Privacy Policy
What data does Mira collect?
Mira does not collect data for advertising or analytics purposes, and does not share information with third parties. Most of the app operates entirely on your device. The only exception is the optional cross-device sync feature, described below, which transmits a limited set of data to a server operated by the developer. Mira is available on the web, on iOS and Android, on Samsung TV (Tizen), and on Roku; this policy applies to all of them.
Your media provider credentials
Your credentials (server address, username, and password) are used only to connect to your own media server and are kept only on the device where you use Mira. They are never sent to any Mira server. How they are stored depends on the platform:
- Mobile (iOS/Android): the password is kept in the operating system's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android).
- Web: the password is kept only for the current browser session (never written to disk or to the local catalog database).
- Samsung TV (Tizen): the password is stored encrypted (AES-256-GCM) in the app's local storage on the device.
- Roku and other devices: credentials are kept in the device's app storage.
In every case, your password is never transmitted to Mira's servers — not even to the optional sync service, which only ever receives a one-way (SHA-256) hash of your server address and username.
Catalog and playback progress
Your server's media catalog, your playback history, and your favorites are stored locally on your device (in a local database or the platform's local storage). If you don't use cross-device sync, this data never leaves the device.
Cross-device sync
Mira includes a sync feature that keeps playback progress, favorites, and profiles up to date across multiple devices using the same media provider credentials. When this feature is enabled in the app, the following is transmitted to the sync server (operated by the developer, self-hosted, no third parties involved):
- An identifier derived via SHA-256 hash of your server address and username. Your password is never transmitted or stored.
- Playback progress (position, duration, completion status) tied to an internal content key, without any additional provider metadata.
- Your favorites list (same content keys).
- Any profiles you create: name, avatar, whether it's a kids profile, and a salted hash of the PIN if you set one. The plaintext PIN is never transmitted.
- A random device identifier and the platform (for example, web, iOS, Android, Samsung TV, or Roku), used only to reconcile changes across your own devices.
This data is stored on a server owned and operated by the developer, and is not shared, sold, or used for advertising or analytics. To request deletion of this data, email arias9068@gmail.com with your provider's server address and username (used only to locate and delete the record).
Network connections
Mira makes network connections to your media provider's server (the address you enter in the setup screen) and, if cross-device sync is enabled, to the sync server described above. There are no analytics, advertising, or third-party tracking servers.
Demo mode
The built-in demo mode plays Creative Commons licensed content and public test streams hosted on reputable third-party CDNs. No personal data is transmitted to these servers during playback.
Analytics and tracking
Mira does not use any analytics tools, advertising networks, or behavior tracking. No cookies or advertising identifiers are used.
Children
Mira does not collect data from any user, including children. Accessible content depends solely on the catalog offered by the configured provider.
Changes to this policy
If this policy is updated, the new version will be published at this same URL with the updated date.
Contact
Privacy inquiries: arias9068@gmail.com