Privacy Policy

Last updated: April 14, 2026

Data Controller

Miiro is operated by Robert Eekhoff, Amsterdam, Netherlands. For privacy inquiries: support@miiro.app

Miiro ("we", "us", "our") provides a task management, meal planning, grocery ordering, recipe management, household coordination, and AI-powered assistance application. We are committed to protecting your privacy.

What We Collect

• Account Information: Email address and display name for authentication.
• Household Data: Tasks, lists, recipes, meal plans stored in Firebase to sync across devices.
• Push Notification Tokens: Device token for delivering activity notifications.
• Subscription Information: Processed by Apple. We receive status through RevenueCat, never your payment info.
• Tell Miiro Input: When you use the Tell Miiro AI feature, your natural language input is sent to Anthropic's AI service for processing. This data is used solely to organize your tasks, meals, and grocery lists. Your input is not stored by Anthropic for training purposes and is processed in accordance with Anthropic's usage policy.
• Sam Knowledge System: When you use Miiro, Sam (our AI assistant) learns about your household over time. This includes dietary preferences, allergies, food dislikes, cooking preferences, grocery brand preferences, household routines, important dates, and other facts you share in conversations. This data is stored in Firebase and is visible and editable by you in Settings under "What Sam knows." You can view, edit, or delete any of this data at any time.
• Grocery Ordering: When you order groceries through Miiro, your grocery list items are sent to our cloud service for product matching. For stores with direct API access (such as Albert Heijn, Crisp, and Picnic), your store authentication tokens (OAuth tokens, session tokens) are stored securely in Firebase to maintain your login session. Miiro never stores your store passwords. For stores without API access (such as Jumbo and Plus), Miiro automates the store's website inside a secure on-device browser to fill your cart. This happens entirely on your device using your own browser session and cookies.
• Store Authentication: When you link a supermarket account, the authentication flow happens directly between your device and the store. Miiro stores only the resulting session token, never your username or password. You can unlink any store at any time.
• Voice Input: When you use voice input with Sam, your audio is processed for speech recognition. The resulting text is then processed the same way as typed input.
• Profile Photos: Optional profile image stored in Firebase Storage.
• Referral Data: Referral codes and device identifiers for our referral program.
• AI Processing: Text you enter in Tell Miiro is sent to Anthropic's Claude API for natural language processing. We send only the text content, not your identity. Additionally, when you add items to your grocery list, item names are sent to Anthropic's API for automatic category sorting. These item names may reflect cultural or dietary preferences but are not linked to your identity. No other user data is included in these requests.
• Recipe Import via URL: When you import a recipe by sharing a social media URL (from TikTok, Instagram, or YouTube), the URL is sent to Supadata (supadata.ai), a third-party data processor, to retrieve the video transcript and post metadata. Only the URL is transmitted. No user identity or personal data is sent to Supadata. The retrieved transcript and metadata are then processed by Anthropic's AI service to extract structured recipe information. Supadata processes data in accordance with its privacy policy.

Website Analytics

Our website (miiro.app) uses Google Analytics 4 (Measurement ID: G-P82S08N37Z) to understand how visitors use our site. This includes page views, session duration, and general traffic sources. Google Analytics uses cookies to collect this data. We only load Google Analytics after you give explicit consent via our cookie banner. If you decline cookies, no analytics data is collected. You can withdraw consent at any time by clearing your browser cookies. Google processes this data in accordance with its privacy policy.

Cookies

Our website uses a single functional cookie (miiro_consent) to remember your cookie preference. This cookie is stored for 365 days. If you accept analytics cookies, Google Analytics sets additional cookies to collect anonymous usage data. No cookies are set until you make a choice. The Miiro iOS app does not use cookies.

What We Don't Collect

• Your location
• Your browsing activity
• Data from children under 13
• We don't sell data to advertisers
• We don't use data for targeted advertising
• We don't store your Tell Miiro conversations after processing
• Your supermarket passwords (we store session tokens only, never credentials)
• Your payment information for grocery orders (you pay the store directly)

How We Use Your Data

We use your data solely to provide the Miiro app: syncing content across devices, sharing with household members, delivering notifications, managing subscriptions, processing AI requests to organize your tasks and meals, matching grocery products at supermarkets, learning your household preferences to provide better suggestions, and filling grocery carts at your chosen stores.

Legal Basis for Processing

We process your data based on: (a) performance of our contract with you (providing the Miiro service), (b) your consent (push notifications, optional features), and (c) legitimate interest (security, fraud prevention, service improvement).

Data Storage

Stored securely on Google Firebase with encryption at rest and in transit. Access restricted to authenticated household members.

Your data may be transferred to and processed in the United States through our service providers (Google Firebase, Anthropic, RevenueCat, Supadata, Apify, Inworld). These transfers are protected by Standard Contractual Clauses.

Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data is permanently removed within 30 days. Anonymized analytics may be retained indefinitely.

Grocery ordering data (cart contents, order history) is retained for as long as your account is active. Store authentication tokens are stored until you unlink the store or delete your account. Sam's learned household knowledge is stored until you delete it manually or delete your account.

Data Sharing

We share data only with: Google Firebase (storage and authentication), RevenueCat (subscription management), Apple (payments), Anthropic (AI processing for Sam assistant and grocery product matching), Apify (grocery product search across supermarkets), Supadata (video transcript retrieval for recipe import), Inworld (voice synthesis for Sam's spoken responses), Google Analytics (anonymous website usage data), Expo (push notifications), and Zoho Mail (transactional emails). For grocery ordering, your device connects directly to supermarket websites or APIs using your own account credentials. We never sell your data.

Your Rights

Request deletion anytime at support@miiro.app. EU/EEA users have rights under GDPR including: access, rectification, erasure, portability, restriction of processing, and objection. We respond to requests within 30 days. You also have the right to lodge a complaint with your local supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

You can view, edit, and delete everything Sam has learned about your household at any time in Settings under "What Sam knows." You can also delete all learned data at once.

Changes

We'll notify you of significant changes through the app or email.

Contact

support@miiro.app