Privacy Policy

Last updated: August 22, 2026

Miracley is operated by Haithem Bouzid ("Miracley," "we," "us," "our"), built to be a private, personal ritual. This Privacy Policy explains what information we collect through the Miracley iOS app and this website (together, the "Service"), why we collect it, how it's used, and the choices and rights available to you — wherever in the world you're located. By using the Service, you agree to the practices described here.

1. Information we collect

• Account information: your name, and an email address or Apple/Google account identifier used to sign in.
• Personalization preferences: your goals, practice rhythm, narrator voice choice, preferred language, gender, and any hopes or personal context you choose to share — used solely to generate and narrate your affirmations, and, where relevant to your selected language, to help produce grammatically accurate, natural-sounding text.
• Content you create: journal entries, photos, gratitude responses, and similar content you choose to save within the app ("Your Content").
• Notification data: if you enable notifications, your device schedules your daily affirmation reminder locally, based on the time you select — no server involved. A separate periodic positive-message notification (sent at most once every 3 days) is delivered as a server-driven push notification: we store a device push token and your device's time zone solely to deliver it at the correct local time, and its message text is generated via a server request to OpenAI (see Section 6). The push token and time zone are used only for this delivery purpose and are not used for tracking or advertising.
• Usage and diagnostic data: basic session activity (e.g. completion of a daily session, streak counts) and technical diagnostics needed to keep the Service reliable.
• Waitlist email: if you join our pre-launch waitlist on this website, we store only the email address you provide, to notify you at launch.
• Purchase information: if you subscribe, Apple processes your payment directly — we do not receive or store your payment card details. Subscription status is managed through our subscription infrastructure provider (RevenueCat), which receives confirmation of your subscription status from Apple's systems on our behalf.

2. How we use your information

• To generate your personalized daily affirmation and narrate it in your selected voice.
• To operate account features: sign-in, cross-device sync, and account deletion.
• To deliver notifications you've enabled.
• To maintain, secure, and improve the reliability and performance of the Service.
• To notify waitlist subscribers when Miracley becomes available on the App Store.
• To respond to support requests you send us directly.

We do not sell your personal information. We do not use the content of your journal entries, goals, or personal context to serve advertising, and we do not share this content with advertisers or data brokers.

3. Legal basis for processing (EEA, UK, and similar jurisdictions)

Where applicable law requires a legal basis for processing, we rely on: performance of a contract (to provide the Service you've signed up for), your consent (e.g. for notifications, or joining the waitlist), and our legitimate interests (e.g. maintaining Service security and reliability), balanced against your rights. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

4. Tracking and advertising

Miracley does not use third-party advertising SDKs, and does not track your activity across other companies' apps or websites for advertising purposes. Where applicable under Apple's App Tracking Transparency framework, the app will request permission before any such tracking would occur — as of this writing, no such tracking takes place.

5. Cookies and similar technologies

This website may use strictly necessary technical cookies to operate correctly, and may in the future use privacy-respecting analytics to understand aggregate site usage. We do not use cookies for cross-site advertising tracking. Where analytics are used, they do not identify you individually. If this changes, we will update this policy accordingly and, where required by law, request your consent before non-essential cookies are set.

6. Third-party processors

To provide core functionality, limited data is shared with the following processors, strictly to perform the specific task described, and under contractual obligations restricting further use:

• OpenAI: processes your personalization fields (name, goals, rhythm, gender, hopes/context) to generate your affirmation text and periodic positive-message notification text via API. This data is not used by OpenAI to train its models under the API terms in effect at the time of writing.
• Expo: processes your device push token solely to deliver the periodic positive-message push notification to your device. Expo does not receive or process the content of your journal entries, goals, or personal context.
• ElevenLabs: processes the generated affirmation text solely to produce spoken narration in your chosen voice. This data is not used by ElevenLabs to train its models, in accordance with our account settings.
• RevenueCat: processes subscription and purchase status data (such as transaction receipts and entitlement status) to manage and verify your subscription across the app. RevenueCat does not process your payment card details — those remain solely with Apple.
• Supabase: our backend database, authentication, and file storage provider, hosting your account and content data on secure infrastructure.
• Apple / Google: if you sign in with Apple or Google, these providers process authentication only as required by their respective sign-in services. Apple additionally processes subscription payments directly through the App Store.

7. Data storage, retention, and security

Your data is stored on infrastructure with encryption in transit and access controls restricting data access to your own authenticated account. We retain your data for as long as your account remains active, or as long as needed to provide the Service, resolve disputes, and enforce our agreements. When you delete your account, associated personal data is permanently removed from our production systems within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

8. Your rights and choices

• Access and correction: you can view and edit your profile information directly in the app's Settings at any time.
• Deletion: you can permanently delete your account and all associated personal data at any time via Settings → Delete Account. This action is irreversible.
• Waitlist opt-out: email contact@miracley.app at any time to be removed from the pre-launch waitlist.

9. Your privacy rights as a U.S. resident

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including:

• Right to know what personal information we collect, use, and disclose, as described in Section 1.
• Right to delete your personal information, subject to certain legal exceptions — via Settings → Delete Account, or by emailing us.
• Right to correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing — we do not sell or share your personal information as defined under the CCPA/CPRA, so there is nothing to opt out of at this time.
• Right to non-discrimination for exercising any of these rights.
• Authorized agents may submit a request on your behalf; we may require verification of the agent's authority.

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and Texas) have similar rights to access, delete, correct, and port their personal data, and to opt out of certain processing. Contact contact@miracley.app to exercise any of these rights.

10. Your rights under GDPR / UK GDPR (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), including via Settings → Delete Account.
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, commonly used format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

Where we transfer personal data outside the EEA or UK (e.g. to processors listed in Section 6), we rely on appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum.

11. Other jurisdictions

If you are located in a jurisdiction with data protection laws not specifically named above (including, without limitation, Canada's PIPEDA, Brazil's LGPD, or Australia's Privacy Act), you may have similar rights to access, correct, delete, or port your personal data, and to object to certain processing. Contact contact@miracley.app to exercise any applicable rights; we will respond in accordance with the law applicable to you.

12. Automated processing

Your daily affirmation text is generated using AI based on the personalization fields described in Section 1. This process does not involve automated decision-making that produces legal or similarly significant effects on you, and no automated decision made by the Service determines your access to the app, pricing, or account status.

13. Children's privacy

Miracley is not directed at children, and we do not knowingly collect personal information from anyone under 16 years old. If we learn we have inadvertently collected such information, we will delete it promptly.

14. Health and wellness disclaimer

Miracley is a self-reflection and motivational wellness tool. Any personalization based on goals or context you provide is used solely to generate supportive, AI-composed language, and is not medical, psychological, or diagnostic in nature. See our Terms of Use for further detail.

15. International data transfers

Our infrastructure and processors may store or process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) to protect data transferred internationally.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be reflected by an updated "Last updated" date above and, where appropriate, communicated within the app.

17. Contact us

Questions about this policy or requests regarding your data can be sent to contact@miracley.app.