Mireal Privacy Policy

1. Who we are

Data controller: Digivation OÜ

Address: Sakala tn 7-2, 10141 Tallinn, Estonia

Business ID: 16309627

Privacy contact: info@mireal.app

2. About Mireal

Mireal is a proximity-based social app. You choose when to become Visible nearby, discover Hotspots, and form Echoes when paths cross with other visible users. Visibility is optional and session-based.

We do not show your live GPS location to other users on a map or as a location pin. Maps in the app show Hotspots, not the real-time positions of people.

3. Data we collect

We collect:

• Account data — email address and credentials managed through our authentication provider; we may send one-time verification or password-reset emails.
• Profile data — display name, date of birth (for age), gender, interests, discovery preferences, optional profile photo, and your visual “constellation” identity.
• When you are Visible — device location and Bluetooth-related signals used on your device and on our servers for proximity matching, Hotspot features, and session timing; profile summary information shown to other visible users nearby (not your coordinates on a map).
• Echoes and interactions — records when you and another user meet proximity rules while visible, including related interaction metadata.
• Hotspots — details of hotspots you create or join, check-ins, and membership where applicable.
• Notifications — push notification tokens and your in-app notification preferences.
• Optional city interest — if offered, email and city/place information when you ask us to bring Mireal to your area.
• Technical data — such as IP address and device type when the app loads maps, fonts, or place search from third-party services.

We do not sell your personal data or use the app for third-party advertising profiles.

4. How we use data

We use data to:

• Provide accounts, profiles, visibility, Hotspots, Echoes, and notifications
• Operate proximity features while you choose to be visible
• Keep the service secure and prevent abuse
• Comply with law

Other visible users see what the product is designed to show (for example profile summary, constellation, and connection preferences) — not your email, password, or live map location.

5. Legal bases (EEA / UK)

Where GDPR or UK GDPR applies, we rely on contract (running the service you sign up for), consent (where required for permissions such as location, Bluetooth, notifications, or photos), legitimate interests (security and fraud prevention, balanced against your rights), and legal obligation where applicable. You can change many permissions in your device settings; some features need them to work.

6. Service providers

We use trusted providers to host and operate the app, including Google (Firebase) for authentication, cloud database, storage, messaging, and backend functions. We use an email delivery provider for transactional messages. Map and place search providers may receive technical request data when you use those features. Their privacy policies apply to their processing:

• Google Privacy Policy
• Firebase Privacy

We may disclose information if required by law or to protect rights, safety, and security.

7. International transfers

Some providers may process data outside your country (including the United States). Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

8. How long we keep data

• Account and profile — while your account exists, unless you delete it.
• Active visibility — for the duration of your visibility session, then removed.
• Verification codes — only for a short time to complete sign-up.
• Device notification tokens — until you remove them, uninstall the app, or they become inactive.
• Echoes and Hotspots — for as long as needed for the feature, then deleted or archived on a schedule.
• Local data on your device — until you clear it or uninstall the app.

Backup copies held by providers may persist for a limited time under their policies.

9. Your rights and choices

In the app you control visibility, many profile settings, and notifications. Under applicable law (including in the EEA/UK), you may have the right to access, correct, delete, restrict, or object to processing, and to data portability where relevant.

Contact info@mireal.app to exercise your rights. We may need to verify your identity.

10. Deleting your account

You can delete your account in the app: Profile → Settings → Delete account. You will confirm with your password. This permanently deletes your sign-in account and personal data we hold, including your profile, photo, visibility data, Echoes you participated in (shared Echoes are removed for both people), and Hotspots you host, subject to legal retention requirements.

If you cannot use the app, email info@mireal.app from your registered address.

11. Security

We use industry-standard measures such as encrypted connections and access controls. No system is completely secure.

12. Children

Mireal is for adults 18 and over. We do not knowingly collect data from anyone under 18. Contact us at info@mireal.app if you believe a child has provided personal data.

13. Changes

We may update this policy. We will post the new version at this page and change the effective date. Material changes may be communicated in the app where appropriate.

14. Contact

Digivation OÜ

info@mireal.app

Sakala tn 7-2, 10141 Tallinn, Estonia