Last Updated on July 9, 2026
Overview
Mira is a calendar app that helps you manage your events, schedules, and tasks. We respect your privacy and are committed to being transparent about what data we collect, why we collect it, and how you can control it.
This Privacy Policy applies to the Mira iOS app ("Mira," "the App," "we," "us," or "our") developed by Mira.
Information We Collect
Information You Provide
Account Information. When you sign in using Apple Sign In or Google Sign In, we receive your name and email address from the authentication provider. Your account credentials are stored securely on our backend servers.
Connected Calendar Accounts. When you link a Google or Microsoft calendar account, we receive the account’s email address, display name, and account identifier, along with OAuth tokens that let the App access your calendars. A refresh token for each linked account is stored securely on our backend so we can keep real-time calendar notifications working and so your linked accounts can be restored when you sign in on a new device. Unlinking an account deletes its stored tokens.
Tasks. Tasks you create in the App — including their titles and notes — are stored on our backend so they sync across your devices.
Custom Birthdays. Names and dates you add as custom birthdays are synced to our backend as part of your settings.
Support Requests. If you submit a support ticket through the in-app support form, we collect the subject, description, category, your contact email, and any attachments you choose to include, along with your device model, OS version, and app version. You may optionally attach a diagnostic file containing app state and recent error logs — this file never includes your event titles, attendees, or locations. Attachments are uploaded to our secure cloud storage.
Feedback and Votes. If you participate in feedback features within the app, we store your votes, comments, and feedback submissions linked to your user account.
Information Collected Automatically
Analytics and Performance Data. We collect usage analytics to understand how the app is used and to improve performance. Before you sign in, these events are anonymous. Once you sign in, events are associated with your account (using your user ID, name, and email) so we can provide account-specific support and diagnose issues you may report. This includes:
Screen views (which screens you visit within the app)
Feature usage events (e.g., that an event was created or a search was run — never the content of your events, tasks, or searches)
Siri shortcut and home-screen widget usage (feature name only)
App launch and screen render performance metrics
Error and crash reports (automatically captured exceptions)
App Version and Device Info. When you open the app, we report your app version and build number to our backend to help us understand adoption of new releases and provide version-specific support.
Device Registry. To support multi-device sync, we record each device you sign in on (device name, model, OS version, and when it was last seen). You can review your devices in Settings.
Push Notification Token. If you enable notifications, your device’s Apple push token is stored on our backend so we can deliver real-time calendar update notifications.
User Settings Sync. Your app preferences (such as selected calendars and their colors, theme, work profile, custom birthdays, and notification settings) are synced to our backend so they persist across devices and reinstalls.
Calendar Data — Kept Out of Our Servers
Your calendar events are fetched directly from your calendar providers (Google, Microsoft, or your device’s iCloud/on-device calendars) and displayed on your device. We do not copy or store your calendar events on our servers. A local cache of recent events is kept on your device (and shared with the Mira widget, Siri shortcuts, and the Apple Watch app) so your schedule loads instantly and works offline.
One narrow exception: to deliver a useful push notification when a Microsoft calendar event changes, our server briefly reads that event’s title and organizer name to compose the notification text (e.g., “New Invite: Team Lunch”). This information passes through our server and Apple’s push service but is not stored. Notifications for Google calendar changes contain no event details.
Other On-Device Data
Contacts. We access your contacts only to display attendee information and to help you add invitees to events. Contact data is accessed read-only and is not transmitted to our servers.
Location. We may request access to your location for travel-time alerts and accurate time zones. Location data is used on-device only and is not transmitted to our servers. When you type a location while creating an event, your search text is sent to Apple’s Maps search or, if unavailable, to the Photon geocoding service (see Third-Party Services) — only the text you type is sent, never your account information.
Notifications. We use local notifications to deliver event reminders and daily briefs. Notification preferences are managed on your device and synced as part of your app settings.
How We Use Your Information
We use the information we collect for the following purposes:
Providing the App. Displaying your calendar events, managing tasks, and delivering reminders and real-time calendar update notifications.
Account Management. Authenticating your identity, keeping your linked calendar accounts connected, and syncing your settings and tasks across devices.
