Mirago – Privacy Policy

Last Updated: Jan. 29, 2026

1. Introduction

Mirago (referred to as “we”, “us”, or “our”) is committed to protecting the personal information you share with us. This Privacy Policy applies solely to our mobile application (the “App” or “Services”). By using the App or providing information to us, you consent to our collection, storage, use, and disclosure of information as described in this Policy.

Contact Us: If you have any questions about this Policy, please contact us at: luckymirago@gmail.com.

2. Information We Collect

We collect information that you actively provide to us and information that is automatically collected when you use the App.

2.1 Categories and Data Types

Category	Data Types
Information You Provide (Required)	Identifiers: name, email address, password (stored in hashed form). Astrological Data: date of birth, time of birth, place of birth (used to generate your natal chart and related astrological interpretations). Social / Third‑party Login Data: identity information obtained if you log in via a third party (for example, Google).
Information Collected Automatically	Device Information: IP address, operating system, device model, screen size, system language, and basic device configuration. Usage Information: in‑App interactions, feature usage, and basic error / crash context (for example, which screen or feature triggered an error).
Higher‑Risk Data We Protect Carefully	While astrological data is generally not legally classified as “sensitive”, we treat birth information (date + time + place) and precise coordinates as higher‑risk data and apply additional safeguards.

2.2 Device Permissions

We only ask for permissions that are reasonably necessary to provide the core functions of the App. The main permission types are:

Permission Type	Purpose	Necessity
Storage / Photos	Save generated natal chart images/posters and user preferences; allow you to export or share content.	Required for export/share features
Network	Connect to our servers and third‑party APIs (for example, account backend, Mapbox, weather API).	Required (core feature)
Notifications	Send alerts such as important account messages and optional horoscope updates.	Optional (can be disabled in settings)

We do not request access to your contacts, SMS, microphone, or other high‑risk permissions that are not related to the App’s functionality. You can disable optional permissions in your device settings at any time; disabling them may limit some enhanced features but will not block basic horoscope features.

2.3 Protection of Higher‑Risk Data

For higher‑risk personal information such as birth information (date, time, place) and more precise location (city and coordinates), we apply additional safeguards where technically and legally appropriate (some of which may be implemented on our backend servers):

Storage Protection: Personal data is stored on secure servers using industry‑standard security measures. We limit storage to what is necessary for the Services (see Section 3.2).
Access Control: We apply the “least privilege” principle so that only authorized personnel and systems can access the minimum data needed for operation and maintenance. Access is logged where feasible.
Transmission Security: Sensitive data is transmitted over encrypted channels (for example, HTTPS/TLS) to reduce the risk of interception or tampering.
Minimization and De‑identification: For statistics and internal testing, we prefer anonymized or aggregated data and avoid retaining unnecessary raw birth times or coordinates.

2.4 Cookies and Tracking Technologies

We do not use third‑party advertising SDKs or cross‑app tracking identifiers.

To maintain and improve the App, we may use:

First‑party storage or cookies (for example, in web/H5 views) solely to support functions such as remembering login state or language preferences. We do not use third‑party advertising cookies.
Basic technical logs on our own servers (for example, device type, OS version, request time, and endpoint) to ensure service stability and diagnose errors.
The third‑party APIs listed in Section 4.2 (for example, Google Sign‑In, Mapbox, Open‑Meteo), which may process your data to provide login, location search, or weather functions as described in their own privacy policies.

We do not currently respond to “Do Not Track” (DNT) signals. If we support DNT in the future, we will update this Policy and notify you in the App.

2.5 Location Data and Real‑time GPS

The App does not continuously track your real‑time GPS location in the background.

When you use features such as “birthplace” or “current residence” selection:

You manually type and select a city or place;
We use a third‑party geocoding provider (Mapbox) to return coordinates;
We store the selected city and the associated coordinates to generate charts and show weather for that location.

If we introduce any new feature that requires accessing the device’s GPS directly or tracking real‑time location, we will first show you a clear prompt and request your explicit consent, and we will limit precision and retention as required by applicable law.

2.6 Health and Biometric Data

Mirago does not collect, request, or infer any data about your physical health, physiology, genetics, biometrics, or medical status. This includes, for example, heart rate, sleep data, step count, medical records, disability information, and biometric identifiers such as fingerprints or facial templates.

3. How We Use Your Information

We use your personal information to provide, improve, and protect the App. For users in the EEA and UK, we also indicate the legal basis under GDPR/UK GDPR.

