Your data, honestly.
Our Privacy Policy is the document a lawyer needs. This page is the version we'd actually say out loud: what Mira stores, where it goes, who can see it, and what we will never do with it.
Last updated: August 23, 2026. This page describes Mira as of that date - where something described below is planned rather than live today, we say so in the same sentence.
What's on your phone, and what leaves it
On your phone, always
- Your child's whole record - medications, appointments, growth, notes, and photos of documents - lives in a database on your phone.
- It works completely offline. No connection, no problem.
- If you never create an account and never turn on sync, nothing about your child's record ever leaves your phone. Two things are still true even then, because we'd rather over-explain: the app registers an anonymous, nameless identity with Google the first time it opens, so your data has somewhere to go if you later choose to sync; and crash reports still go, unless you switch them off (see below).
In the cloud, only once you create an account
- Cloud backup and sync is a visible switch in Settings, on by default - but it only starts working once you create an account, because there is nowhere to back up to until then. Creating an account is what makes a lost phone survivable, not the switch by itself. You can turn sync off at any time.
- With an account and sync on, a copy of your child's record is stored on Google's Firebase infrastructure, tied only to your own account.
- Mira does not run its own servers. Your synced record sits on Google's infrastructure in Frankfurt, Germany - inside the European Union, under European data-protection rules.
- Turning sync off later doesn't automatically erase what's already in the cloud - see "Ask us to delete or export what we have" below for that.
Crash reports, whether or not you sync. If Mira crashes, it sends Google a technical report: your phone model, the Android version, the app version, and the error itself. It never contains anything you typed and never contains anything about your child - the app is built so that it can't. You can switch crash reports off in Settings, under Data and Privacy, at any time.
Encryption, plainly. Data moving between your phone and the cloud is
encrypted. The database on your phone is encrypted, and so are the photos and documents you
attach, with a key held in your phone's own secure hardware. Anything stored in our cloud is
encrypted by Google's infrastructure as standard practice.
Here is what we will not claim. Mira does not offer end-to-end encryption, which would mean
even we could not read your data. We can. The systems that run the service - backup,
support, troubleshooting, and the AI document reading described below - need to read what
you store, and the same access could be compelled by a court. What we do instead is limit
it: nobody at Mira browses your child's records day to day, we do not have a support team
that opens them for fun, and we will never use them for anything except running the service
you are paying for.
Where a photo of your child's medication actually goes
The section above explains this in words. Here it is again, step by step, for the one photo or document you just added - and this describes what happens once you've created an account and turned Cloud Sync on (a visible switch in Settings, on by default, but it only starts working once there is an account to back up to). If you have never done that, none of this happens: the photo stays on your phone, full stop.
-
You add it
You take a photo of a medicine box or a document in the app, and Mira saves it to the database on your phone.
-
It travels encrypted
On its way to the cloud, it travels over an encrypted connection (TLS) - the same kind of protection used across the web, not something unique to Mira.
-
It's stored under your account
It's saved on Google's servers in Frankfurt, Germany, inside the European Union - kept in your account only, encrypted at rest by Google's infrastructure as standard practice.
-
It reaches your other devices
If you sign into Mira on another device of yours with the same account, that same photo appears there too, usually within a few minutes of that device being online. It also appears in My Mira, the signed-in area of this website, in whichever browser you sign in with. (This is your own devices and your own browser, on your own account. It is separate from inviting other family members, which is built but not switched on yet.)
-
It never reaches an advertiser
No advertiser, ad network, or data broker ever sees it. Mira has no advertising and no advertising partners - not for this, not for anything.
One thing a diagram like this can't show. "Encrypted" does not mean nobody at Mira could ever access it. See What's on your phone, and what leaves it, just above, for exactly what that promise does and does not cover.
One more thing a diagram cannot show. A phone is usually yours alone and locks itself. A computer often is not. When you open My Mira on a shared or public computer, your child's records are on that screen until you sign out. Mira signs you out by itself after 15 minutes without activity, but the safest habit is to sign out yourself when you finish.
