Photos you scan. When you photograph a product for analysis, the photo is resized and sent securely through our servers to our AI service providers — Google (Gemini) and, as a fallback, OpenAI — to generate your result. We do not store your photos on our servers, and they are never posted publicly, shown to other users, or sold. Photos are processed transiently, only to deliver your scan. Account information. You can sign in with Apple or Google. We receive a unique account identifier, your email address, and — depending on the provider — your name and profile picture. Sign in with Apple lets you hide your email. We use this to create your Miru account and keep you signed in. Your beauty profile. During onboarding you can share your skin type and skin concerns. This is stored on your device and in your account backup. If you have Premium, a short summary of your profile is included in AI requests so results can be personalized to your skin. It is never shared beyond that. Saved content. Your scan history, favorites, and lists are stored on your device. When you’re signed in, an encrypted-in-transit backup is stored on our servers (hosted on Cloudflare) so you can restore it after reinstalling or switching devices. Usage analytics. We use PostHog (hosted in the EU) to understand how the App is used. Events include things like scans completed (with the product’s name, brand, and category), your selected region, onboarding completion, and subscription events. Analytics are pseudonymous — we never send your name, email, or photos to analytics. Purchase data. Subscriptions are processed by Apple and managed through RevenueCat. We receive your subscription status (for example, trial or active) — never your payment card details. If you sign in, your subscription status is linked to your account so Premium follows you across devices. Device and technical data. A random device identifier and your IP address are used to prevent abuse of our AI service (rate limiting) and to keep the service reliable.