Privacy Policy

1. Who we are and what this covers

Mivori is a tracking companion for people already using GLP-1 medication. Contact us about privacy at hello@mivori.app. Our website currently offers a questionnaire and previews the planned service. App, account and subscription sections apply when those features are available to you; completing the questionnaire does not create a paid subscription.

Our Consumer Health Privacy Policy provides a separate explanation of health-related information and requests. Reading this policy or continuing to browse is not permission for optional advertising or unrelated uses of health information.

2. Information we handle

• Questionnaire and setup. Answers about your treatment stage, symptoms, tracking difficulties and priorities; medication and dose; shot schedule and reminder preferences; and weight if provided. We use these to tailor the questionnaire and product preview and prepare setup for the app. Answers are saved as you progress, including before email or checkout. You can skip questions; leaving the page does not remove answers already saved.
• Account and contact. Email address, account identifiers, verification and session records, and messages you send us. These support sign-in, access recovery, customer service and account security.
• App records. Medication and shot details, dates, injection sites, symptoms and severity, weight, daily calories and protein, and optional notes and profile information you enter. These support your history, reminders and charts. Manually entered tracking records save on the phone and synchronize with our backend.
• Billing. Selected plan, trial and billing dates, subscription status, and customer, transaction and subscription identifiers from Paddle. Paddle collects payment information through its checkout; card numbers and security codes are not stored in Mivori’s tracking database.
• Technical information. Browser and device information, network information such as IP addresses, session identifiers, service requests, and limited operational or diagnostic records. Notification registration uses a device token when you enable supported push notifications. These support delivery, security and troubleshooting.

Please avoid including another person’s information, payment credentials or unnecessary medical details in notes and support messages.

3. Apple Health

If you connect Apple Health, the app reads the weight, dietary energy and protein data you allow, with source information. These values are used on your iPhone to show your history and progress. The integration is read-only: it does not write to Apple Health or upload the Health values or source names to Mivori’s backend. Manually entered Mivori records are separate and may synchronize with our backend.

You control access through Apple’s Health permissions and can revoke it there. Revoking access does not erase separately entered Mivori records. Apple Health values are not used in Mivori’s advertising measurement.

4. How information is used

We use information to provide the questionnaire and tracking features you request; save and recover your records; manage sign-in, subscription access and billing; deliver account emails and enabled reminders; respond to support and privacy requests; protect the service; and meet applicable legal obligations.

We also evaluate how the questionnaire works, including internal analysis of retained submissions described below. Health answers and tracking records are excluded from general analytics events. Account and sign-in emails are distinct from marketing permission.

5. Providers and other disclosures

Google Cloud and Firebase provide hosting, storage, authentication and relevant notification infrastructure. Resend is the selected provider for transactional email. Paddle handles subscription purchases and billing as merchant of record, under its own privacy notice. Apple provides device Health permissions and notification delivery. We provide each service with information needed for its function; questionnaire answers are not included in payment metadata or transactional email content.

Firebase Crashlytics is configured as an optional app diagnostic feature. PostHog is selected for limited funnel analytics and browser diagnostics, but customer delivery is not currently active. Health entries, questionnaire answers, notes and credentials are excluded from diagnostic payloads and general analytics; session replay and automatic capture of form contents are not enabled.

We may disclose information where legally required, to respond to valid legal requests, or to protect people and the service as permitted by law. Any disclosure of consumer health data must also meet applicable health-data requirements. Meta advertising measurement is described separately below.

6. Cookies and advertising choices

The questionnaire uses an essential first-party session cookie to protect and resume saved answers. Its configured lifetime is 90 days. Your answers are stored on the backend, not in that cookie. Blocking it may prevent the questionnaire from saving or resuming correctly.

Optional Meta measurement operates only on the public questionnaire welcome screen and only after you choose “Allow advertising.” It sends a page visit, event time and identifier, browser identifier and, when present, an advertising click identifier. The direct browser request also exposes network information such as your IP address and browser information to Meta. The server event uses the same event identifier to help avoid double counting.

We do not put questionnaire answers, medication or dose, health records, email addresses or question-by-question activity into these advertising events. A visit to a GLP-1-related website can nevertheless reveal an interest in health. Meta processes information under its privacy policy; we do not describe this exchange as anonymous.

Your advertising choice and the advertising identifiers stored by this website last up to 30 days. Choose “No thanks” or use “Ad privacy” below to turn measurement off and remove our advertising identifier cookies. This stops future measurement from this browser; it cannot recall information already sent to Meta. Global Privacy Control and enabled Do Not Track signals block this integration. Choices are browser-specific and do not prevent you using the questionnaire.

We do not exchange your questionnaire answers or app records for money. Advertising disclosures can have broader legal meanings under state privacy laws, so this policy does not make a blanket claim that all processing is outside “sale,” “sharing” or targeted advertising rules.

7. Retention and account deletion

Unenrolled questionnaire drafts: the retention period is 90 days from last activity, followed by scheduled removal. The shorter browser-resume window does not change that retention period.

App account deletion: the verified deletion process removes app tracking and setup records and sign-in access, and coordinates subscription cancellation. Uninstalling the app alone does not delete an account or cancel a subscription. The operation may need time to finish; its status determines whether processing is complete.

Questionnaire submissions after account deletion: under our selected retention policy, a full identifiable copy of the linked questionnaire and checkout submission is kept separately for internal analysis for 12 calendar months from acceptance of the confirmed account-deletion request. It may include your email, health answers and setup details. It is not anonymous, cannot restore account access, and is removed through scheduled cleanup after expiry. This routine retention policy does not override an applicable legal right to earlier erasure.

Firestore daily backups are configured for seven-day retention, with a separate recovery window of up to seven days. This is not a promise that all providers’ records disappear within seven days. Billing, support, security and provider records may have different legal or operational retention requirements. Contact us for questions about a particular record or a request for complete erasure, including retained questionnaire information.

8. Your choices and requests

Write to hello@mivori.app to request access, correction or deletion, or to ask about consent and applicable privacy rights. You can request deletion of questionnaire data even if you never created an app account. We may ask for information needed to verify your request securely; do not send medication records or identity documents in an initial email.

You can edit supported records in the app, manage Apple Health and notification permissions on your phone, and change optional advertising choices here. Depending on where you live and which laws apply, you may have additional rights, including a copy of your data, limits on certain uses, an opt-out of sale or sharing, or an appeal. We will assess requests under the applicable law without requiring a subscription purchase.

See the consumer health request and appeal process for health-data requests. If you believe a child has provided personal information, contact us so we can investigate and address it.

9. Security and processing locations

We use access controls, encrypted transport and protected account sessions. The initial cloud database is in the United States. Providers may process information in other countries in accordance with their roles and applicable requirements. No storage or transmission method can guarantee complete security.

10. Changes and contact

When the effective policy changes, we will update its date and provide additional notice or seek permission where required. New health-data uses are not authorized merely by changing this page. Questions and requests can be sent to hello@mivori.app.