3.1 Purposes and Legal Bases

Purpose of Processing	Legal Basis (EEA/UK)
Providing core services such as generating natal charts, horoscopes, and compatibility views.	Performance of a contract
Account management and support (creating, maintaining, and securing your account; support).	Performance of a contract; legitimate interests (customer service)
Improving the App (usage analysis, debugging, feature optimization).	Legitimate interests (service and product improvement)
Optional marketing and communication (for example, newsletters, promotions, where offered).	Consent; legitimate interests (direct marketing, where permitted)

3.2 Data Retention

We retain your personal information only for as long as needed to fulfill the purposes described in this Policy:

While Your Account Is Active: We keep your account information (name, email), astrological data (birth information, chart‑related data), and usage information for as long as your account remains active or as required to provide the Services.
After Termination: If you delete your account or we stop providing the Services, we will delete or anonymize your personal information within a reasonable period (typically not longer than 15 working days, unless the law requires a longer period). Anonymized data is no longer considered personal information and may be used for statistics and service improvement.
Legal Exceptions: We may retain certain information for longer periods if required by law (for example, for tax, accounting, or dispute‑resolution purposes) and only for as long as those purposes require.

The legal bases for retention include performance of a contract with you, compliance with legal obligations, and our legitimate interests (for example, defending legal claims).

3.3 AI and Model Training

We do not use your birth data, in‑App chat logs, or user‑generated content to train or fine‑tune any AI models for third‑party purposes.

If we ever wish to use anonymized data for research or evaluation of algorithms, we will seek your separate, explicit opt‑in consent in advance and will explain the intended use.

4. Sharing and Disclosure of Your Information

4.1 General Sharing Rules

We do not sell your personal information. We do not share your core astrological data for personalized or targeted advertising.

We may share your information only in the following situations:

Service Providers: With third‑party service providers that help us operate and maintain the App, such as hosting providers, account/authentication providers, and the APIs listed in Section 4.2.
Legal Requirements: To comply with a legal obligation, court order, subpoena, or government request.
Business Transfers: In connection with a merger, acquisition, asset sale, reorganization, or bankruptcy, your information may be transferred as part of the transaction, subject to continued protection consistent with this Policy.

Each third‑party provider has its own privacy policy and is responsible for its own data practices. We recommend that you review those policies before using related features.

If you would like an updated list of key third‑party providers and their privacy policy links, you may email us at LuckyMirago@gmail.com and we will respond within a reasonable time.

4.2 Third‑Party SDKs and Services

To provide core features of the App (including login, location selection, and weather), we integrate the following third‑party services and software development kits (SDKs). Each provider may collect or process data as described in its own privacy policy.

Type of Service	Provider Name	Purpose in the App	Data That May Be Collected or Processed	Privacy Policy / More Information
Authentication / Login	Google LLC (Google Sign‑In)	“Sign in with Google” for account registration and login.	Google account identifier, email, name, profile photo, and authentication tokens. Processed by Google under its own policy.	https://policies.google.com/privacy
Authentication / Login	Account and authentication service provider	Registration, login, password verification, verification codes, and linking third‑party logins.	Email, hashed or encrypted credentials, device identifiers, and third‑party login tokens as needed to create and secure your account.	Processed on our behalf under our instructions; see this Privacy Policy.
Location / Place Search	Mapbox (Mapbox Geocoding API)	Birthplace and current residence search (for example, when you search for a city like “Paris”).	Search query text and related location/usage data as described in Mapbox’s policy.	https://www.mapbox.com/legal/privacy
Weather	Open‑Meteo (Open‑Meteo API)	Weather information (for example, temperature and conditions) for your selected location.	Latitude and longitude of the selected location to fetch weather data; Open‑Meteo does not require your name or account ID.	https://open-meteo.com/en/privacy (or the current link on open‑meteo.com)
Implementation of Google Sign‑In	Third‑party plugin (for example, JY‑GoogleSignin)	Technical bridge to connect the App to Google Sign‑In on supported devices.	Same categories as Google Sign‑In above; identity data is processed by Google in accordance with Google’s Privacy Policy.	Google Privacy Policy

Notes:

The SDKs above are used only for core functionality (authentication, location search, and weather) and not for advertising or cross‑app tracking.
We do not forward advertising identifiers for targeted advertising.
Each provider may act as an independent controller or processor for the data it handles; its own retention periods and processing rules apply.
If we add or remove third‑party SDKs in future versions, we will update this section and, where legally required, notify you in the App.

5. International Data Transfers

Your personal information may be processed and stored on servers located outside your country of residence, for example, in regions where our service providers operate.

When we transfer personal data across borders, we use appropriate technical and organizational safeguards and, where required by law (such as GDPR or UK GDPR), rely on lawful transfer mechanisms such as Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. Your Privacy Rights

Your rights will depend on the laws of your country or region. To exercise any of the rights described below, you can email us at LuckyMirago@gmail.com. We may need to verify your identity before processing your request.

