MihiraCare AI (the “App”) is an AI care companion for long health journeys, beginning with pregnancy and fertility (IVF) care. The App is operated by Spot Sphere Services Private Limited (“MihiraCare”, “we”, “us”, “our”). This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices and rights you have. We are committed to compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable rules.
The App serves four roles, and this policy applies to all of them:
| Category | Examples | Why |
|---|---|---|
| Account & identity | Name, email address, phone number, role, and (for clinicians/clinics) professional/clinic identifiers and linking codes | Create and secure your account; connect you to your care circle |
| Health information (sensitive personal data) | Symptoms, vitals, medications, mood, and other notes you log; your care checklist; last menstrual period / due date where you provide them; prescriptions, lab reports and photos you upload; messages in your care chat | Provide your care plan, reminders, summaries for your doctor, and safety alerts |
| Communications | Messages you send to your doctor and to Mira | Keep your care circle in touch and your care organised |
| Device & technical | Push notification token, app version, device type, and basic diagnostic logs | Deliver notifications; keep the App secure and reliable |
We collect this information directly from you and from members of your care circle who are authorised to record information about your care (for example, a doctor adding a note).
We do not sell your personal data, and we do not use your health information for advertising.
Mira is powered by large language models provided through Amazon Bedrock (using Anthropic’s Claude models). To generate a reply or read a document you upload, the relevant text or image is sent to the model for processing and a response is returned to you. Mira is instructed never to provide medical advice, diagnoses, or dosages; when you ask for clinical advice it declines and shares your question with your doctor. AI output can be imperfect — always confirm anything important with your clinician.
Improving Mira’s care guidance. To keep Mira’s guidance safe, accurate and useful, we may use de-identified and aggregated information derived from care on the platform — including patterns learned from clinician-confirmed cases — to review and update the clinical handbook (knowledge base) that Mira draws on. This uses aggregated signals that do not identify you, every proposed change is reviewed and approved by a person (the platform owner) before it is applied, it is never used to make automated decisions about your individual care, and your data is never sold or shared with third parties for their own purposes. If you withdraw consent or delete your account, your identifiable data is removed as described in Section 9. We do not use your data to train third-party foundation models.
We process your personal data on the basis of your consent, which you give when you create an account and use the App, and to perform the service you request. Because health data is sensitive, we ask for it only as needed to provide care features, and you may withdraw consent at any time (see Section 10). Where you are a doctor, guardian or hospital, you confirm you are authorised to access the patient information available to you.
Your account and health data are stored in India (AWS Asia Pacific — Mumbai, ap-south-1). AI processing (Section 4) is performed by Amazon Bedrock in the United States (us-east-1), which means message and document content processed by Mira is transferred outside India for that purpose. We rely on your consent and appropriate contractual safeguards for this transfer. If you prefer not to have content processed by AI, you can avoid using the chat, translation and document-parsing features.
We protect your data with encryption in transit (HTTPS/TLS) and at rest, authenticated access via Amazon Cognito, role-based access controls that limit each user to their own care circle, and least-privilege permissions for our systems. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the authorities of a breach as required by law.
We retain your personal data for as long as your account is active and as needed to provide the App. If you delete your account or withdraw consent, we will delete or de-identify your personal data within a reasonable period, except where we must retain certain records to comply with legal obligations or resolve disputes.
Subject to the DPDP Act, you have the right to:
To exercise any right, email admin@mihiracareai.com. We may need to verify your identity before acting on a request.
The App is intended for adults (18+). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy from time to time. We will post the updated version here with a new “Last updated” date and, where appropriate, notify you in the App.
Spot Sphere Services Private Limited
Grievance Officer: Saikiran M · admin@mihiracareai.com · +91 89047 03895
Registered address: Flat No 204, Root LCC Apartment, Huda, Neknampur, Hyderabad, Telangana 500089, India
Company: info@spotsphereservices.com
Website: mihiracareai.com