Privacy Policy
1. Who we are and what this policy covers
MiRA Clinical, Inc. ("MiRA," "we," "us") builds voice-first AI tools for clinical nursing documentation and AI patient simulation. This policy explains how we collect, use, share, and protect personal information.
It applies to:
- Our website, miraclinical.com
- The MiRA mobile app and web platform, including AI patient simulation and documentation features
- Faculty and leadership dashboards
- Emails, demos, and other communications with us
When we provide services to a hospital, university, or nursing school (an "Institution"), our agreement with that Institution may also govern your data. If that agreement conflicts with this policy, the agreement controls.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email, role (nurse, student, faculty, leader), Institution, unit or program | You or your Institution |
| Login and security data | Encrypted password, one-time codes, biometric login status (biometric data stays on your device; we do not receive it) | You, your device |
| Voice recordings and transcripts | Audio you record in the app and the text transcribed from it | You |
| Clinical documentation data | Assessment findings and notes extracted from your recordings. In hospital use, this may include protected health information (PHI) | You, in the course of care |
| Simulation and learning data | Scenarios assigned and completed, responses, rubric scores, feedback, time spent, debrief notes, survey answers | You, your faculty, our scoring system |
| Usage and device data | App version, device type, OS, IP address, session times, crash logs | Automatically |
| Website and contact data | Name, email, organization, and message when you contact us or request a demo; basic site analytics if you allow them | You, cookies |
Simulation patients in MiRA are fictional. Do not enter real patient information into simulation features.
3. How we use information
We use personal information to:
- Provide the service: transcribe recordings, structure documentation, run simulations, and score performance
- Give real-time guidance and debrief feedback during simulations
- Show faculty and leadership the progress and performance reports their role allows
- Secure accounts, prevent misuse, and fix errors
- Send service emails such as login codes, welcome messages, and account notices
- Improve accuracy and usability, using de-identified or aggregated data where possible
- Respond to inquiries and demo requests
- Meet legal, regulatory, and contractual obligations
AI processing. MiRA uses speech-recognition and AI language models, run by our service providers, to process recordings and simulation conversations. These providers process data only to deliver the service to us under contract. [Confirm: our providers do not use customer data to train their models.] We do not use PHI to train AI models without the Institution's written permission.
AI output can be wrong. Transcripts, extracted findings, scores, and feedback are generated automatically. Review them before relying on them.
4. Health information and student records
Hospitals and health systems (HIPAA). When MiRA processes PHI for a hospital or other covered entity, we act as a business associate under a Business Associate Agreement (BAA). We use and disclose PHI only as the BAA and HIPAA allow. Requests to access or amend PHI should go to your healthcare organization, which we will support as required.
Nursing schools and universities (FERPA). When an educational Institution shares student education records with us, we act as a "school official" with a legitimate educational interest under our agreement. We use those records only to provide the service to that Institution, under its direct control, and do not re-disclose them except as FERPA and the agreement permit.
5. How we share information
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.
We share information only in these cases:
- Your Institution. Faculty see their students' assignments, completion, and performance. Hospital leadership sees aggregated or de-identified adoption and outcome reports unless the Institution's agreement provides otherwise.
- Service providers. Vendors that host, process, or support the service under confidentiality and security obligations, including cloud hosting, speech recognition, AI model, and email delivery providers. [List current providers or link to a subprocessor list.]
- Legal reasons. To comply with law or legal process, or to protect the rights, safety, or property of MiRA, users, or others.
- Business transfers. In a merger, acquisition, or sale of assets, subject to this policy and any BAA or Institution agreement.
- With your consent. For any other purpose you approve.
6. Retention, security, and cookies
Retention. We keep personal information while your account is active and as long as needed to provide the service, meet our agreements, and comply with law. Institution data is returned or deleted at the end of the agreement as that agreement specifies. [Set default retention periods.]
Security. We use administrative, technical, and physical safeguards, including encryption in transit and at rest, role-based access controls, audit logging, and secure U.S.-based cloud hosting. No system is perfectly secure. If a breach affects your information, we will notify you and your Institution as the law and our agreements require.
Cookies. Our website uses essential cookies to work. Analytics cookies load only if you allow them in the cookie banner. You can change your choice at any time using "Cookie Settings" in the site footer, or block cookies in your browser. The mobile app does not use advertising trackers.
7. Your choices and rights
You may ask to access, correct, download, or delete your personal information, or to close your account. If your account was created by an Institution, we may forward your request to it. Depending on where you live, including California, you may have additional rights under state law. We will not discriminate against you for using them.
To make a request, email hello@miraclinical.com. We may need to verify your identity first. You can opt out of non-essential emails using the unsubscribe link; service emails such as login codes will still be sent.
8. Children
MiRA is built for licensed nurses, nursing students, and healthcare educators. It is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
9. Changes to this policy
We may update this policy as our services change. We will post the new version here with a new effective date and notify users of material changes by email or in the app.
10. Contact us
MiRA Clinical, Inc.
Email: hello@miraclinical.com