Privacy Policy

Last updated: December 7, 2025

1. Introduction

Mirare ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password when you create an account
  • Payment Information: Payment details processed securely through Paystack
  • Research Data: Data you upload or create using our applications
  • Communications: Messages you send to us through support channels

2.2 Information Collected Automatically

  • Usage Data: Features used, time spent, and interactions with our services
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, pages viewed
  • Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our services
  • Process payments and manage subscriptions
  • Send service-related communications
  • Respond to inquiries and support requests
  • Analyze usage patterns to improve user experience
  • Detect and prevent fraud or security issues
  • Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security measures:

  • Cloud Storage: Hosted on Supabase with enterprise-grade security
  • Encryption: Data encrypted in transit (TLS) and at rest
  • Access Control: Row-level security ensures you only access your data
  • Local Option: Desktop apps can store data locally if preferred

5. Data Sharing

We do not sell your personal information. We may share information with:

  • Service Providers: Third parties that help us operate our services (e.g., Paystack for payments, Supabase for hosting)
  • AI Providers: When you use AI features, prompts are sent to selected providers (OpenAI, Anthropic, Google, etc.) based on your configuration
  • Legal Requirements: When required by law or to protect our rights
  • Team/Institution Members: If you join a team or institution, shared data is accessible to other members as configured

6. AI Features and Data

When using AI features:

  • Your prompts and selected content are sent to AI providers for processing
  • You can use your own API keys (Bring Your Own Key) for full control
  • Local AI (Ollama) option keeps all data on your machine
  • We do not train AI models on your data

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correct: Update or correct inaccurate information
  • Delete: Request deletion of your account and data
  • Export: Download your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

8. Cookies

We use essential cookies for:

  • Session management and authentication
  • Remembering your preferences (currency, theme)
  • Security and fraud prevention

We do not use tracking or advertising cookies. If we introduce non-essential cookies in the future, we will request your consent before using them.

9. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where required by law to retain certain information.

10. International Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers.

11. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our services. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection

Mirare complies with applicable data protection laws including the Kenya Data Protection Act, 2019, and respects GDPR principles for users in the European Union. You can withdraw consent for non-essential cookies at any time by clearing your browser's site data; essential cookies remain necessary for authentication and security.