Privacy Policy

Who We Are

Mura is an AI-powered mental wellness platform. References to "Mura", "we", "us", or "our" in this policy refer to Mura Inc. If you have any questions, contact us at contact@mura.today.

What Data We Collect

• Email address: collected when you create an account, used solely to authenticate you and allow you to return to your account.
• Conversation content: messages you send and receive during a session. These are transmitted to a third-party AI provider for processing (see Section 4). We do not store full conversation history on our servers beyond your active session unless you explicitly enable session history.
• Anonymous session data: a randomly generated session identifier used to maintain your current session. No name, location, device ID, or browsing history is collected.
• Self-reported preferences: any wellness preferences or goals you choose to share within the app.

What We Never Collect

• Your name or real-world identity
• Location data
• Camera images or photos (camera access is processed locally on your device for vitals measurement only, and no images are transmitted to our servers)
• Contact lists or social graph data
• Browsing history outside of Mura

Third-Party AI Processing

To generate responses, Mura transmits your conversation content to a third-party large language model provider. This provider processes your messages on our behalf and is contractually prohibited from using your data for advertising or selling it to third parties. Conversation data is retained by this provider for a limited period (up to 30 days) for safety monitoring purposes, after which it is deleted. We do not sell or share your data with any other third parties.

How We Use Your Data

• To authenticate your account and allow you to sign in
• To generate AI responses to your messages
• To improve the reliability and safety of the platform
• To send transactional emails (e.g. sign-in links), never marketing without your consent

Data Retention

• Email address: retained for as long as your account is active. Deleted within 30 days of account deletion.
• Conversation content: not stored on Mura servers after your session ends (unless session history is enabled). Third-party AI provider retains for up to 30 days.
• Session identifiers: deleted at the end of each session.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data at any time. You also have the right to restrict or object to processing, and the right to data portability. To exercise any of these rights, contact us at contact@mura.today. We will respond within 30 days.

Security

All data transmitted between your device and Mura's servers is encrypted in transit via TLS. We follow industry-standard security practices and conduct regular reviews of our data handling procedures.

Children

Mura is intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a minor has used the platform, contact us and we will delete the data promptly.

Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of Mura after changes take effect constitutes acceptance of the updated policy.