Privacy policy

The short version

• We don't sell your data, and we don't show ads.
• We don't use your calls, recordings, transcripts or messages to train AI models.
• Your data is stored by US companies we work with (listed below), so it leaves Quebec and Canada.
• Phone calls and text messages travel over regular phone networks, which are not end-to-end encrypted.
• Emotion readings are estimates made by software. They are not a diagnosis and not medical advice.
• You can delete your account and data at any time on the delete your data page, and download a copy of it first from Settings, Privacy.

Who we are

Mirrah is run by [Legal business name], a small business based in Montreal, Quebec, Canada. Mailing address: [Mailing address], Montreal, Quebec, Canada. Email: help@callmirrah.com.

Mirrah is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, email us and we will delete it.

What we collect

Account details

Your email address, a password (stored only as a secure hash by our sign-in provider), the display name you choose, your phone number, who invited you (if anyone), your plan, your in-app credit balance, and your settings such as text-message updates and mood sharing. For security we also keep your two-step login and sign-in alert settings, when you last got a sign-in alert, and, for each signed-in session, when it signed in or last confirmed it was you; the sign-in notice in your notifications names the device type and browser (like “iPhone Safari”), never an IP address or location.

Your phone number

We use your phone number to recognise you when you call or text, to send the texts you asked for, and to let friends find you if you share your number with them. We also keep a short log of when each number calls or texts us, so we can stop abuse and control costs.

Recordings and audio

When you record in the browser, the audio file is uploaded to our storage. When you call the number, our phone provider records the call, and we save a copy of the audio in our storage. Voice messages you send to friends are stored the same way.

Transcripts

The text version of each recording, made by a speech-to-text service.

Emotion estimates

For each recording, software reads the transcript and estimates how much it expresses seven broad categories (anger, disgust, fear, joy, neutral, sadness, surprise), plus the strongest one. These are estimates of the tone of the words, not a measure of how you actually feel, and they can be wrong. They are not a diagnosis of any condition. We treat them as sensitive information.

Tasks and reminders

Things you mention that sound like a to-do (“remind me to call the dentist”), any tasks you add yourself, and reminders you ask for, including their dates and times.

Optional intake answers

If you choose to answer questions about yourself (for example your routines, goals or the people in your life) so Mirrah can be more useful, we store your answers. You can skip these.

Coarse location

When a recording is processed, our hosting provider tells us the country, region and city your internet connection appears to come from, based on your IP address. We may also use your phone number's area code to guess a city. We never collect precise location (no GPS). You can set your own city in settings, which replaces the guessed one on the community map. City-level location is used for your own stats and for community totals that never show individuals.

Text messages and call logs

For calls we keep the calling number, the call's ID from our phone provider, its length and the time. If you use talk mode on a call (press 2), we keep that back-and-forth as the call's transcript. With talk mode on, Mirrah also keeps a short note of what you talked about (up to 800 characters) so it can pick up where you left off next time, by call or text. You can clear it in Settings, and it goes when talk mode is off or your account is deleted. If you call from a number we don't know, we ask your first name and create an account for that number so your call is saved; you can sign in later with a code we text to that number, or delete the account at any time.

When you text Mirrah, your message and a few details about you (first name, up to 3 open tasks, your latest mood label, your local time) are sent to our AI provider (Anthropic when it is on, with Groq as the backup) to write the reply. We keep the last 10 texts of the conversation, for at most 30 days, so replies can follow along. Texts that mention self-harm are not kept. We also keep changes you make by text, such as NO RECAP or STOP. Sign-in codes are stored only as a one-way hash and deleted once used or expired; to limit abuse, we keep a hashed form of the phone number and IP address for each code request for 24 hours. If you text from a number with no account, you get a few free replies: we keep a one-way hash of the number (so each number gets one trial), how many replies it used and when, and the trial's last few texts, which are deleted when the trial ends (within about a day). The content of texts also passes through our phone provider, which keeps its own logs (see “How long we keep it”).

Friends

Friend requests, who you are friends with, messages and reactions you exchange, and, if mood sharing is on, your mood (never your transcripts) is visible to your accepted friends. For accounts created from October 21, 2026, mood sharing is off until you turn it on. You can change it on the Friends page.

Calls with other members (optional)

If you turn on “Talk to someone”, we keep your choices (on or off, whether we may ring you, your quiet hours and time zone), when you confirmed you are 18 or older, and for each call: who was connected with whom, when, for how long and how it ended. We also keep reports and the resulting blocks between two members. These calls are never recorded or transcribed, and the other member never gets your number or name. All of this is deleted with your account.

Google Calendar (optional)

If you connect Google Calendar, we store the access tokens Google gives us and your Google email address, and we create events only for tasks you choose to add. We ask only for permission to manage calendar events.

Technical information

Error reports when something breaks (the error message, the page address and your account ID), feedback you send us, and IP addresses used briefly to limit abuse of guest trials and the call greeting audio. If you start a guest trial, we keep the phone number and date so a number can't start unlimited trials.

Why we use it

• To run the service: record, transcribe, estimate tone, find tasks, send reminders and the texts you ask for.
• To show you your history, streaks and trends.
• To let you share mood and messages with friends you choose.
• To keep the service secure, prevent abuse and control costs (rate limits, guest trial limits).
• To fix bugs and answer your questions.
• To meet legal obligations.

We do not use your information for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.

Consent and legal basis

We rely on your consent. You give it when you create an account, when you call or record, and when you turn on an optional feature (text updates, mood sharing, Google Calendar, intake questions). We only use your information for the purposes on this page. If we want to use it for something new, we will ask first.

Emotion estimates, and anything you say about your health or feelings, are sensitive. We only create emotion estimates from recordings you choose to make, we never share them with anyone except friends you turn mood sharing on for, and no decision about your account is made from them.

You can withdraw consent at any time: turn off a feature, delete individual recordings, reply STOP to texts, or delete your account. Some features can't work without certain information (for example, calls can't be transcribed without the audio).

Who processes your data

We use the following companies to run Mirrah. They process data on our behalf under their own terms and data protection commitments. All of them are outside Quebec and outside Canada, mostly in the United States, so your information is subject to the laws of those places, including lawful access by authorities there.

Before we add a new company that receives your recordings or messages (for example a different speech or AI provider), we will update this page first.

AI and model training

We do not use your calls, recordings, transcripts or messages to train AI models. Here is what that rests on for the providers we use today:

• Hugging Face states that its Inference Providers service does not store request data for training. We use its hf-inference provider.
• Twilio only uses data to train its own AI if a customer opts in to its AI data logging. We have not opted in.
• Groq states that it does not retain inference data by default.
• Anthropic, when it is on, does not train its models on API data by default.
• OpenAI, if we switch transcription to it, does not train on API data by default.

These commitments are the providers', not ours, and they can change. We check them before switching providers and will update this page if anything changes.

Security and what is not encrypted

Data moving between your browser, our servers and our providers is encrypted in transit (HTTPS/TLS). Our database and file storage are encrypted at rest by our database provider, and our phone provider encrypts call recordings at rest.

Mirrah is not end-to-end encrypted. Our servers need to read your audio and text to transcribe it and respond. Regular phone calls and text messages also travel over carrier networks that are not end-to-end encrypted. Don't share anything on a call or text that you wouldn't want to travel that way, such as passwords or banking details.

Access to the database is limited to the founder, who runs the service. We only look at your content when you ask for help, to fix a problem affecting your account, or when the law requires it. If a security incident puts your information at risk of serious harm, we will tell you and the Commission d'accès à l'information du Québec, as Quebec law requires, and we keep a register of incidents.

How long we keep it

• Account data, recordings, transcripts, emotion estimates, tasks and reminders: until you delete them or delete your account.
• Guest trial accounts: deleted after the trial ends. Today this happens the next time the trial account is opened, so if you want it gone sooner, use the delete your data page or email us.
• Copies held by our phone provider (call recordings, call and message logs): when you delete your account we ask our phone provider to delete call recordings and call logs linked to your number, and we finish any remaining clean-up within 30 days.
• Backups and provider logs: removed on their normal schedule, within 30 days after deletion from our live systems.
• Guest trial limits (the phone number and trial date) and rate-limit logs: kept only as long as needed to prevent abuse. Email us if you want these removed.
• Anything we must keep by law (for example billing records once paid plans exist): as long as the law requires.

Your rights

You can ask us to:

• Access the personal information we hold about you and learn how it is used and who it has been shared with.
• Correct information that is wrong or incomplete. You can change most of it yourself in settings.
• Delete your information. You can do this yourself on the delete your data page.
• Get a copy of the information you gave us in a structured, commonly used format (portability). You can do this yourself: sign in, open Settings, Privacy and choose Download your data. You get one JSON file with your profile, recordings and transcripts, tone estimates, tasks, notes, reminders, life map, texts, notifications, friends and messages, call log and settings. Audio files come as private links that work for 7 days. You can download up to 3 times a day.
• Withdraw consent to any use of your information, as described above.
• Stop texts by replying STOP at any time.

Email help@callmirrah.com from the address on your account. We may need to confirm it's you. We answer within 30 days, and we don't charge for reasonable requests.

Person in charge of privacy

Under Quebec's Act respecting the protection of personal information in the private sector (as updated by Law 25), the person in charge of the protection of personal information at [Legal business name] is [Privacy officer name]. Contact: help@callmirrah.com, [Mailing address], Montreal, Quebec, Canada.

How to complain

Please contact us first so we can try to fix it. If you're not satisfied, you can complain to:

• The Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca
• The Office of the Privacy Commissioner of Canada (OPC): priv.gc.ca

Cookies

We only use cookies and browser storage that the site needs to work, such as keeping you signed in. No analytics or advertising trackers. Details are on the cookies page.

If you are in crisis

Mirrah and Mirrah are not an emergency service and not a substitute for professional care. If you or someone else is in danger, call 911. If you are thinking about suicide or need to talk to someone now, call or text 988 (Canada and the US). In Quebec you can also call 811 and choose Info-Social.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell you by email or in the app before the change takes effect.