No black boxes.Not even ours.

Myranda is made by Myranda, Inc., a Delaware corporation, 57 Aldie St, Allston, Massachusetts 02134, United States. That company is the controller for the data described on this page. It is on the UK Information Commissioner's Office register under reference ZC173642. Questions, requests and complaints reach it at info@myranda.ai.

Representative in the United Kingdom under the UK GDPR: Zina Efchary, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, reachable at info@myranda.ai.

Representative in the European Union under the GDPR: Jasper Doeninghaus, Schenefelder Landstr. 12a, 22587 Hamburg, Germany, reachable at info@myranda.ai.

Myranda opens the websites you choose in its built-in browser and keeps a record of your own use of them, so that it can show you an honest picture of your week. All of this is stored on your phone in an encrypted vault whose key lives in the phone's secure storage, the keychain on iPhone and the Keystore on Android. Myranda works the same way on both:

• Feed history: the titles, creators and watch time of what you see in the browser, and the data exports you import from the platforms. Where a page carries them as text, the subtitles that played on a video and the opening of a news article you read are kept with the rest.
• Words in videos and pictures: while Words in videos is on, an app's own captions, or the words worked out on your phone from a video's sound; while What's in pictures is on, what the pictures in your feeds show and the words written in them, worked out on your phone. Both are on by default, each has its own switch in Settings, and both are kept encrypted with the rest.
• Where you scroll, only if you turn on Location data: points of where the phone was while an app was open inside Myranda, noted when the app opens and then every ten minutes, kept encrypted, and never noted while Myranda is closed.
• Message text: what the messages you open say, direct messages on Instagram, X, TikTok, LinkedIn and Facebook, and your chats with ChatGPT, Claude or Gemini, both sides. The app's first screen says so before you start. There is no separate switch: the text stays encrypted on your phone, and Delete everything removes it.
• What you tell Bubble about a post: the feelings you pick, kept encrypted with the post's words.
• Usage stats: seconds and posts counted per day, and the dates on which you opened Myranda.
• Your answers and settings: your name if you enter one, your age range if the phone reports one, your setup choices and preferences.
• Your sign-in, in the phone's secure storage. If you sign in with Apple on an iPhone, that includes the identifier Apple gives us and the email Apple shares.
• Your platform logins, in the device's browser storage. Delete everything signs you out of every platform too.
• On Android, if you turn on app redirects, the list of apps you picked. Android calls this an accessibility service. Myranda uses it only to notice when one of those apps opens, and then opens it inside Myranda instead. It cannot see your screen or anything you type, it keeps no record of what you open, and it sends nothing anywhere. The app asks before you turn it on, and you can turn it off in Android's settings at any time.
• If you compare feeds with a friend, the comparison and your friend's display name. The exchange goes from your phone to theirs through the sharing sheet you choose, and never through us.

Myranda sorts what you watched into topics, creators and patterns and builds your Digital Self from that. That is profiling, done on your phone, sent nowhere, and nothing is ever decided about you automatically from it.

Myranda has no server that stores your history. This is the complete list of what does reach us:

• App Health. Which Myranda screens you open and which controls you tap, which apps and news sites you open in Myranda and for how long, your answers to the app's short multiple-choice questions and the goals you set, how long a screen takes to load, whether the app froze or crashed (the kind of error, never its text), how many posts went by in a visit (a number, never which ones), how well the analysis on your phone works (of the posts you saw the day before, how many got a topic, a feeling, a look at their picture and their words, counted per app; how long each part took and what failed; and when you answer “How did this make you feel?” in the Rewind, only whether Bubble had named the same feeling first), which data exports you start, how far each one got and the language the platform's page was in, which of our notifications you opened, and the kind of phone: its system version, screen size, text size, language and, on Android, model name. Each comes as a name, a number or a yes or no, with its time and a random install ID, never a title, a creator, a feeling you picked or any text. It is on by default, the opening story in the app says so before anything is sent, and you can switch it off at any time in Settings. The app replaces the ID with a new one after 13 months at most and when you choose Delete everything, and never ties it to your account. Our server reads the country your connection comes from and adds it, and keeps your IP address only for a few minutes, to limit abuse; the analytics store never sees it. On a phone that reports its owner as under 16, App Health starts off.
• Topic fixes. Only if you said yes when the app asked. When you move a creator to another topic, we receive that creator's public username, the topics, the week and the app version, with no ID on it, hours later and on its own, so it cannot be tied to you. We use it only once five phones have made the same fix, and you can stop it in Settings. Once a day the app also asks our server for the list of creator topics enough people have fixed, which tells it your IP address and that the app is in use.
• Feedback. Your message, the Myranda screen you were on, the app version, your OS version, the install ID and your account ID, only when you send feedback from inside the app.
• Your Myranda account. If you sign in with email, Google or Apple, your email address (with Apple, the address Apple shares, which can be a private relay), a display name, an account ID, the app version, your platform and its system version, and a last-seen time, kept by our account service, a Supabase project hosted in the EU. If Apple hid your address, the app may ask once for one where we can send you news from Myranda; if you give it, it is kept with your account and used only for that. With Apple, your one-time code also passes through a signing service of ours that keeps nothing, so deleting your account can revoke Apple's sign-in.
• Purchases. If you buy Myranda Plus, Apple or Google take the payment, and RevenueCat keeps the purchase record, which plan and when it renews, under a random ID of its own, so the app can tell whether Plus is on. It never receives your Myranda account, your name or anything about your feed.
• Update check. Every time the app starts it asks the Expo update service whether a newer version exists. That tells Expo your IP address, your app version, your device type and a random ID that Expo's update library keeps on the phone until you delete the app; Delete everything does not reset it. If the app failed to start, the next check also sends Expo that error's message.
• Shortcut downloads. If you install one of Myranda's iPhone shortcuts, the phone downloads it from our server, which sees your IP address and which shortcut you chose.

A few more things go to other companies, not to us. To show covers and faces in your Digital Self and Rewind, Myranda opens the pages of posts and creators in your history at the platform, in the background and signed in as you, and on YouTube it searches for a channel by its name. The platform treats these as your own visits and searches: YouTube can keep the searches in your search history, and TikTok can show the visit to that creator if profile view history is on. In the same way, while you use Instagram, YouTube or TikTok inside Myranda, it loads the tabs next to the one you are on ahead of time, on TikTok also the profile of the creator on screen, and after you ask a platform for your data, it checks that platform's download page until your file is ready. What's in pictures fetches a post's picture again from the platform's own picture server when the phone does not have it, on Wi-Fi only and without your login. Words in videos fetches an app's caption file, or on Wi-Fi the video itself (from TikTok with your TikTok login, as its page would), from that platform, and downloads its speech model once, about 60 MB, from Hugging Face, which sees your IP address. If you dictate feedback or a note and the phone cannot turn speech into text itself, Apple or Google does it on its servers. The topic model ships inside the app. And the map on the Location data page gets its images from Apple on iPhone and Google on Android, so that company sees which part of the map is on your screen; your points are never part of that request.

When you open Instagram, YouTube, TikTok, X, LinkedIn, Facebook, Snapchat, ChatGPT, Claude, Gemini, Perplexity, a news site or any other site inside Myranda, your phone loads it directly from that company, exactly as it would in Safari or Chrome. You are logged into your own account with them, and what they collect while you use their services is governed by their privacy policies, not this one. Myranda does not proxy that traffic, never asks for your platform passwords and never sees them. Myranda is an independent app and is not affiliated with, endorsed by or sponsored by any of the sites it opens.

Everything Myranda processes on your phone, it processes because you asked it to, by opening a feed, importing an export or filling in the onboarding. In GDPR terms that is performance of the service you chose, Article 6(1)(b), and the same goes for a Plus purchase record and for the pages Myranda opens at the platforms to show you your Digital Self and Rewind. App Health rests on our legitimate interest in keeping the app working, Article 6(1)(f), and it stays inside the room the EU and UK rules leave for measuring your own app without a consent tap: names and numbers only, no tracking across apps or sites, no advertising, an ID that expires after 13 months, no IP address kept, and an off switch. In the UK that is the statistical-purposes exception in the Privacy and Electronic Communications Regulations; in the EU it is the audience-measurement conditions the French regulator set out. Feedback, topic fixes, an address for news and research studies rest on your consent, Article 6(1)(a), which you can withdraw at any time. No law obliges you to give us any of it.