What this website keeps in your browser. No cookies, no advertising trackers, no analytics. Your text size, contrast, motion and theme choices are saved on your own device so the site looks the same next time. A single yes-or-no marker records that you are signed in, so the page can draw the right menu straight away. Your sign-in session is held by Google's Firebase sign-in library in the browser's own storage, and signing out clears it. Your child's records themselves are not written into browser storage: they are in the page while you look at them, and gone when you sign out. Section 9 of the Privacy Policy lists every item.
No ads, ever.
Mira has no advertising, no ad tracking, and no advertising partners. This will not change. It is the shortest true sentence on this whole page, and the one we'd want you to remember if you read nothing else here.
That includes the launch email list. If you left your email address on this website, we hold the address, the date, and which page you left it on. We will use it for one message: telling you Mira is live. It is not a newsletter, it is not a marketing list, and it is never passed to anyone else. Ask us at support@mirachildcare.com and we take you off it by hand. The message itself is delivered by Resend, an email delivery company in the United States. Section 10 of the Privacy Policy has the detail.
Who else can see your child's record
When family sharing is switched on, Mira will let you invite people you trust - a co-parent, a grandparent, a nanny - into your child's care record, and you will choose what each of them can see and do: Parent (full access, can change the medical plan), Caregiver (day-to-day care and the doses you scheduled, and no changes to the medical plan unless you grant that separately), or Read-only (can see, changes nothing). A Parent can also limit which children a Caregiver or a Read-only member sees. Everyone then works from the same up-to-date record instead of five different versions in five different heads.
Not yet available
Family sharing is built, but it is switched off in this release. It will be switched on in
a later update, once the legal review of sharing a child's health record between adults is
finished. Until then, no invitation can be accepted and nobody but you can reach your
child's record. If you want to know when it arrives, email us at
support@mirachildcare.com.
What leaves your device when you use an AI feature
Some features we're building use artificial intelligence to help you: reading a scanned document or a medicine box, turning your child's history into a story, and turning it into a summary to bring to the doctor. When you use one of these, whatever you're scanning or summarizing is sent to a third-party AI company for processing - not just analyzed on your phone, and not just seen by Mira's own servers.
Nothing about this is live yet. As we write this, no AI feature is turned on for real Mira users - the plumbing exists behind the scenes, but every AI surface in Mira waits behind the same legal review that governs everything else about a child's health data, extended to specifically cover the AI company itself. When AI features do turn on, here is exactly how they will work, and what we've committed to before they do:
- Before any of your child's information is ever sent to a third-party AI company, we will ask you - on its own screen, not buried in a terms checkbox - and tell you which company, what goes to them, and how long they keep it. You can say no, and you can change your mind later and switch it off. If you say no, every other part of Mira keeps working exactly the same: nothing that works today becomes locked behind agreeing to this.
- The parent who owns the record decides. Other people you have invited into your child's record cannot turn this on, and cannot turn it back on if you have turned it off.
- AI document reading only works if cloud backup is on and you have an account, because the AI company is sent the copy of the document that lives in Mira's cloud, not one taken off your phone at that moment. If you keep everything on your phone only, this feature will not run - and that is the trade, stated plainly.
- We will only use an AI company whose written terms say it will not train its models on what you send. That is a condition of doing business with them, not a preference - a cheaper option that trains on your child's records is not on the table at any price. Being honest about the other half: AI companies do hold a request for a short period to check for abuse of their systems before deleting it, and we will tell you who our provider is and how long they hold it, on the page you are asked to agree on. If a provider ever changed those terms, we would change provider.
- The AI reads and extracts. It does not diagnose, does not judge severity, and does not decide anything about your child's care. If it cannot read something confidently, it says so instead of guessing.
- Nothing an AI feature finds is saved to your child's record until you look at it and say yes. Every extracted fact - a diagnosis, a date, a medication - is something you confirm one at a time, not a bulk import you have to trust blindly. This isn't an accident: we believe you being involved is part of what keeps the record accurate, and part of what makes it yours.
