Mia — Privacy Policy
Mia helps pregnant women, breastfeeding mothers and parents check food products and get nutrition guidance using AI. This policy explains what data the app processes, why, who receives it and what rights you have. Contact: taramus23@gmail.com.
1. Data we process
| Data | Where it comes from | Why |
|---|---|---|
| Account: Firebase user id, email, name and photo from Google / Apple sign-in | Sign-in | Your account, support replies |
| Profile: name you choose, family status, pregnancy week, age, weight, height, children, allergens, health conditions and notes, medications you enter | You | Personalising product analysis and answers |
| Product and dish photos | Camera or gallery, when you scan | Sent to the AI for analysis; not stored on our servers |
| Scan results and history | Generated by the app | Showing your history |
| Chat messages with Mia AI (and attached photos) | You (Ultimate plan) | Answering your questions; keeping chat history |
| Medical documents and lab results | You upload them (Ultimate plan) | The original file stays on your device. The recognised text, a short conclusion and lab values are stored in your account and used as context for scans and chat |
| Subscription data: store, product, status, period, purchase token / transaction id | Google Play / App Store | Granting and checking your plan |
| Support requests and AI-answer reports | You | Answering you, improving answers |
| Crash reports and diagnostics (device model, OS, app version, stack trace) | Firebase Crashlytics | Fixing crashes; not linked to your identity |
Health data (pregnancy, conditions, allergens, medical documents) is special-category data. We process it only with your explicit consent. You give it when you sign in: the sign-in screen states that by continuing you agree to these documents and to AI processing of your health data, product photos, chats and medical documents, with a link to the full explanation. We record the date and the version of this policy you agreed to. You can withdraw consent at any time in Profile → Privacy & security → AI data processing; AI features then stop until you agree again. Withdrawal does not affect processing done before it.
2. AI processing
When you scan, open a detailed analysis, compare products, chat or upload a document, our server sends the photo or text together with the relevant parts of your profile to Google Gemini models through the OpenRouter AI gateway. They process it only to generate Mia's answer. Mia's answers are AI-generated, can be wrong and are not medical advice.
3. Who receives data (processors)
- Supabase — database and server functions, hosted in the EU (Ireland).
- Google Firebase — sign-in and crash reporting.
- OpenRouter and Google (Gemini) — AI processing, as described above.
- Google Play and Apple App Store — payments. We never see your card details.
- Telegram — our team gets a notification that a support request arrived; the message text and your email are not included.
We do not sell personal data and do not use it for advertising. Some processors are outside the EU/EEA; transfers rely on the processors' Standard Contractual Clauses or equivalent safeguards.
4. Retention
- Account, profile, history, chat, documents and lab results: until you delete them or your account.
- Deleting your account removes this data from our database immediately. Backups roll over within 30 days.
- To prevent repeated sign-ups for free scans, we keep the identifiers of a deleted account (sign-in provider ids) for 12 months, then delete them.
- Security logs: 90 days. Payment records are kept by Google Play / Apple under their own policies.
- Consent records (date, policy version, granted/withdrawn): while your account exists, to be able to show that consent was given; deleted with the account.
5. Your rights
You can access, correct, export or delete your data, restrict or object to processing, and withdraw consent at any time. Most of this is available in the app (Profile). For anything else, email taramus23@gmail.com; we reply within 30 days. You may also complain to your data protection authority.
6. Deleting your account
In the app: Profile → Delete account (at the bottom of the screen). This erases your profile, scan history, chat, documents, lab results, subscription records and support requests. Without the app: see Delete your Mia account.
7. Children
Mia is for adults. Parents may enter information about their children (age, allergies) to personalise analysis; children do not use the app themselves.
8. Security
Data is encrypted in transit; access is limited to your account by row-level security; medical screens block screenshots; local health data is wiped on sign-out.
9. Changes
We will update this page and the effective date when the policy changes, and ask for consent again if the change affects AI processing.