MIRA Health Privacy Policy

MIRA Health (“MIRA”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal and health information. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our mobile app, website, and services (collectively, the “Services”).

By using the Services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect two main types of information:

a. Personal Information

This includes information that identifies you or can be used to identify you, such as:

• Full name
• Email address
• Date of birth
• Contact details
• Login credentials

b. Health Information (PHI)

We collect Protected Health Information (PHI) as defined by HIPAA, including:

• Medication data (scanned or entered)
• Health history or symptoms
• Health survey responses
• Reminder preferences
• Daily check-in answers
• Analytics from app usage (e.g. medication adherence)

2. How We Use Your Information

We use your information to:

• Provide, personalize, and improve our Services
• Send medication reminders and health prompts
• Generate personalized health insights
• Track progress and trends in your health data
• Respond to your inquiries and provide support
• Comply with legal obligations (e.g. HIPAA)

We may use de-identified data for research, analytics, and development of new features. De- identified data cannot be used to identify you.

3. How We Share Your Information

We do not sell your personal or health information. We may share your data only as follows:

• With Your Consent – When you authorize sharing with a provider, caregiver, or partner.
• With Service Providers – With third parties who support our platform (e.g. cloud hosting), under strict confidentiality and HIPAA-compliant agreements.
• For Legal Reasons – If required by law, subpoena, court order, or to prevent harm.
• Business Transfers – In the event of a merger or acquisition, we may transfer your information with proper safeguards.

4. Data Security

We apply industry-standard and HIPAA-required safeguards to protect your information, including:

• Encryption of data in transit and at rest
• Access controls with role-based permissions
• Audit logs and incident detection tools
• Regular security assessments

Despite our efforts, no system is 100% secure. We encourage users to protect their own credentials and report suspicious activity.

5. Your Rights Under HIPAA

You have the right to:

• Access your PHI and request a copy
• Correct or amend inaccurate PHI
• Request restrictions on uses or disclosures
• Receive a list of disclosures (accounting of disclosures)
• Withdraw your consent or delete your account at any time

To exercise these rights, contact us at info+privacy@mirahealth.org

6. Data Retention

We retain your information as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete your PHI unless otherwise required by law.

7. Children’s Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children without verifiable parental consent.

8. International Users

Our Services are intended for users around the world. If you access MIRA Health from outside the U.S., you acknowledge that your information may be processed and stored in the U.S., subject to U.S. privacy laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Your continued use of the Services after such changes constitutes your acceptance of the updated policy.

10. Contact Us

For any privacy-related questions, requests, or complaints, please contact us at:

Privacy Officer

MIRA Health

Email: info+privacy@mirahealth.org