Privacy Policy

Overview

Golden Roots ("we", "us", "our") built Miru as a free, ad-supported app with an optional Miru Plus subscription. This page explains how information is collected, used, and disclosed when you use Miru.

Data on Your Device

All your personal habit data is stored locally on your device and is never uploaded to our servers, including:

• Habit names, schedules, and completion logs
• Task names, categories, and due dates
• Focus session history
• App settings and preferences such as theme and language
• Achievement progress and XP or level data

Habits, habit logs, and settings are encrypted with AES-256 (the key is kept in Android Keystore). Tasks and focus history are stored in the app's private on-device database, which other apps cannot access.

• We do not collect your name, email, phone number, or other personally identifiable information
• We do not require account creation; Google sign-in is used only if you turn on Drive backup
• We do not upload your habit data, tasks, or notes to our servers; Drive backups go only to your own Google Drive
• We do not share or sell your data to third parties

Permissions

Miru may send local notifications such as habit reminders and streak alerts. These are processed entirely on your device. No notification data is sent to any server.

Backup and Restore

Miru offers a local backup and export feature that saves your data as a JSON file on your device. This file stays on your device and is only shared if you explicitly choose to share it. We do not have access to your backup files.

4. Google Drive Backup (optional)

If you turn on Google Drive backup, you sign in with your own Google account and Miru requests only the drive.appdata permission - a private app folder in your Drive. Miru cannot see any other file in your Drive.

• The uploaded file is the same JSON backup you can export manually, stored in your own Drive. Golden Roots cannot read it.
• Creating backups (manual or weekly automatic) requires Miru Plus; restoring your backups is always free.
• Sign-in tokens are kept by Google's sign-in library on your device. Your Google account email is shown in the app only to tell you which account is connected.
• You can disconnect at any time in Settings.

In-App Purchases

Miru Plus is an optional monthly or yearly subscription that removes ads, unlocks premium themes, and adds Google Drive backup. Payments are handled entirely by Google Play; we never see your payment details. The app stores only which plan you have and the purchase date, locally on your device.

Advertising

Miru is a free, ad-supported app. We use Google AdMob to display advertisements. AdMob may use your Advertising ID to show personalized ads. You can opt out of personalized ads in your device settings:

• Android: Settings → Google → Ads → Opt out of Ads Personalization

Where required (for example, in the EEA and the UK), Miru asks for your consent through Google's consent form on first launch. You can change your choice at any time in Settings → Manage ad consent. Miru Plus subscribers see no ads.

Google AdMob

• Displays banner, interstitial, and rewarded ads
• May collect device identifiers such as Advertising ID for ad personalization
• Is subject to Google's Privacy Policy

Analytics & Crash Reports

1.2 Data Collected by Third-Party Services

Miru uses the following third-party services that may collect limited technical information:

Firebase Analytics (Google)

• Collects usage events such as habit creation, theme changes, and screen views, linked to a random app-instance ID
• Does not collect habit names, task names, or user-generated content
• May collect device information such as device model, OS version, and app version

Firebase Crashlytics (Google)

• Collects crash reports and error logs to help fix bugs
• May include device model, OS version, and stack traces
• Does not collect personal information

Firebase Remote Config (Google)

• Delivers app settings, such as ad settings, without an app update

Third-Party Services

11. Third-Party Service Links

• Google Privacy Policy for Analytics, Crashlytics, Remote Config, AdMob, Sign-In, Drive, and Google Play
• Firebase Privacy

Other Online Services

Google Play services

• Google Play Billing processes Miru Plus purchases
• Google Play In-App Update and In-App Review let you update or rate Miru without leaving the app

Data Collection Summary

Listed in the same order and with the same names as the Data safety section on Google Play. "Collected" means the data leaves your device; data that stays on your phone is marked "On device only".

All core app data remains stored on your device (or in your own Google Drive if you turn on backup) and is never uploaded to Golden Roots servers.

Data Deletion

You can delete all your data at any time from within the app:

• Go to Me → Settings → Delete All Data
• This permanently deletes all habits, tasks, logs, and settings from your device
• To erase Drive backups, go to Google Drive → Settings → Manage apps → Miru → Delete hidden app data

You can also uninstall the app to remove all data from your device.

Data Security

We take reasonable measures to protect your data:

• Habits, habit logs, and settings are encrypted with AES-256; other data is kept in the app's private storage
• Encryption keys are stored in Android Keystore via Flutter Secure Storage
• All network communication uses HTTPS

Children's Privacy

This App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided personal data through the App, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App or applicable laws. Any changes will be reflected on this page with an updated "Last updated" date.

Contact Us