We never sell your data and never share it for advertising. There are no advertising partners and no cross-app tracking. A few providers act only on our instructions and only on the narrow data above:

• Vercel runs the signing service and the endpoints that receive App Health and feedback.
• PostHog, on its EU cloud, stores the App Health counts and feedback so we can read them.
• Supabase, in the EU, is our account service.
• Expo answers the update check.
• RevenueCat keeps the Myranda Plus purchase record.
• Resend carries the sign-in code email, and our mail provider carries the email you send us.

If you sign in with Google or Apple, that company confirms who you are under its own privacy policy. Your age range, where the phone has one, comes from the App Store on iPhone and from Google Play on Android, under their own policies too.

The speech model comes from Hugging Face, and the map images from Apple or Google. Each sees your IP address when it serves them, under its own privacy policy.

Myranda, Inc. is a United States company, so the little that does reach us reaches the United States, and some providers sit outside the EU and the UK. Where a provider needs a safeguard of its own we use the European Commission's standard contractual clauses, and the UK addendum to them.

• Feed history and message text stay on your phone, encrypted, until you delete them or delete the app. Myranda makes no cloud backup of them and keeps them out of iCloud and Google backups of your phone.
• Usage stats on the phone delete themselves after 470 days, about 15 months.
• App Health events are filed under the install ID, never your account, and our analytics store keeps them for one year.
• Feedback is kept as long as we need to answer you and fix what you reported.
• Your account record is kept until you delete your account.
• A Plus purchase record is kept while the subscription runs and afterwards for as long as tax and accounting rules require.

In the app, Delete everything, at the end of Settings, removes your data from the phone, signs you out of every platform, and deletes your account record from our account service. Delete my data removes your history and keeps your account. If you signed in with Apple, Delete everything also tells Apple to revoke that connection. If you signed in with Google, you can also remove Myranda from the apps connected to your Google account. Deleting the app removes your history from the phone as well. If you no longer have the app, the delete your account page explains the email route.

The app can carry an opt-in research feature. None are open today and the section only appears when a study exists. Joining is per study, after seeing the exact totals that would leave your phone: minutes per day, counts and shares, never a title, a name, a message or a search. What you approve is sealed on your phone so that only the study team can open it, waits out a cancel window first, and nothing sends before enough people have joined. School studies have their own consent process, which you can read on the schools study page.

Myranda follows the age of digital consent where you live: the age at which the law lets you agree, without a parent, to an app using your data. That is 16 in some countries, 14 in others such as South Korea, and 13 in others such as the United Kingdom and the United States. Below that age a parent or guardian must agree first, and nobody under 13 can use Myranda. It is rated for older teenagers and adults in the App Store and on Google Play because it contains an unrestricted web browser. Where your phone can tell Myranda your age range, the app asks the store rather than you (the App Store on iPhone, Google Play on Android, which first asks you to share it), and the answer stays on the phone. Today the app asks a parent or guardian to confirm for anyone under 16, the highest of those ages, and App Health starts off for them. Where the phone cannot say and a child data-protection law applies where you live (the EU, EEA and UK, Brazil, China, South Korea), Myranda asks once whether you are under 13, 13 to 15, or 16 or older, never your exact age, and that answer stays on the phone too. Everywhere else it asks nothing. Students can also take part through a school study, with a parent's consent.

Under the GDPR and the UK GDPR you have the right to access, correct, delete, restrict, object to and take your data. In Myranda most of them are buttons: everything the app keeps is visible in the app, Download my data writes it to a file you keep, Delete my data removes your history, and Delete everything removes all of it, your account included. For the little we hold ourselves, write to info@myranda.ai and we will show it to you, correct it, delete it or stop using it, within a month. You can complain to your local data protection authority at any time. In the UK that is the Information Commissioner's Office.

