Privacy

Last updated · May 18, 2026

Mir'aya is a private companion. What you write to her stays between you and her. This page describes what's actually stored, who else touches it on the way through, and how to take it back or delete it.

What we collect

Account information. Your email address and a hashed password (or your Google account identifier if you sign in with Google). Display name if you provide one.

Conversations. The messages you send to Mir'aya and her replies. Stored so she can remember.

Memory entries, journal entries, people, patterns. What Mir'aya extracts and saves at the end of each session. You can see all of this in your vault and edit or delete any of it.

Voice input (optional). If you use the microphone button, audio is sent to a transcription service (Deepgram, with Whisper as backup) and converted to text. The audio is not retained by us after transcription — only the text it became is stored.

Operational telemetry. Per-turn token counts, error logs, and timing data. Used to keep the service running and to bill our infrastructure providers. Never sold, never used to profile you.

What we don't collect

No third-party analytics on your conversations. No advertising identifiers. No tracking pixels. No selling of any data to anyone, ever.

Where it lives

Your data is stored in a Postgres database hosted on Supabase in the European Union (Frankfurt region). Access is controlled at the row level — only your account can read your own rows.

To generate replies, your messages are sent to Anthropic (the company behind Claude, the model Mir'aya uses) for processing. To enable semantic memory search, short text snippets are sent to OpenAI to compute embeddings. To transcribe voice, audio is sent to Deepgram (or Whisper as fallback). Each of these companies has its own privacy policy; we have configured them to not retain content for training where that option exists.

How long we keep it

Until you delete it. There is no automatic expiry. You can export or delete everything at any time from your vault settings (a link will appear in your vault once that surface ships — until then, contact us and we'll do it for you).

Your rights

Export. Download a complete JSON dump of every record we hold about you, anytime.

Delete. Permanently remove your account and all associated data. This cascades through every table; the only retained record is anonymous error-log entries (the personal link is severed) which exist so we can keep the service healthy for other users.

Correct or edit. Open the vault and rewrite any memory entry, journal, profile field, or pattern. You're in charge of your own record.

Subprocessors

Mir'aya relies on the following third-party services to function. Each receives only what's necessary and only for the duration of the operation.

Supabase (database, auth, storage) — EU region
Anthropic (Claude language model) — processes messages to generate replies
OpenAI (embeddings) — processes short text snippets for semantic memory search
Deepgram (voice transcription) — processes audio when you use the microphone
Vercel (hosting) — serves the web app

Children

Mir'aya is not designed for users under 16. If you are a parent or guardian and believe we have collected information about a child, contact us and we will delete it.

Changes to this policy

We will update this page when the practices change. Substantial changes will be flagged via email to active users at least 30 days before they take effect.

Contact

Questions, requests, or concerns: write to hello@rooted.ai.