Effective date: 2026-10-31
App: Miru Mongolia (mn.miru.app) — Mongolian messaging & social app
Operator: Grape Market LLC — support@miru.app — Ulaanbaatar, Mongolia
| Category | Items | Why |
|---|---|---|
| Account | Phone number, display name, profile photo, password hash (bcrypt) | Account creation and sign-in |
| Session | Short-lived JWT tokens | Keep you signed in between launches |
| Messages | Text, images, and media you send or receive in chats | Deliver messages between you and your contacts |
| Contacts | Phone numbers of users you choose to add as friends | Match you with your friends on Miru |
We do not collect: location, your device contact book (only numbers you type), payment information, advertising identifiers, or usage telemetry beyond basic error logs.
- Phone + password are used to authenticate you.
- Display name and photo are shown to friends who have added you.
- Messages are stored only to deliver them; delivered messages are removed from our servers after 30 days unless both parties still reference them.
- We do not profile you, do not run targeted advertising, and do not sell or share your data with third parties.
| Provider | Role | Data sent |
|---|---|---|
| Carrot Soft (our backend) | Authentication and message delivery | Phone, password hash, messages |
| Apple / Google | Push notifications | APNs/FCM device token |
- Your account persists until you request deletion.
- To delete your account and all associated server data, see Account & Data Deletion or email support@miru.app from your registered number. Deletion completes within 30 days.
- Delivered messages purge from our servers after 30 days.
- Passwords are hashed with bcrypt; plaintext is never stored.
- All network traffic uses HTTPS/TLS 1.2 or higher.
- Our backend tables use Row-Level Security that forbids cross-user reads.
- Brute-force sign-in attempts are rate-limited.
Miru is not directed to children under 13. If we learn we have inadvertently collected data from a child under 13, we will delete it.
You have the right to access, correct, or delete your data; withdraw consent; and lodge a complaint with your data-protection authority. Exercise any of these by emailing support@miru.app.
Material changes will be posted here with an updated effective date. Continued use after a change means acceptance of the revised policy.
support@miru.app — Grape Market LLC, Ulaanbaatar, Mongolia