Miravow Privacy Policy

1. Overview

This Privacy Policy explains how Miravow collects, stores, and processes your information when you use our website and services.

2. Information We Collect and Store

• Reading and Generation Data: When you use Miravow, we receive your user input, character background, and drawn cards. We store this information—along with the generated reading content, generation requests and responses, and timestamps—in our Cloudflare D1 database.

• Account and Authentication Data:

• Google Sign-In: When you sign in with Google, we request only the openid scope and store a hashed version of your subject identifier. We use this hashed identifier to log you into your account and link your reading history and token wallet.

• Email and Password Sign-In: Email and password authentication is managed by Firebase. Miravow does not store your password.

• Payment and Billing Data: Payments are processed by PayPal. We record and store your order amount, currency, payment status, and necessary transaction identifiers. We do not store your payment card or bank card details.

• Rate-Limiting Data: To manage service usage and enforce rate limits, we store the date alongside a hashed version of your IP address.

• Cookies and Browser Local Storage: We use strictly necessary cookies to maintain your login session. In addition, we store drafts, user preferences, and generated audio cache locally in your device's browser.

3. How Your Data Is Processed and Shared

We rely on the following services to operate Miravow:

• Database Storage (Cloudflare D1): Stores your reading inputs, character backgrounds, drawn cards, generated content, generation requests and responses, timestamps, account identifiers, and order records.

• Authentication (Google and Firebase): Google provides openid authentication, and Firebase manages email and password sign-in credentials.

• Text Generation (DeepSeek): Receives the necessary input data required to generate your reading text and channeling responses.

• Voice Generation (Doubao): When you trigger the voice reading feature, Doubao receives the text to be read aloud. The generated audio is cached locally in your current device's browser:

• Clearing your browser data on that device will make the local audio cache unavailable on that device.

• Switching to another device does not delete the audio cache stored on your previous device, but your new device cannot access the previous device's local cache.

• If cached audio is unavailable on your current device, you can regenerate the audio. Regenerating audio requires an active internet connection and is subject to service availability and applicable usage quotas at that time.

• Payment Processing (PayPal): Processes your payment transactions and provides payment status and transaction identifiers.

• Cloudflare Web Analytics: Pages on Miravow's official domain automatically load a Cloudflare beacon. According to Cloudflare's documentation, this service collects page load performance timing metrics.

4. Cross-Border Data Processing

Cloudflare and our AI model providers process data across different regions. As a result, your user inputs and related service data may be processed outside your country or region of residence. Specifically, the service providers for DeepSeek and Doubao are located in China.

5. Data Deletion and Account Requests

• Deleting Individual Readings: You can delete individual readings and their associated generation data directly within the application.

• Billing Records: Billing and transaction records may need to be retained for accounting and reconciliation purposes, even after individual readings are deleted.

• Account Deletion Requests: Self-service full account deletion is not currently available within the application. To request account deletion, please contact us by email at [email protected].

6. Contact Us

If you have questions or requests regarding your privacy or data, please contact us at: [email protected]