Privacy Policy

This Privacy Policy explains how Mirova ("we," "our," or "us") collects, uses, protects, and shares your personal information when you use our voice journaling service. We're committed to transparency—this policy is written in plain English, not legal jargon.

Important: All health-related fields in the Advanced Profile are optional and used only for personalized journaling insights.

Information We Collect

Information You Provide Directly:

• Account Information: Email address, name, password (encrypted). Sign-in uses email and password only; no third-party sign-in methods are used in the iOS version.
• Voice Recordings: Audio files you create during journaling sessions
• Journal Entries: Text transcriptions and any manual edits you make
• Mood Data: Self-reported mood ratings and emotional check-ins
• Payment Information: Processed securely by our payment provider (we never store full card details)

About Voice Recordings: Mirova collects voice recordings only when you voluntarily choose to record a journal entry. These recordings are used to generate insights and are never shared with any third-party for marketing or advertising.

Information Collected Automatically:

• Usage Data: Features used, session duration, interaction patterns
• Device Information: Device type, operating system, browser type
• Log Data: IP address, timestamps, error reports
• Analytics: Aggregated, anonymized usage statistics to improve our service

Information From AI Processing:

• Sentiment Analysis: Emotional tone detected in your entries
• Pattern Recognition: Recurring themes, topics, and emotional trends
• Insights: AI-generated suggestions for reflection (stored only in your account)

How We Use Your Information

We use your data to:

• Provide the Service: Transcribe voice recordings, generate insights, track mood patterns
• Personalization: Tailor recommendations and insights to your unique journaling style
• Communication: Send service updates, security alerts, and optional tips (you can opt out)
• Improvement: Analyze aggregated, anonymized data to enhance AI accuracy and features
• Security: Detect fraud, prevent abuse, and protect against security threats
• Legal Compliance: Meet legal obligations and enforce our Terms of Service

What We DON'T Do: We never sell your personal data to advertisers, data brokers, or third parties. Your journal entries are NEVER used to train external AI models without your explicit, opt-in consent.

How We Protect Your Data

We employ industry-leading security measures:

• End-to-End Encryption: Voice recordings and journal entries are encrypted in transit and at rest
• Secure Infrastructure: Data stored on enterprise-grade AWS cloud servers across multiple geographic locations with SOC 2 compliance
• Access Controls: Strict employee access policies—only authorized personnel can access systems (never your personal journal content)
• Regular Audits: Third-party security assessments and penetration testing
• Automatic Logout: Sessions expire after inactivity to prevent unauthorized access
• Two-Factor Authentication: Optional 2FA for enhanced account security

No system is 100% secure. While we use best practices, you should also use a strong, unique password and enable two-factor authentication.

When We Share Your Data

We only share your information in these limited circumstances:

• Service Providers: Third-party vendors who help us operate (e.g., cloud hosting, payment processing via Razorpay/Stripe, AI transcription). They are contractually obligated to protect your data and cannot use it for their own purposes.
• Legal Requirements: If required by law, court order, or to protect rights and safety. We'll notify you unless legally prohibited.
• Business Transfers: If Mirova is acquired or merged, your data may transfer to the new owner. You'll be notified and have the option to delete your account.
• With Your Consent: If you explicitly opt in to share anonymized data for research or AI training.

Your Privacy Rights & Choices

• Access Your Data: Request a copy of all your personal information we hold.
• Download Your Data: Export your journal entries and voice recordings anytime.
• Correct Inaccuracies: Update or correct your account information.
• Delete Your Account: Permanently delete your account and all associated data (completed within 30 days).
• Opt Out of Communications: Unsubscribe from marketing emails (you'll still receive critical service updates).
• Restrict Processing: Limit how we use your data (may affect service functionality).
• Withdraw Consent: You can withdraw consent for data processing at any time.
• Account & Data Deletion: You can request permanent deletion of your account and all associated data at any time by emailing us at support@mirova.ai.

To exercise these rights, email us at privacy@mirova.ai or use the account settings within the app.

How Long We Keep Your Data

• Active Accounts: Data retained as long as your account is active
• Deleted Accounts: Permanently deleted within 30 days (except where legally required to retain)
• Backups: May remain in encrypted backups for up to 90 days for disaster recovery
• Anonymized Data: Aggregated analytics may be retained indefinitely (cannot identify you)

Children's Privacy

Mirova is not intended for children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us immediately at privacy@mirova.ai and we'll delete it.

Data Storage & Location

Your data is stored on secure AWS cloud servers distributed across multiple geographic locations to ensure reliability, performance, and data redundancy. All data is encrypted both in transit and at rest.

Cookies & Tracking

We use cookies and similar technologies for:

• Essential Cookies: Keep you logged in and remember your preferences
• Analytics Cookies: Understand how you use Mirova (anonymized)
• Performance Cookies: Improve app speed and functionality

You can control cookies through your browser settings. See our Cookie Policy for details.

Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or in-app notification at least 30 days before taking effect. Continued use after changes constitutes acceptance.

Grievance Redressal

We have appointed a Data Protection Officer to address your privacy concerns:

Questions or Concerns?

We're here to help. If you have questions about this Privacy Policy or how we handle your data:

Privacy-First GuaranteeYour journey is sacred. We'll never compromise your privacy for profit.