Where we rely on our legitimate interest, you can object at any time: App Health stops with its switch in Settings, and for the rest, write to us.

If you live in California or another US state with its own privacy law, the same rights apply and the same email reaches us. We do not sell or share personal information as those laws define it, and we do not treat you differently for exercising a right.

Feed history

Titles, creators and watch time from feeds you open and exports you import

On your phone onlyEncryptedDeletable any time

Message text

Direct messages you open and your chats with ChatGPT, Claude or Gemini

On your phone onlyEncryptedDeletable any time

Words in videos and pictures

What videos say and what pictures show, worked out on your phone

On your phone onlyEncryptedHas its own switch

Location data

Where the phone was while an app was open in Myranda, only if you turn it on

On your phone onlyEncryptedHas its own switch

Rewind and Digital Self

Everything Myranda works out about you

On your phone onlyEncryptedDeletable any time

Settings and answers

Your name, your plans, your preferences

On your phone onlyDeletable any time

Platform logins

Your sessions on Instagram, YouTube and the other sites

On your phone onlyDeletable any time

App Health

Which screens, controls, apps and news sites you use and for how long, your answers and goals, how the app runs and your phone's kind, as names and numbers, with a random install ID

Reaches usHas its own switch

Topic fixes

A creator's public username and the topic you moved them to, with no ID, only if you said yes

Reaches usHas its own switch

Your Myranda account

Email, Google or Apple sign-in, a display name, an account ID

Reaches usDeletable any time

Feedback

The message you type, the screen you were on, app and OS version

Reaches usDeletable on request

Cover pictures and faces

Loaded in the background from the platforms' pages, signed in as you

Goes to the platform, not us

Speech model and map images

Downloaded from Hugging Face, Apple or Google

Seen by that company, not us

The vault on your phone is encrypted with a key held in the device's secure storage, and you can put Face ID, a fingerprint or your phone's screen lock in front of your history. No external security audit has been completed yet, and we will not claim one until it has. If you find a vulnerability, write to info@myranda.ai.

myranda.ai sets no cookies of its own and runs no analytics. That is why there is no cookie banner. The site is hosted by Cloudflare, which keeps ordinary server logs, with your IP address and the pages you requested, for security and for a short time.

• The fonts are served from this site, so no font provider sees your visit.
• The app demo on the home page runs inside your browser on sample data. It loads only from this site and keeps nothing after you leave the page.
• The intro video uses YouTube's privacy-enhanced player and loads only when you press play. From that moment YouTube, a Google company, sees your request and can store data in your browser.
• The waitlist form on this site keeps the email address you enter, the site's language and the time, in our EU database, the Supabase project that also holds the community board. We use the address only to tell you when Myranda is ready, then delete it, and sooner if you ask. Addresses given in our earlier waitlist form, hosted by Tally, a company in Belgium, are kept there on the same terms.
• The community board keeps what you post there in a database of ours, a Supabase project in the EU: the text, the name if you add one, the time, and a connection ID. Our server makes that ID from your internet connection's address with a secret key, so that each connection votes only once per post; the address itself is not stored, and the ID is never shown. Your votes and reports are filed under the same ID. Posts and names are public. All of it is kept while the post is on the board. To have a post of yours removed, write to us with its text. We do this to run a fair board, our legitimate interest under Article 6(1)(f).
• If you switch the site's language, your browser remembers the choice in its local storage.
• The contact form and the schools form open your own mail app with the text filled in. Nothing is sent to this site.
• Links to Instagram and LinkedIn take you to those sites, where their policies apply.
• Server logs rest on our legitimate interest in running a safe site, Article 6(1)(f), and so does answering an email you send us. The waitlist and the video rest on your consent, Article 6(1)(a), which you can withdraw at any time.

If this policy changes in a way that affects you, the app tells you, and the new version appears here and in the app's privacy overview with a new date.

Questions about this policy: info@myranda.ai. Read our Terms of Service and how to delete your account.