Mira Privacy Policy - Alpyne 365, LLC

Effective Date: 12AUG2025
Last Updated: 20OCT2025

Who we are

Mira is a property of Alpyne 365, LLC, based in Enola, PA. Phone: (717) 803-8049 · Email: mira@alpyne365.com.

What this policy covers

This policy explains what we collect, why we collect it, how we use it, how long we keep it, and the choices you have. It applies to the Mira mobile apps and the Mira API.

Data we collect

Account and contact data: name and email when you sign up. You may optionally provide a phone number or mailing address if you contact us for support, but these are not required for normal use of the app.
User content: barcodes you scan, product photos, text you enter (e.g., notes, lists, comments), and selections you make within the app.
Location data:

• Approximate location (city or ZIP) may be used to tailor product availability or display nearby retailers.

• Precise location only if you grant permission; you can change this any time in device settings.
Device data and identifiers: app version, device model, OS, IP address, mobile advertising identifiers (IDFA/AAID), and crash/performance data.
Usage data: screens viewed, items scanned, ad impressions (free tiers), and feature interactions like checklists or recommendations saved.
Commerce data: in-app purchase history, subscription status, and receipts from Apple/Google. We do not store full payment card numbers.
Sponsored/affiliate interactions: taps on Amazon affiliate links, recommended products, or sponsored placements.

How we use data

Core functionality: analyze product ingredients and metadata to generate safety ratings, explain ingredient risks, and suggest safer alternatives.
Model processing: free tiers use GPT-4o mini; paid tiers use GPT-5. Your scans and text inputs are sent to our AI provider solely to fulfill your request. Where controls exist, we instruct them not to use your data for model training. See the OpenAI Privacy Policy.
Product data sources: product information may be verified via the Open Food Facts, INCI, or other public ingredient databases.
Affiliate commerce: we include Amazon affiliate links to recommended products. As an Amazon Associate we earn from qualifying purchases.
Advertising (free tiers): to deliver and measure ads through Google AdMob and prevent fraud/abuse. Paid tiers remove ads.
Customer support and safety: troubleshoot issues, detect abuse, and enforce terms.
Analytics & diagnostics: understand how Mira is used to improve performance, stability, and user experience.
Legal: comply with applicable laws and lawful requests.

Ads and tracking

What shows and when

Free tiers display ads: banner and interstitial ads. Paid tiers remove ads entirely.
Development builds: during testing we may use Google test ad units or simulated placeholders in preview mode. These do not connect to ad networks.

Ad provider and signals

Google AdMob (Google LLC) delivers and measures ads and prevents fraud. AdMob may receive your advertising ID, IP address, coarse location, and app usage data. We do not share your scanned data or photos with advertisers.
Personalization: By default, ads are non-personalized. Where personalized ads are offered (EEA/UK), we will first request consent. You can withdraw or deny consent any time.
Regional & platform controls:

• EEA/UK: personalized ads require consent; withdraw anytime in-app or via device settings.

• California (CPRA): identifiers may be “shared” with ad partners for cross-context advertising. Opt out by emailing mira@alpyne365.com with subject “Do Not Sell or Share,” or use any in-app toggle if provided.

• Platform tracking: if tracking is disabled, we serve non-personalized ads only.
Your controls: reset or limit ad tracking in device settings, or contact us for help.

Third-party services we use

We share data with vendors that help us operate Mira. These vendors act as processors/service providers or as independent controllers for their own purposes.

AI processing: OpenAI — used for text and ingredient analysis. We instruct that your data not be used for model training. See the OpenAI Privacy Policy.
Product & barcode lookup: Open Food Facts, Amazon Product Advertising API, and other public databases when needed to resolve barcode data.
Payments: Apple App Store and Google Play handle billing; we receive only receipts and subscription status.
Analytics & crash reports: platform analytics to improve performance and reliability.
Advertising: Google AdMob for ad delivery and measurement.

Reference links:

Google Privacy Policy: https://policies.google.com/privacy
Google Ads/AdMob info: https://policies.google.com/technologies/ads
Amazon Privacy Notice: https://www.amazon.com/privacy

Lawful bases (EEA/UK)

Contract: to provide the features you request (scanning, product analysis, account features).
Legitimate interests: diagnostics, security, non-personalized ads, and product improvement (balanced against your rights).
Consent: for personalized ads, precise location, or certain analytics; you can withdraw any time.
Legal obligation: to comply with law or lawful requests.

Data retention

Scans and photos: retained up to 30 days for quality and abuse prevention, then deleted. You can delete sooner in-app.
Product analysis results: stored as text for your history; delete anytime in-app.
Ad event logs: up to 12 months under our control; ad partners may retain longer under their policies.
Logs & analytics: typically up to 12 months.
Legal holds: retained as required by law.

