Privacy Policy

Who We Are

Mura is an AI-powered mental wellness platform. References to "Mura", "we", "us", or "our" in this policy refer to Mura Inc. If you have any questions, contact us at contact@mura.today.

What Data We Collect

• Email address: collected when you create an account, used solely to authenticate you and allow you to return to your account.
• Conversation content: messages you send and receive during a session. These are transmitted to a third-party AI provider for processing (see Section 4), with that provider's retention and training disabled. We also store them on our own servers, because replaying recent messages is what allows the conversation to have memory rather than restarting at every reply. Messages are retained until you delete your account, which deletes them. Guest conversations are stored under a one-time identifier that is not linked to any account and is not reused between sessions.
• Anonymous session data: a randomly generated session identifier used to maintain your current session. No name, location, device ID, or browsing history is collected.
• Self-reported preferences: any wellness preferences or goals you choose to share within the app.

What We Never Collect

• Your name or real-world identity
• Location data
• Stored camera images or photos. Heart rate and HRV are measured entirely on your device and no frames leave it. The anemia eye scan is the one exception: a single cropped image of the inside of your lower eyelid is sent for analysis, held in memory only, and never written to disk or kept after the result is returned
• Contact lists or social graph data
• Browsing history outside of Mura

Third-Party AI Processing

To generate responses, Mura transmits your conversation content to a third-party large language model provider. This provider processes your messages on our behalf and is contractually prohibited from using your data for advertising or selling it to third parties. Conversation data is retained by this provider for a limited period (up to 30 days) for safety monitoring purposes, after which it is deleted. We do not sell or share your data with any other third parties.

How We Use Your Data

• To authenticate your account and allow you to sign in
• To generate AI responses to your messages
• To improve the reliability and safety of the platform
• To send transactional emails (e.g. sign-in links), never marketing without your consent

Data Retention

• Email address: retained for as long as your account is active. Deleted within 30 days of account deletion.
• Conversation content: stored on Mura servers until you delete your account, because replaying recent messages is what gives the conversation memory. Guest conversations are stored under a one-time identifier and deleted after 30 days. The AI provider may retain content briefly for its own abuse monitoring, see Section 4.
• Session identifiers: stored alongside the messages they belong to and removed with them.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data at any time. You also have the right to restrict or object to processing, and the right to data portability. To exercise any of these rights, contact us at contact@mura.today. We will respond within 30 days.

Security

All data transmitted between your device and Mura's servers is encrypted in transit via TLS. We follow industry-standard security practices and conduct regular reviews of our data handling procedures.

Children

Mura is intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a minor has used the platform, contact us and we will delete the data promptly.

Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of Mura after changes take effect constitutes acceptance of the updated policy.