous installation metadata retains the first and last observed activity and the latest available storefront region; it is deleted after 400 days of inactivity. Events are retained for up to 400 days and are subject to the same collection setting.

1.7 Reviews submitted from the App

If you choose to send us feedback from the App (“Send Feedback”), we receive the topic you select, your message, an optional voice message, up to five optional screenshots, and an optional email address, along with the App and system versions, your device model, a pseudonymous installation ID, and the App account token, which links the feedback to your subscription. Screenshots are reduced in size and stripped of metadata (including location) on your device before anything is sent. Nothing is sent without your action, and a voice message is recorded only after you agree.

A voice message is automatically transcribed by a contracted transcription service, which receives only the recording, so our team can read it. Your feedback is used only to understand and fix the problems reported and to improve Miraya. It never contains your journal or gratitude notes.

1.8 App Integrity Verification

To protect access, purchases, and generation services, the App proves to our server that it is genuine: on iPhone, through Apple’s App Attest; on Android, through Google’s Play Integrity service, which processes the technical information needed to verify the app, its source, the device, and the license. Our server verifies the result using a signature unique to the installation and a temporary challenge. These checks are not disabled by the optional usage measurement setting.

1.9 Reporting Content

You can report generated content that you find inappropriate from within the App. Only your selected reason, the category, a cryptographic fingerprint of the content, the date, and a pseudonymous installation ID are sent to Miraya. The session text, profile answers, journal, and audio are not included. These reports are used to improve generation instructions and moderation; they are kept for no more than 400 days and then automatically deleted.

2. How We Use Your Information

The information you provide is used exclusively to:

• Personalize your sessions, affirmations, and content
• Improve your experience in the App
• Generate relevant daily content based on your profile
• Store your preferences and progress locally on your device
• Validate and restore your Premium subscription
• Read the feedback you send us and fix the problems reported
• Measure the reliability of onboarding and subscription flows without collecting your personal content

3. Data We Do NOT Collect

Miraya does none of the following:

• Record session replays or automatically capture screens, interactions, or entered text
• Use advertising identifiers or tracking pixels
• Share your data with advertisers or data brokers
• Maintain a persistent server database of your profile, journal content, or generated sessions; the optional voice cloning feature retains only the limited association between the model and the installation described above
• Use cookies or similar tracking technologies
• Use usage measurement for advertising or cross-app tracking

4. Data Retention and Security

Your personal content is primarily stored locally on your device, protected by standard iOS or Android security measures. When you initiate an AI generation or support request, the request data passes through our servers and may appear in short-lived operational logs used for reliability, abuse prevention, and debugging. Apple keeps subscription records, and our own server retains verified Apple transaction identifiers needed to confirm your access. If measurement is enabled, the restricted events described above are stored on Miraya’s server and are never shared with a third party.

• This content is protected by your device lock (passcode, Face ID, Touch ID, or fingerprint).
• On iPhone, it’s included in your iCloud backups if iCloud Backup is enabled. On Android, Miraya excludes its data from automatic backup and device-to-device transfer: uninstalling the app or changing phones results in the loss of local content.
• It is deleted if you uninstall the app or choose to delete your data in the app settings.
• We make every effort not to retain a persistent copy of your profile or journal content on our servers after processing the request.
• We may retain a short-lived app integrity challenge and a pseudonymous installation identifier, used only to secure access to the generation relay and limit abuse.
• If you enable voice cloning, the contracted voice processing infrastructure retains the private voice model and associated sample only for as long as needed to provide this feature, until you delete or replace it.
• First-party product events and verified App Store and Google Play notifications are retained for a maximum of 400 days; operational records related to generation limits are retained for a maximum of 8 days.
• Feedback sent from the app (message, voice message and its transcript, screenshots, optional email) is retained for a maximum of 12 months, then deleted.

5. Account and data deletion

You have the right to delete your account and all associated data at any time. Miraya offers two ways to do this:

• Delete from the app (recommended): go to Settings > Data > Clear Local Data in the app. This action permanently and immediately deletes all personal information stored locally, including your profile, sessions, affirmations, gratitude notes, manifestations, and all your preferences.
• Contact us: you can also request the deletion of your account and data by writing to us at contact@hellomiraya.com. We respond within 30 days and tell you what steps to take to complete the deletion.

Because Miraya stores your main content locally on your device and does not keep a persistent server copy, deleting your data from the app immediately removes the local content stored on your device. This action also resets the pseudonymous measurement identity on that device, and any measurement events still pending on the device are deleted instead of being sent. Uninstalling the app deletes locally stored data. To request deletion of records retained for subscription verification or usage measurement, contact us using the details below.

Details about the data that is deleted, the data that is retained, and the time frames are also available on the page Delete your Miraya data.

Deleting from the App does not remove the reviews you sent us: you can request their deletion at contact@hellomiraya.com, and they are deleted after 12 months in any case.

If you created a voice clone, delete it first from Settings > Voice > Delete my voice. You can also contact us to request deletion of a private voice model that you can no longer access from the App.

6. Children’s privacy

Miraya is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has shared personal information with us, please contact us so we can take appropriate action.

7. Service infrastructure

The App relies on the following categories of services:

• Apple App Store or Google Play, depending on your device — for subscription management, payment processing, and App integrity checks (App Attest, Play Integrity)
• Miraya backend infrastructure — our own servers, used to relay generation requests, verify Apple and Google Play subscription transactions, enforce fair-use limits for generations, and retain the first-party usage measurement described in Section 1.6
• Contracted generation infrastructure — specialized text and voice processing services, used only to produce the requested sessions, affirmations, profile summaries, narrations, syncs, transcripts, and private voice clones, as well as transcriptions of voice messages attached to your reviews

We require our processing providers to use request data only to provide the Miraya features you request, under their applicable privacy and security commitments. You can contact us for more information about the subprocessors currently used for these operations.

8. Changes to this policy

We may update this privacy policy from time to time. If we do, we will update the “last updated” date at the top of this page. We encourage you to review this policy regularly.

9. Your rights

Depending on your jurisdiction, you may have the following rights:

• Access the personal data we hold about you
• Request that your data be corrected or deleted
• Object to or request a restriction of the processing of your data
• Data portability

You can view, edit, or delete your content stored locally directly in the App, and turn off usage measurement in Settings. For any request to access, correct, port, or delete subscription support records or usage measurement records, contact us using the details below.

10. California residents’ rights (CCPA)

If you reside in California, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your information. We do not sell your personal information to third parties.

11. Contact us

If you have any questions about this privacy policy, you can contact us:

• Email: contact@hellomiraya.com
• Address: Vision Publishing LLC, 2105 Vista Oeste NW Suite E #3990, Albuquerque, NM 87120, United States
• Phone: +1 (505) 278-9455