ArCalArCal

Privacy Policy

Last updated: March 1, 2026

1. Our Privacy Commitment

MiRO ("My Intake Record Oracle") is built with privacy at its core. We believe your health data belongs to you and only you. This Privacy Policy explains what data we collect, how we use it, and the choices you have.

The short version: We collect almost nothing. Your food data stays on your device. No account required. No login. No personal information stored on our servers.

2. Data Storage — Local First

MiRO is an offline-first application. All food entries, nutrition data, meal history, personal goals, and preferences are stored locally on your device using an on-device database.

  • No user accounts or profiles stored on our servers
  • No email, name, or personal identifiers collected
  • Uninstalling the app removes all local data (unless you create a backup)

2.1 Cloud Backup

When you claim your daily Energy, MiRO automatically syncs a compact backup of your food history to our servers. This includes:

  • Food entry text data (food name, calories, nutrients, meal type, timestamp)
  • Custom meals (recipe name, ingredients, nutrition data)
  • Small thumbnail images (~40-80 KB) with nutrition metadata after AI analysis
  • Health profile (gender, age, weight, height, activity level)
  • Nutrition goals (calorie goal, macro targets, meal budgets, cuisine preference)
  • AR Scale data (detected object labels, bounding box coordinates, image dimensions, pixel-per-cm calibration ratio)

Full-resolution food photos and your name/avatar are never uploaded. All synced data is identified by an anonymous hashed device ID — not linked to your personal identity. You can restore your food history on a new device using a Recovery Key.

2.2 Anonymized AI Training Data

We may use anonymized food images and associated metadata (nutrition labels, detected object bounding boxes, calibration data) to improve AI food recognition models or license to third-party AI/ML companies. This data is:

  • Fully anonymized — no device ID, personal identity, or location data is included
  • Stripped of EXIF metadata and any identifying information
  • Aggregated at population level — individual users cannot be identified
  • Used solely for improving food recognition technology

You may opt out of AI training data usage by contacting lnxelnope@gmail.com.

3. Data We Process (Not Store)

3.1 AI Food Analysis

When you use MiRO's AI features (photo analysis, chat-based logging), your request is sent to Google Gemini API for processing. This includes:

  • Food photos you choose to analyze
  • Text descriptions of meals you type in chat
  • Your cuisine preference (to improve accuracy)

This data is processed by Google Gemini and is subject to Google's Privacy Policy. We do not store your photos or analysis requests on our servers.

3.2 In-App Purchases

Energy token purchases and Energy Pass subscriptions are processed through Google Play or the Apple App Store. We receive transaction confirmations (purchase tokens) to validate and deliver your purchase. We do not have access to your payment information (credit card, billing address, etc.).

3.3 Firebase Services

We use Firebase for the following limited purposes:

  • Firebase Analytics: Anonymous usage analytics (screen views, feature usage). No personally identifiable information is collected.
  • Cloud Firestore: Stores your Energy balance, purchase records, subscription status, and compact food history backups for cross-device restoration. Identified by a random device-generated ID (not linked to any personal information).
  • Cloud Functions: Processes purchase validations, Energy transactions, and data sync operations server-side for security.
  • Firebase Storage: Stores small food thumbnail images (~40-80 KB) with nutrition metadata for cloud backup and restoration purposes.
  • Firebase Messaging: Optional push notifications (you can disable these in your device settings at any time).

4. Health Data

If you enable Health Sync, MiRO reads and writes health data through Apple Health (iOS) or Google Health Connect (Android):

  • Written: Nutrition data from food entries (calories, protein, carbs, fat, meal type)
  • Read: Active Energy burned (to adjust your daily calorie goal)

This data exchange happens locally between MiRO and your device's Health system. None of this health data is sent to our servers. Permission is requested only when you enable Health Sync and can be revoked at any time.

5. Photo Gallery Access

MiRO's Gallery Auto-Scan feature optionally accesses your photo gallery to find food photos taken throughout the day. This scanning happens entirely on your device. Photos are not uploaded anywhere unless you explicitly choose to analyze them with AI.

6. Third-Party Services

  • Google Gemini API: AI food analysis processing
  • Google Firebase: Analytics, purchase validation, notifications
  • Google Play / Apple App Store: In-app purchase processing
  • Google AdMob: Advertisements (subject to Google's ad privacy policies)

7. Children's Privacy

MiRO is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

8. Data Deletion

MiRO gives you full control over your data:

  • Delete individual food entries at any time within the app
  • Use "Factory Reset" in Settings to clear all local data
  • Uninstall the app to remove all data from your device
  • To delete server-side data (Energy balance, purchase records, cloud-synced food history, and thumbnail images), contact us at lnxelnope@gmail.com

Cloud-synced food history is retained for up to 90 days for restoration purposes and automatically expires. Thumbnail images are retained until you request deletion.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or on this page. Your continued use of MiRO after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: