Privacy Policy — Maira
Last updated: 14 September 2026
Maira is a wellness companion for women living with PCOS. This policy explains exactly what happens to what you share. It is written to be read, not to be survived.
The short version. Maira needs an account, and what you log is stored in it so a lost or new phone never costs you your history. It is locked to you, never sold, and never used for advertising or tracking. The AI features send what you give them to OpenAI, and only after you say yes. You can delete your whole account from inside the app.
1. Who we are
Maira is operated by Kuracha Sai Srihith, an individual developer, Villa No 53, Aparna Hill Park Gardenia, Chandanagar, Hyderabad, Telangana, India ("we", "us"). We are the data fiduciary (controller) for your data.
For anything about your data, including a complaint, write to srihith.kuracha@gmail.com. We answer within 30 days, and usually much sooner.
2. What we collect, and where it lives
You need an account to use Maira. Signing up stores your email address and an account ID with our backend, which runs on Supabase in Amazon Web Services' Mumbai (India) region.
As you use the app, what you enter is saved on your phone and synced to your account:
| What | Why |
|---|---|
| Your name, and your onboarding answers: goals, age range, height and weight if given, food preferences, symptoms, cycle regularity, how you feel about food, and your PCOS status | To tailor what Maira shows and says |
| Meals you log, with Maira's steadiness estimate and any swap you chose | Your food history and patterns |
| Your daily Bloom score and what shaped it, which can include sleep and steps | Your daily picture |
| Cycle entries: period dates, flow, symptoms | Cycle tracking |
| Water intake and how each day felt | Your daily picture |
| Medications and the doses you mark taken or skipped | Reminders and adherence history |
| Lab reports and the marker values in them | Your lab history |
| Every message between you and Maira | So the conversation continues on any device |
| Things Maira remembers about you | So you never explain yourself twice. All of it is visible and removable under Settings → Personal information |
| If a message suggested you might be in distress, a private note of that | So Maira can respond with care and share crisis resources |
| Your answer to the AI question, and when you gave it | Proof of your consent, as the law requires |
| Counts of how often you used the AI features today | To stop abuse of the AI features |
Meal photos stay on your phone. They are not uploaded to our servers, and the app deletes them from your phone after about a day.
Every row is locked to your account by database-level access rules, so no other user, and no unauthenticated request, can read it.
3. What Maira reads from Apple Health
With your permission, Maira reads two things: sleep and step count. It uses them to estimate your daily Bloom.
Maira never writes anything to Apple Health and never reads any other health category. You can revoke access at any time in the iOS Health app; Maira keeps working without it.
Apple Health data is never used for advertising or marketing, and never sold.
4. The AI features, and OpenAI
Some features are powered by OpenAI (OpenAI, L.L.C., United States). Maira asks your permission before the first one sends anything, and names exactly what goes. When you use them, this is sent through our server to OpenAI:
- Talking to Maira: your message, plus context that helps her answer: your first name, cycle phase, today's meals, today's Bloom (which can reflect sleep and steps from Apple Health), patterns she has noticed, and things she remembers about you.
- Photographing a meal: the photo, so the food can be recognised.
- Photographing a lab report: the photo, so the values can be read.
- Searching for a food, or scanning a product with no nutrition data: the food or product name.
OpenAI uses this only to produce the answer. Under its API terms it does not use it to train its models or sell it, and it may keep it for up to 30 days to check for abuse before deleting it. Our server does not store meal or lab photos; they are used for the one request and discarded.
You can say no. Without AI you can still log meals, your cycle, medications and labs by hand. You can switch AI off at any time in Settings → AI features; from then on nothing more is sent.
Because OpenAI is in the United States, using the AI features transfers that data outside India.
5. Other services
- Open Food Facts (openfoodfacts.org), a public food database. When you scan a barcode, the barcode number is sent to look up the product. When you search for a food, our server may send the food name. Neither request identifies you.
- Resend, which delivers our emails (sign-up confirmation and password reset). It receives your email address to do so.
- Apple, if you choose Sign in with Apple. When you delete your account, we ask Apple to revoke Maira's access to your Apple ID.
We use no advertising SDK, no analytics SDK and no tracking pixel.
6. What we never do
- We never sell your data. There is no circumstance in which this changes.
- We never share it with data brokers, advertisers or insurers.
- We do not track you across other apps or websites.
- We do not use your health data to target anything at you.
7. Your rights
Whatever your country requires, we offer the same to everyone:
- See it. Settings → Personal information shows everything Maira remembers about you. Your logs are all in the app.
- Correct it. Anything you entered, you can edit or remove in the app.
- Delete it. Settings → Start over erases your data on your phone and on our servers but keeps your account. Settings → Delete account deletes your account and everything in it, immediately and permanently.
- Take it with you. Write to us and we will send you your data in a readable format.
- Withdraw consent. Switch off AI in Settings → AI features, or revoke Health access in the iOS Health app. Neither breaks the app.
- Complain. Write to us first.
Our basis for processing your health data is your consent (India's Digital Personal Data Protection Act 2023; for the EU and UK, explicit consent under GDPR Art. 9(2)(a)), which you may withdraw at any time.
8. How long we keep it
On our servers: until you delete it, or delete your account. When you delete your account, it is removed straight away; database backups that may still contain it are overwritten within 7 days. On your phone: until you delete it, sign out or uninstall the app. OpenAI's retention is described in section 4.
9. Children
Maira is for adults, 18 and over. We do not knowingly collect data from anyone younger. If you believe someone under 18 has given us data, write to us and we will delete it.
10. Security
Data in transit is encrypted (TLS). Data on our servers is encrypted at rest and protected by row-level access rules tied to your account. On your phone it is protected by the device's own encryption and passcode.
No system is perfect, and we will not pretend otherwise. If a breach ever affects your data, we will tell you and the relevant authority, promptly and plainly.
11. Changes
If this policy changes in a way that affects what happens to your data, we will tell you in the app before the change takes effect, not by quietly updating a page. If what goes to the AI changes, Maira will ask your permission again.
12. Maira is not a doctor
Maira supports everyday wellbeing. She does not diagnose, treat, prescribe or predict fertility, and everything she estimates is labelled as an estimate. Nothing in the app is a substitute for professional medical advice. If something feels wrong, please talk to a doctor.