Privacy Policy

Last updated: June 18, 2026

This Privacy Policy explains what information mirv ("mirv", "we", "us") collects when you use the mirv app at go.mirv.app and this website, why we collect it, and the choices you have. We aim to collect as little as possible.

1. Information we collect

Account information

When you register, we store the email address and password you provide. Passwords are stored only as a salted hash — never in plain text.

Your content

mirv stores the data you create in the app: lists, tasks, subtasks, notes/descriptions, due dates, board state, and related settings. This content belongs to you. We use it only to operate the service for you.

Technical data

Our servers keep standard operational logs (such as IP address, request time, and error details) needed to run the service securely and diagnose problems. We use a session cookie to keep you signed in; it is essential to the app and is not used for advertising.

2. How we use your information

• To provide, maintain, and secure the app and your account.
• To respond to your support requests and communicate about the service.
• To diagnose, fix, and prevent technical problems and abuse.

We do not sell your personal data, and we do not use your content to serve advertising.

3. AI agent access (MCP)

mirv offers an optional integration that lets AI assistants read and update your tasks through an access token you create. This only happens when you generate a token and connect a client; you can revoke a token at any time from the app.

4. Service providers

We host the app and database with infrastructure providers (including Railway and its managed PostgreSQL) that process data on our behalf to operate the service. They are bound to safeguard the data and use it only to provide hosting.

5. Data retention

We keep your account and content for as long as your account is active. If you ask us to delete your account, we remove your content from our active systems; residual copies in backups age out on our normal backup rotation.

6. Your choices and rights

• Export: you can export your entire workspace as JSON from inside the app at any time.
• Access & correction: you can view and edit your content directly in the app.
• Deletion: email us to request account and data deletion.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, contact us at hello@mirv.app.

7. Security

We use industry-standard measures — encrypted connections (HTTPS), hashed passwords, and access controls — to protect your data. No method of transmission or storage is perfectly secure, but we work to keep your information safe.

8. Children

mirv is not directed to children under 13, and we do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and significant changes will be communicated where appropriate.

10. Contact

Questions about privacy or your data? Email hello@mirv.app.