Miraya

Privacy Policy

Last updated: September 26, 2026

Vision Publishing LLC ("we," "our," or "us") operates the Miraya mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our App.

1. Information we collect

1.1 Information you provide

When you use Miraya, you may provide personal information during onboarding and while using the App, including:

1.2 Local-first architecture

Miraya uses a local-first architecture. Your profile, sessions, affirmations, gratitude entries, and preferences are stored locally on your device. We do not maintain a persistent server database of this personal content. When you request AI-generated content or contact support, the necessary request data may pass through our servers before reaching the relevant service provider.

1.3 Processing personalized content

To generate personalized sessions, affirmations, and audio, the App sends certain profile information to Miraya's secure server infrastructure. Miraya uses specialized processing services governed by contractual arrangements for text generation, speech synthesis, synchronization, transcription, and optional voice cloning. This includes:

These transfers are used solely to generate your personalized content. We do not authorize our processing providers to use this data for advertising, analytics, or any purpose unrelated to this service.

1.4 Optional voice cloning

Voice cloning is optional and requires separate, explicit confirmation that the recording is of your own voice. If enabled, the recording and its transcription are transmitted through Miraya's secure infrastructure to create a private voice model. Miraya stores only the private model identifier and a pseudonymous installation identifier on its server (App Attest on iPhone, a system-protected installation key on Android), so the model remains restricted to your installation. A new recording replaces the previous model. You can delete the model at any time from the voice selection screen.

1.5 Subscription information

On iPhone, subscription purchases are processed entirely by Apple through the App Store, using Apple's StoreKit framework. On Android, they are processed by Google Play. No third-party subscription platform is involved. We do not collect, process, or store your payment card information.

To confirm that Premium access corresponds to a valid subscription, the App sends the transaction cryptographically signed by Apple to our own server, which verifies it against Apple's root certificates. Our server stores Apple transaction identifiers, the product identifier, the environment, initial purchase, renewal or expiration dates, offer information, the amount and currency when supplied by Apple, the App Store storefront country, and a random subscription token generated on your device. This signed data is used to verify access and produce aggregated sales statistics. The server never receives your Apple ID, name, email address, or payment card details. Apple also notifies our server directly when a subscription renews, expires, or is refunded.

On Android, the App sends the Google Play purchase token and a random installation identifier to our server to verify your subscription with Google. Our server stores this token, the product, subscription status and expiration, and the pseudonymous association used to restore access and share usage limits across your devices. It never receives your Google password or payment card data. Google also notifies our server when a subscription renews, expires, or is refunded.

1.6 Privacy-conscious usage measurement

Miraya's usage measurement is first-party: measurement events are sent only to Miraya's backend and are never shared with an advertising network, analytics vendor, or any other third party. The App contains no advertising identifier, cross-app tracking, or third-party analytics SDK.

When measurement is enabled, the App records a limited set of pseudonymous technical events: app opens, onboarding completion, subscription screen views, purchase or restoration success or failure, generation starts, completions or daily limits reached, and whether subscription access is active. Each event contains only a random installation identifier, a random session identifier, the app version, and a short allowlist of technical properties.

The App cannot transmit anything outside this allowlist: journal entries, gratitude text, goals, profile answers, generated sessions, audio, your name, your email address, an advertising identifier, and payment data are rejected before an event leaves your device. There is no session replay, automatic screenshot capture, interaction capture, questionnaire, or automatic crash reporting. You can disable or re-enable measurement at any time in Settings > Data > Help improve Miraya.

When measurement is enabled, we may also count broad onboarding stages (welcome, profile, intentions, preferences, and preparation), playback starts or resumptions, completed sessions, and completed affirmation rituals. Only the general stage identifier is sent, never its questions or your answers. The App Store or Google Play storefront country may accompany these events; this is not GPS or IP-address geolocation. Pseudonymous installation metadata retains the first and last observed activity and the latest available storefront region; it is deleted after 400 days of inactivity. Events are also limited to 400 days and remain subject to the same collection setting.

1.7 Feedback sent from the App

If you choose to send feedback from the App ("Share feedback"), we receive the selected topic, your message, an optional voice message, up to five optional screenshots, and an optional email address, along with the app and operating system versions, your device model, a pseudonymous installation identifier, and the App's account token linking the feedback to your subscription. Screenshots are resized and stripped of metadata, including location, on your device before being sent. Nothing is sent without your action, and a voice message is recorded only with your permission.

A voice message is automatically transcribed by a contracted transcription service, which receives only the recording, so our team can read it. Your feedback is used only to understand and fix reported problems and improve Miraya. It never includes your journal or gratitude entries.

1.8 App integrity verification

To protect access, purchases, and generation services, the App proves to our server that it is genuine: on iPhone through Apple's App Attest, and on Android through Google's Play Integrity service, which processes the technical information necessary to verify the app, its source, the device, and the license. Our server verifies the result using an installation-specific signature and a temporary challenge. These checks are not disabled by the optional usage measurement setting.

1.9 Reporting content

You can report generated content that seems inappropriate from within the App. Only the selected reason, category, a cryptographic content fingerprint, the date, and a pseudonymous installation identifier are sent to Miraya. The session text, profile answers, journal, and audio are not included. Reports are used to improve generation instructions and moderation; they are retained for no more than 400 days and then deleted automatically.

2. How we use your information

The information you provide is used exclusively to:

3. Data we do NOT collect

Miraya does not:

4. Data retention and security

Your personal content is primarily stored locally on your device, protected by standard iOS or Android security mechanisms. When you initiate AI generation or a support request, request data passes through our servers and may appear in short-lived operational logs used for reliability, abuse prevention, and debugging. Subscription records are retained by Apple, and our own server retains the verified Apple transaction identifiers needed to confirm your access. If measurement is enabled, the limited events described above are retained on Miraya's server and are never sent to a third party.

5. Account and data deletion

You have the right to delete your account and all associated data at any time. Miraya provides two ways to do so:

Because Miraya keeps your main content locally on your device and does not retain a persistent server copy, deleting data from the App immediately removes the local content on your device. This also resets the pseudonymous measurement identity on that device, and pending measurement events are deleted rather than sent. Uninstalling the App deletes locally stored data. To request deletion of records retained for subscription verification or usage measurement, contact us using the details below.

Details of what is deleted, what is retained, and for how long are also available on the Delete your Miraya data page.

Deleting data from the App does not delete feedback you have sent us. You may request its deletion at contact@hellomiraya.com; it is deleted after 12 months in any event.

If you created a voice clone, first delete it through Settings > Voice > Delete my voice. You can also contact us to request deletion of a private voice model you can no longer access from the App.

6. Children's privacy

Miraya is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

7. Service infrastructure

The App relies on the following service categories:

We require our processing providers to use request data only to provide the requested Miraya features, under their applicable privacy and security commitments. You can contact us for more information about the subprocessors currently used for these operations.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we update the "last updated" date at the top of this page. We encourage you to review this policy regularly.

9. Your rights

Depending on your jurisdiction, you may have the right to:

You can view, edit, or delete locally stored content directly in the App, and disable usage measurement in Settings. For access, correction, portability, or deletion requests concerning subscription support or usage measurement records, contact us using the details below.

10. California residents' rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your information. We do not sell your personal information to third parties.

11. Contact us

For questions about this Privacy Policy, you can contact us: