Privacy Policy

1. What we collect

We collect only what is needed to run Miray:

• Account data — email, display name, encrypted password.
• Family + baby profile — family name, baby name, date of birth, optional photo, gender (if provided).
• Tracking events — feedings, diapers, sleep, growth, medications, temperatures, pumping sessions you log.
• AI conversation history (if you use Nora) — your messages and her replies, stored per family.
• Subscription + payment metadata — handled by Stripe; we store only the subscription status and plan, never card numbers.
• Technical metadata — device client ID, timestamps, last-active time for sync coordination.

2. What we do NOT collect

We deliberately do not collect:

• Location data, contacts, photos beyond the optional baby photo, or microphone recordings (voice transcription happens on-device and is sent only to your chosen AI provider for parsing).
• Advertising identifiers, third-party trackers, or any analytics that profile you across the web.
• We never sell your data. There is no advertising business in Miray.

3. How AI works

When you use Nora, your message + a snapshot of your tracking data is sent to the AI provider you selected (Anthropic Claude by default, or your own OpenAI/Google key). Anthropic and OpenAI do not train models on data sent through their API. If you provide your own API key (BYOK), the request flows through that provider with their terms.

4. Where your data lives

Account, family, and event data are stored in Supabase (PostgreSQL) in the eu-central-1 region. Row-Level Security policies guarantee that you can only read or write rows scoped to your family. Local copies live in your browser via IndexedDB (Dexie) so the app works offline.

5. Sharing

Caregivers you invite to your family can read and write all events for that family — that is the entire point of inviting them. No one outside your family workspace can see your data, including Miray staff (we cannot decrypt your row contents without your authorization for support).

6. Your rights

You can export, modify, or delete any data at any time. Email amir.amon23@gmail.com to request a data export or full account deletion. We delete account + family rows within 7 days of a verified request.

7. Children

Miray stores information about your baby — but the account holder is you, the caregiver. You are responsible for the data you log. If you wish to delete your baby's profile, you can do so from Settings → Baby Profile.

8. Contact

Questions, requests, or concerns? Reach the developer at amir.amon23@gmail.com.