- The request goes through Mira's own systems on the way, not straight from your phone to theirs. Before we switch any of this on, we will name the AI company in our Privacy Policy - as a data processor, meaning a company handling your data on our behalf under a written agreement - and we will name it again on the screen where we ask you to agree. You will never be asked to agree to "a third party" without knowing which one.
We are telling you this now, before it ships, because you deserve to know the trade before you meet it - not after. Section 8 of our Privacy Policy now carries the same disclosure in the binding document, so it is on the record before the first photograph is ever sent.
Everything you enter is yours to get right
Mira doesn't verify anything you type. It can't tell if a dose is right, if an allergy severity is accurate, or if a diagnosis is spelled correctly - it only knows what you told it. Getting that information right, and keeping it current, is on you, the person entering it. Always confirm doses and care decisions with your child's actual medical team, and never let anything you see in Mira substitute for that in an emergency.
Mira is for the adult looking after the child - a parent, a guardian, or someone they have asked to help. The record is about your child; the account, and the decisions about it, are yours. This is the same commitment our Terms of Service make - read here in plain language, made binding there.
Ask us to delete or export what we have
From Settings you can delete your account, which removes your records from your device and from our cloud, along with your sign-in. You can also start that from this website; see our account deletion page.
Two honest details. When you delete a single item - one medication, one appointment - Mira marks it as removed and hides it, rather than scrubbing it immediately; deleting your account is what actually clears it. And when family sharing arrives, records you have shared with other people in your family will need their own deletion step, because they are no longer only yours - we are building that out before family sharing goes live.
You can also take everything with you. In Settings, under Data and Privacy, "Export my data" writes a single file containing every record Mira holds for you, plus your attached photos and documents, in a format another program can read. Two honest limits: it exports what is on this phone, and it runs on this phone - so if you have lost the device, contact us instead. The doctor-report and child-story features give you a curated summary to bring to a provider, but that is not the same thing as this export.
How long we keep it. While you are using Mira, your record is kept: we do not delete a child's health history behind your back. If a trial or subscription stays lapsed for more than six months, that account's data is permanently deleted. We warn you well before that happens - when it lapses, again around the five-month mark, and a final reminder two weeks before the deadline - and resubscribing inside those six months brings everything back. The same rule is on our Pricing page and in section 7 of the Privacy Policy. If you ever see them disagree, the Privacy Policy is the one that binds us.
Being straight about the machinery: that six-month deletion runs on our servers on a timer, and building that timer is one of the things we are finishing before launch. Until it runs, nothing is deleted automatically. Nothing is ever deleted early.
What Mira will never do
- Show you an ad, or let anyone else show you one. Not now, not later, not in a future "free" tier.
- Sell your child's information. Not to anyone, for any reason, under any definition of "sold."
- Share your data with an advertiser or a data broker. We have no advertising partners and no analytics companies. The only companies that ever touch your data are the ones running the service: Google, who host it; Resend, who deliver the few emails we send, and who see the address a message goes to and nothing about your child; and the AI company described above, if you ever switch that on.
- Save anything an AI feature finds without you confirming it first. See "What leaves your device when you use an AI feature" above.
- Use an AI company that trains its models on what you send it. It is a condition in their terms, not a policy of ours we could quietly drop.
- Diagnose your child, suggest a treatment, or tell you what a symptom means. Mira organizes what you and your child's doctors already know - it doesn't practice medicine.
- Hold your child's records hostage behind a usage limit. If you reach a storage limit or this month's limit on AI document reading, we will stop you adding new things of that kind - never stop you reading what is already in your record. (Subscription is different, and we say so plainly: after the free trial, Mira needs an active subscription to use. See our Terms of Service.)
One thing that is not a promise, but a disclosure. If Mira is ever sold or merged into another company, your data would transfer with it, and the buyer would be bound by the same commitments on this page. We would tell you before that happened. We also have to hand over data if a court or the law requires it - that is true of every company, and we would rather you heard it here.
This page is our plain-language attempt to be honest with you. The Privacy Policy and Terms of Service are the full, legally binding versions of the same commitments. Questions about any of this: privacy@mirachildcare.com.