6.1 Rights for EEA, UK, and Swiss Individuals

If you are located in the EEA, the UK, or Switzerland, you may have the following rights under applicable data protection law:

Right of access: to obtain a copy of the personal data we hold about you.
Right to rectification: to correct inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”): to request deletion of personal data in certain circumstances.
Right to restriction of processing: to request that we limit processing of your data in certain cases.
Right to data portability: to receive a copy of your data in a structured, commonly used, machine‑readable format and have it transmitted to another controller where technically feasible.
Right to object: to object to processing based on our legitimate interests, including profiling.
Right to lodge a complaint: to contact your local data protection authority if you believe we have violated applicable data protection law.

6.2 Account Deletion and Data Handling

You can request deletion of your account and associated personal data either:

Through in‑App account settings (for example, in an “Account Security” or “Delete Account” section); or
By sending an email to LuckyMirago@gmail.com.

After verifying your identity, we will:

Delete or anonymize personal data associated with your account (such as name, email, birth information, and chart‑related records) within a reasonable time (typically within 15 working days), unless a longer period is required by law;
Where legally required and technically feasible, notify relevant third‑party providers listed in Section 4.2 to stop using and delete your information or to anonymize it;
Inform you that account deletion is irreversible and that you will need to create a new account to use the App again.

6.3 Rights for Certain U.S. Residents (CCPA/CPRA)

If you are a resident of California or certain other U.S. states, you may have additional rights, including:

Right to know: to request information about the categories, sources, purposes, and sharing of personal information we have collected about you.
Right to delete: to request deletion of your personal information in certain circumstances.
Right to opt out of sale or sharing: while we do not sell your personal information, you may generally direct businesses not to sell or share your information.
Right to non‑discrimination: you will not be discriminated against for exercising your privacy rights.

6.4 Automated Decision‑Making and Transparency

Our chart engine uses astronomical data and rule‑based astrological logic (for example, ephemerides and traditional interpretations) to generate charts and text. It is not a black‑box AI system that autonomously profiles or predicts your real‑world behavior.

If you disagree with a result or want more explanation, you can email LuckyMirago@gmail.com for a human review. We will provide a written explanation within a reasonable time (typically within 30 days).

7. Children’s Privacy

The App is not directed to children under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If local law sets a higher minimum age for valid consent, we follow that higher age.

7.1 Accidental Collection of Minors’ Data

If we learn that we have inadvertently collected personal information from a child below the minimum required age:

We will verify the situation with the parent or guardian, where possible;
We will delete the child’s personal data from our systems and from relevant third‑party services within a reasonable time;
We will notify the guardian of the deletion result and provide a contact channel for follow‑up (for example, LuckyMirago@gmail.com);
Where required by law, we will cooperate with regulators.

Parents or guardians who believe that we may have collected a child’s information can contact us at LuckyMirago@gmail.com to request inquiry or deletion. We will respond within a reasonable time.

7.2 Age Verification

Where local law requires a higher age threshold (for example, COPPA or GDPR rules), we may take reasonable steps to verify age if necessary (such as requesting guardian confirmation). We do not currently use third‑party age‑verification SDKs or credit‑card micro‑charges for age verification. If we introduce new verification methods in the future, we will update this Policy and clearly inform you.

8. Data Security

We use reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet and no method of electronic storage is completely secure, so we cannot guarantee absolute security.

If a security incident occurs that may compromise your personal information (for example, hacking or system vulnerabilities), we will:

Take reasonable steps to control the risk (for example, isolate affected systems and fix vulnerabilities);
Notify you if the incident is likely to result in a high risk to your rights and freedoms, including basic information about what happened, potential impacts, and recommended protective steps (for example, changing your password);
Notify regulators where required by law (for example, GDPR/UK GDPR breach notification rules).

You can ask about the status of a security incident by emailing LuckyMirago@gmail.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time, for example when we add new features or integrate new third‑party services. When we make material changes (such as changing the types of personal data collected or adding new SDKs), we will notify you via an in‑App notice, pop‑up, or other appropriate means and update the “Last Updated” date above.

Your continued use of the App after the effective date of the updated Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you should stop using the App and may request deletion of your account.

10. Governing Law and Forum

This Policy is governed by and will be interpreted in accordance with the laws of the Hong Kong Special Administrative Region, without regard to conflict‑of‑law rules.

Any dispute arising out of or relating to this Policy will be subject to the jurisdiction of the courts of Hong Kong. For EEA/UK consumers, the mandatory consumer protection laws of your country of residence remain unaffected, and you may have the right to bring claims in your local courts as required by those laws.

If any provision of this Policy is held to be invalid or unenforceable, the remaining provisions will remain in full force and effect.