Children

Mira is designed for parents and caregivers, not children under 13. If you are between 13 and 18, use Mira only with parental consent. We do not knowingly collect or show personalized ads to minors. Contact us if you believe a child’s data was submitted.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data; to object or restrict processing; and to withdraw consent. Under California law, you may opt out of “sale” or “sharing” for targeted advertising. We do not sell personal information. To exercise rights, email mira@alpyne365.com. We may need to verify your identity.

International transfers

We operate in the United States. Your data may be processed in the U.S. or other countries with different data protection laws. Where required, we rely on approved transfer mechanisms.

Security

We use encryption in transit and at rest, access controls, and routine monitoring. While no system is perfectly secure, we take reasonable steps to protect your information and limit employee access. We will notify you of any breach consistent with applicable law.

Data sharing

We share data with vendors listed above and authorities when required by law. We may share aggregated or de-identified data that does not identify you. We do not share your scans or photos with advertisers.

Amazon affiliate disclosure

As an Amazon Associate we earn from qualifying purchases. Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.

Your choices

Limit location permissions in device settings. Mira still functions, but location-based sorting may be less accurate.
Reset or limit your advertising ID in device settings.
Delete your scan history in the app.
Contact us to delete your account and associated data.

Data processing details for app store disclosures

Data collected: identifiers, diagnostics, usage data, location (if permitted), user content, and contact info if provided.
Data linked to you: account/contact info and identifiers needed to operate your account and deliver ads.
Data used to track you: advertising identifiers and device signals, where allowed by platform policy.
Purposes: app functionality, analytics, advertising, fraud prevention, account management.

California Privacy Notice (CPRA)

Notice at Collection: We collect identifiers (up to 12 months), usage data (up to 12 months), approximate/precise location (if permitted, up to 30 days for scans), user content (photos/text up to 30 days, analysis longer), commercial data (subscription receipts while active). No profiling beyond in-app ads.

Sale/Sharing: We do not sell data. We may “share” identifiers for advertising measurement. Opt out via mira@alpyne365.com or any in-app toggle.

Right to Know/Delete/Correct/Limit: Email mira@alpyne365.com; we will verify requests per law.

Changes to this policy

We may update this policy as laws or features change. Updates will be posted here and dated above; major changes will also appear in-app.

Contact

By email: mira@alpyne365.com
By visiting: https://www.alpyne365.com/contact/

This policy is for general information and is not legal advice.

Mobile App End User License (Standard EULA)

Last Updated: 20OCT2025

This End User License Agreement (“EULA”) is a legal agreement between you and Alpyne 365, LLC (“Alpyne 365,” “we,” “us,” or “our”) governing your use of the Mira mobile application and any related content, materials, or services provided through it (collectively, the “Licensed Application”). The Licensed Application is licensed, not sold, and we reserve all rights not expressly granted to you.

a. Scope of License (General): We grant you a personal, limited, nontransferable, non-sublicensable license to install and use the Licensed Application on mobile devices you own or control, as permitted by platform rules. This license covers Mira and its updates, except where other terms apply.

b. Consent to Use of Technical Data: You agree we may collect and use technical data—such as device and software details—for updates, analytics, and support, in a non-identifying form to improve our products.

c. Termination: This EULA is effective until terminated by you or us. Your rights terminate automatically if you violate these terms. Upon termination, you must delete the Licensed Application.

d. External Services: Mira may link to or embed third-party content (e.g., YouTube videos, Amazon links). Use of those services is at your own risk. We are not responsible for their accuracy or availability. External Services may not be available everywhere.

e. No Warranty: TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE LICENSED APPLICATION AND ANY SERVICES PROVIDED THROUGH IT ARE PROVIDED “AS IS” AND “AS AVAILABLE.” WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. SOME JURISDICTIONS DO NOT ALLOW CERTAIN DISCLAIMERS.

f. Limitation of Liability: TO THE EXTENT NOT PROHIBITED BY LAW, WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING LOSS OF DATA OR PROFITS) ARISING FROM USE OR INABILITY TO USE THE APP. TOTAL LIABILITY SHALL NOT EXCEED FIFTY DOLLARS (US $50.00).

g. Export: You may not export Mira except as authorized by U.S. law. By using Mira, you confirm you are not in a prohibited country or on restricted lists.

h. U.S. Government End Users: The app and documentation are “Commercial Items.” Use by U.S. Government end users is permitted only with the rights granted herein.

i. Governing Law & Venue: Governed by the laws of the Commonwealth of Pennsylvania, without regard to conflicts. You agree to the exclusive jurisdiction of courts in or serving Cumberland County, PA.

j. Developer Name and Address: Alpyne 365, LLC, Enola, PA • Phone: (717) 803-8049 • Email: mira@alpyne365.com.

k. Third-Party Terms: You must comply with applicable third-party terms (e.g., data carrier, video, or map service agreements).

Additional Terms for iOS Users

The following apply if you obtained Mira through the iOS App Store.

1) Acknowledgement: You and we acknowledge that this EULA is between you and Alpyne 365 only, not Apple, and that Alpyne