Analytics and Improvement. Understanding how the app is used so we can improve performance, fix bugs, and prioritize features. Analytics events do not contain calendar content, contact details, or other personal data beyond what is listed above.
Customer Support. Responding to your support requests and resolving issues.
App Updates and Service Alerts. Notifying you of new features, important updates, and service outages within the app.
Third-Party Services
We use the following third-party services, each with their own privacy policies:
Apple Sign In — used for authentication. Receives your name and email as provided by Apple. See apple.com/privacy.
Google — used for authentication and calendar access. Receives your name, email, and OAuth tokens; the App communicates directly with Google Calendar. See policies.google.com/privacy. Mira's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Microsoft — used for linked Microsoft/Outlook calendars. Receives your email and OAuth tokens; the App communicates directly with Microsoft Graph. See privacy.microsoft.com.
Supabase — hosts our backend (authentication, database, and file storage). See supabase.com/privacy.
PostHog — used for analytics and error tracking. Session replay is disabled, and events are anonymous until you sign in. See posthog.com/privacy.
Apple Push Notification service — delivers push notifications to your device. See apple.com/privacy.
Photon (Komoot) — a geocoding service used as a fallback for location search. Receives only the location text you type. See photon.komoot.io.
Data Storage and Security
Backend. Your account data, settings, tasks, device registry, and support tickets are stored on secure cloud servers with row-level security policies to ensure users can only access their own data.
On-Device. Authentication sessions and calendar account tokens are stored in the iOS Keychain. App preferences and the local event cache are stored on your device. Calendar and contact data remains in the system stores managed by Apple.
Widget, Siri, and Watch. A shared container passes a small snapshot of your upcoming events (titles, times, locations) between the main app and the Mira widget, Siri shortcuts, and the Apple Watch app. This data stays on your devices.
Encryption. All data transmitted between the app and our backend uses HTTPS/TLS encryption. Data is encrypted at rest on our servers.
Your Rights and Choices
Delete Your Account. You can delete your account and all associated data from Settings within the app. This removes your settings, tasks, devices, linked-account tokens, feedback data, and authentication account from our servers.
Unlink Calendar Accounts. You can unlink a Google or Microsoft account at any time in Settings, which removes its stored tokens and calendar subscriptions.
Revoke Permissions. You can revoke calendar, contacts, location, or notification permissions at any time in your device’s Settings app. The app will continue to function with reduced functionality.
Analytics Opt-Out. You can turn off usage analytics at any time in Settings → Privacy → “Share Usage Analytics.”
Access Your Data. You may request a copy of the personal data we hold about you by submitting a support ticket in the app (Settings → Contact Us) or by contacting us at the email below.
For European Users (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation:
Legal Basis. We process your data based on: (a) your consent (for optional features like analytics), (b) contractual necessity (to provide the app’s core functionality), and (c) legitimate interest (to improve the app and fix bugs).
Right to Access. You can request a copy of your personal data.
Right to Rectification. You can request correction of inaccurate data.
Right to Erasure. You can request deletion of your data (also available via in-app account deletion).
Right to Data Portability. You can request your data in a machine-readable format.
Right to Object. You can object to processing based on legitimate interest.
Right to Lodge a Complaint. You may file a complaint with your local data protection authority.
To exercise any of these rights, contact us at support@miracalendar.com.
For California Users (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
Right to Know. You can request what personal information we collect, use, and disclose.
Right to Delete. You can request deletion of your personal information.
Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.
We Do Not Sell Personal Information. We do not sell, rent, or trade your personal information to third parties.
To exercise your rights, contact us at support@miracalendar.com.
Data Retention
Account Data. Retained as long as your account is active. Deleted when you delete your account.
Linked-Account Tokens. OAuth tokens for linked calendar accounts are deleted when you unlink the account or delete your Mira account.
Push Tokens and Devices. Device records and push tokens are removed when you sign out on a device or delete your account.
Analytics Data. Retained according to our analytics provider’s data retention policies (typically 12 months).
Support Tickets. Retained for as long as needed to resolve your issue and for our records. You may request deletion.
Children’s Privacy
Mira is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by updating the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: support@miracalendar.com