Privacy Policy
Last updated: 2026-10-30
This policy explains what personal data the Mira app and its server process, why, where it goes and what you can do about it. Mira is a voice assistant with memory: to remember things for you it has to process what you say and, when you turn on Listen, what is said around you. We try to keep this to what each feature needs, and you can switch features off and delete your data at any time.
1. Who is responsible
The controller of your personal data is TO BE COMPLETED. Contact for privacy questions and requests: privacy@autonorms.com.
2. Your account
- Without signing in: on first launch the app receives a random account key from our server. We do not ask for your name, phone number or e-mail to start.
- Sign in with Google (optional): to keep your data when you change phones we receive your Google account ID, e-mail address, name and profile picture address. We never receive your Google password.
- Recovery code (optional): we store only a one-way hash of it.
- Profile: the name, form of address, city, language and time zone you give us, and an optional profile photo.
3. What we process, feature by feature
Most features work only after you turn them on, and Android asks for each permission separately.
| Data | When and why |
|---|---|
| Voice and speech you direct to Mira (Talk) | Converted to text, answered and, if useful, remembered (for example a reminder or a note). Audio is processed to produce the text and the spoken answer. |
| Speech around you (Listen, recordings) | Only while Listen or a recording is on (a notification is shown the whole time). Speech is detected on your phone; segments are sent to our server to be transcribed, summarised and turned into reminders and notes. Speech that is not clear enough is not sent to the cloud. Audio is deleted from the server after processing unless you choose to keep the audio of a recording. |
| Voice profiles (voiceprints) | To tell speakers apart in Listen and recordings, the server computes numerical voice profiles of the voices it hears and groups a recurring voice under the same ID, which you can name. Your own profile is created when you teach Mira your voice. Profiles are used only inside your account to show who said what and to make sure commands come from you. Voice profiles can be biometric data; you can delete any of them in the app's voice list. |
| Conversations, notes, memory, reminders, tasks | Stored on our server so that Mira can remember and remind you. |
| People you add | Names, relationship and the details you tell us. If you pick a person from your contacts, only that person's phone numbers, e-mail addresses and birthday are sent; your whole address book is not uploaded. |
| Photos and camera | Photos you share, and frames from the live camera while you use camera features, are analysed to answer you; photos you save are stored. The camera is used in the background only for the camera guard you set up on a spare phone. |
| Location and places | When you use places, parking, weather, nearby search or emergency features: your location and the identifiers of the Wi-Fi network or car Bluetooth you mark. Approximate city from your IP address is looked up on our own server (DB-IP database). We do not track your location in the background. |
| Health and wellbeing (optional) | Steps, finger-pulse measurements, medicines, sleep and sound reports, relaxation and self-suggestion sessions. Sound recognition for sleep runs on your phone; only labels and reports are stored, and clips stay on your phone for 14 days. Processed only with your explicit consent. These features are not medical devices. |
| Money records (optional) | Income, expenses, payments and debts that you enter or say. We do not connect to your bank. |
| Notifications (optional) | If you turn on the notification assistant, the text of notifications from the apps you choose is sent to our server to summarise and prioritise them. |
| Phone and app usage (optional) | Call start and end (not the number) to offer a note after a call; screen-time totals if you allow usage access; physical activity to count steps. |
| News interests | Topics and companies you follow, to prepare your news. |
| Purchases | Google Play handles payment. We receive the product, order number and purchase token to add your credits and manage your subscription. We never receive card details. |
| Reports you send | If you report an answer, we store the answer, the reason and your note to review it. |
| Technical data | IP address (for security, abuse prevention and approximate city; not stored with your content), app version, error and timing measurements, and the cost of the AI requests made for your account (to manage credits). |
4. People around you
When you use Listen or record a meeting, other people's speech can be processed. Laws on recording differ between countries; in some places everyone must agree. You are responsible for telling people and getting their consent where required. Anyone whose data you added can ask you, or us, to delete it.
5. Service providers and where data goes
- Our server: a virtual server rented from hosting.com.tr in Türkiye. Encrypted backups are kept on that server and in Google Drive (Google LLC).
- AI models: to understand speech, answer and speak, the text, audio or images needed for the task are sent through OpenRouter, Inc. (USA) to the model and hosting providers configured for that task. At the date of this policy these can include Google (Gemini), OpenAI, xAI, DeepSeek, Alibaba Cloud (Qwen), Z.ai, Xiaomi, Inception, Fish Audio (speech), Microsoft Azure, Together AI, DeepInfra, Novita, Inference.net, NEAR AI, Relace and StreamLake. Some are located in the USA, China or other countries outside your own. They process the data to produce the response under their own terms. We do not sell your data and we do not use it for advertising.
- Google: Sign in with Google, Google Play billing, and on-device ML Kit pose detection (Google may receive basic diagnostic data from ML Kit).
- Weather and maps: Open-Meteo (weather for a place) and OpenStreetMap Overpass (nearby places) receive coordinates or a city, not your identity.
Where data leaves the European Economic Area, the United Kingdom or Türkiye, we rely on the safeguards the law requires, such as standard contractual clauses where available, or on the transfer being necessary to provide the service you asked for.
6. Legal bases (EEA, UK, Türkiye)
- Providing the service you asked for (contract): account, assistant answers, reminders, memory, purchases.
- Your explicit consent: voice profiles, health and wellbeing features, and optional features that need special permissions. You can withdraw consent at any time by turning the feature off or deleting the data.
- Our legitimate interests: security, preventing abuse of free credits, fixing errors.
- Legal obligations: keeping purchase records where tax law requires.
7. How long we keep data
- Your content stays until you delete it or delete your account. Audio from Listen is deleted after processing unless you keep a recording's audio.
- Reset in the app deletes everything except your account, credits and sign-in. Delete account deletes everything. Deleted data is removed from the live system at once and from backups within 30 days.
- Server logs are short and rotate automatically; our web server keeps no access logs.
8. Your rights
You can see, correct and delete most of your data directly in the app (Profile, Memory, Conversations, Recordings, People). You can also ask us at privacy@autonorms.com for a copy of your data, correction, deletion, restriction or portability, or object to processing. We answer within one month. You can complain to your data protection authority (in Türkiye the KVKK Authority).
California and other US states: we do not sell personal information and do not share it for cross-context behavioural advertising. You have the right to know, delete and correct, and we will not discriminate against you for using these rights.
9. Security
Connections use HTTPS. Access to the server is limited to key-based administrator access; backups are encrypted. Android keeps the app's files private to the app. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.
10. Children
Mira is not intended for anyone under 18, and we do not knowingly collect data from children.
11. AI transparency
Mira is an AI system. Its spoken voice is synthetic. Answers can be wrong; check important information. You can report an answer by long-pressing it.
12. Changes
If we change this policy in a way that matters, we will tell you in the app before the change applies.