Privacy Policy

1. Scope of This Policy

This policy covers the website at mirabilis.one and every application published by Mirabilis Limited on the Apple App Store, Google Play, or the web. Where an individual application handles data differently from what is described here, that application will provide its own supplementary privacy notice, and that notice will take precedence for that app.

We design our products to collect as little personal information as possible. Several of our applications operate entirely on your device and do not transmit personal data to us at all.

2. Information We Collect

We only collect information that is necessary to operate and improve our products. The categories below describe what we may collect; not every category applies to every application.

We do not collect precise location data, contacts, photos, health data, or biometric data unless an application feature you actively use requires it. In that case, your operating system will ask for your permission first, and you can withdraw that permission at any time in your device settings.

We do not sell personal information, and we do not use personal information for third-party advertising or cross-app tracking.

3. How We Use Information

We use the information we collect for the following purposes only:

• Service delivery — to operate, maintain, and provide the features of our applications and website.
• Support — to respond to your enquiries, investigate issues, and communicate about them.
• Reliability and performance — to diagnose crashes, fix defects, and understand which features are used so we can improve them.
• Security and abuse prevention — to protect our products and users from fraud, abuse, and unauthorised access.
• Legal compliance — to meet obligations under applicable law.

We do not use your personal information to build advertising profiles or to make automated decisions that have a legal effect on you.

4. Legal Bases for Processing

Where the EU or UK General Data Protection Regulation applies to you, we process personal information on the following bases: performance of a contract, where processing is needed to provide an app or service you have requested; our legitimate interests in keeping our products secure, reliable, and improving; your consent, where we ask for it, such as for optional device permissions; and compliance with legal obligations.

Where we rely on consent, you may withdraw it at any time without affecting processing that already took place.

5. Sharing and Disclosure

We do not sell or rent personal information. We share it only in these limited circumstances:

• Service providers — infrastructure, hosting, crash reporting, and email providers that process data on our behalf under contract, and only as needed to deliver their service to us.
• App stores and platforms — Apple and Google process purchases, subscriptions, and app distribution under their own privacy policies. We do not receive your full payment details.
• Legal requirements — where we are required to disclose information by law, regulation, or valid legal process, or to protect the rights, safety, and property of our users or of Mirabilis.
• Business transfers — if Mirabilis is involved in a merger, acquisition, or sale of assets, personal information may be transferred, subject to this policy continuing to apply.

6. Data Retention and Deletion

We retain personal information only for as long as it is needed for the purposes described in this policy, or for as long as the law requires. In practice this means support correspondence is kept for up to 24 months, diagnostic and crash data for up to 12 months, and account data for as long as your account remains active.

You can ask us to delete your account and associated personal information at any time by emailing support@mirabilis.one. We will action verified deletion requests within 30 days, except where we must retain certain records to comply with a legal obligation. Content stored only on your device is removed when you delete the application.

7. Data Security

We use appropriate technical and organisational measures to protect personal information, including encryption in transit, encryption at rest where data is stored on our infrastructure, access controls limited to those who need the data, and regular review of the third-party services we rely on.

No method of transmission or storage is completely secure. If we become aware of a personal data breach that presents a risk to you, we will notify you and the relevant authorities as required by applicable law.

8. Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to restrict or object to our processing, to receive a copy in a portable format, and to withdraw consent you have previously given.

To exercise any of these rights, email us using the address below. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law. You also have the right to complain to your local data protection authority.

9. Children’s Privacy

Our applications are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Where an app is rated for a younger audience, it is designed to operate without collecting personal information. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

10. International Transfers

The service providers we use may process data in countries other than your own, including within the European Union and the United States. Where personal information is transferred out of your region, we rely on appropriate safeguards such as standard contractual clauses, and we require our providers to protect the data to a standard consistent with this policy.

11. Changes to This Policy

We may update this policy to reflect changes in our products, our service providers, or the law. When we do, we will revise the effective date at the top of this page. If a change materially affects how we handle your personal information, we will provide a more prominent notice, such as an in-app message.

12. Contact Us

If you have questions about this policy, wish to exercise your data rights, or want to raise a concern about how your information is handled, contact us and we will reply within five business days.