Legal Center

1. Scope

This Privacy Policy explains how Mira collects, uses, stores, shares, transfers, and deletes personal data relating to Parents and children aged 6 to 15.

The Parent is the primary account holder. Children cannot independently register or provide standalone account consent.

2. Controller

The controller responsible for Mira is:

Unity of Pioneering Innovation and Outreach LLC
Commercial Registration No. 1619041
Bousher, Bousher, Muscat Governorate, Sultanate of Oman
P.O. Box 1451, Postal Code 133
Info@mira-stages.com

3. Information Mira Collects

3.1 Parent Information

Mira may collect:

1. Name.
2. Email address.
3. Mobile number.
4. Country or region.
5. Parent Account credentials and settings.
6. Government-issued identification information used for identity, age, or parental-consent verification.
7. Consent records, including date, time, document version, country, IP address, and device or browser information.
8. Support, safety, and privacy communications.

Mira should collect a copy of an identity document only where necessary for a defined verification method. Unless law requires otherwise, the raw copy should be deleted promptly after verification and replaced with a limited verification result and audit record.

An identity document may verify an adult's identity or age but does not necessarily prove that the adult is the child's legal guardian.

3.2 Child Information

Information is provided by the Parent or through a Parent-authorized Child Profile and may include:

1. Nickname or display name.
2. Age or age range.
3. Child Profile identifier.
4. Activities, participation, progress, and interaction history.
5. Photos, videos, captions, and other submitted media.
6. Internal Coins, rewards, and related activity.
7. Privacy, access, and sharing settings selected by the Parent.
8. Moderation, safety, and report records.

Mira does not require a child's legal name, government ID, home address, school, personal phone number, or personal email for the standard Child Profile.

3.3 Technical Information

Mira may collect:

1. IP address.
2. Browser, device, operating system, and language.
3. Login, security, session, and diagnostic logs.
4. Cookie or similar technology identifiers where permitted.
5. Crash, performance, and error information when relevant services are enabled.

Non-essential analytics or tracking will not be activated for child experiences before any consent required by applicable law.

4. Why Mira Uses Information

Mira may use personal data to:

1. Create and secure the Parent Account and Child Profiles.
2. Verify identity, age, consent, or authority where reasonably necessary.
3. Provide activities, media, Coins, settings, and requested platform features.
4. Apply parental controls and visibility choices.
5. Moderate content and protect children and other users.
6. Detect fraud, abuse, security incidents, and prohibited conduct.
7. Respond to support, privacy, and safety requests.
8. Maintain, troubleshoot, and improve service reliability.
9. Comply with legal obligations and enforce Mira's Terms.

Mira will not use child data for a new and incompatible purpose merely because the data is already stored.

5. Behavioral Analysis and Recommendations

Mira may in the future develop features that analyze a child's activities to identify behavioral or engagement patterns and provide insights or recommendations to the Parent.

Before activating such processing, Mira will:

1. Complete a child-focused privacy and safety impact assessment.
2. Define the precise data, purpose, logic, recipients, retention, and safeguards.
3. Provide a clear, just-in-time explanation to the Parent.
4. Obtain separate parental consent where consent is required.
5. Provide an available method to disable the feature and withdraw consent.
6. Avoid decisions with legal or similarly significant effects based solely on automated processing.

Current storage of activity and media for core platform functions does not grant Mira an unlimited right to use those records for future profiling, advertising, or general AI-model training.

Mira will not use identifiable child content to train a general-purpose or third-party AI model unless it first provides a specific notice and obtains any separate consent required by law.

6. Legal Grounds

Depending on the country and activity, Mira may rely on:

1. Performance of the contract with the Parent for core account and service functions.
2. Verifiable or explicit parental consent for child data and optional processing where required.
3. Legitimate interests, where permitted and not overridden by a child's rights, for narrowly tailored security, fraud prevention, and service integrity.
4. Compliance with legal obligations.
5. Protection of vital interests in an emergency.

Mira will not describe consent as optional where the service cannot function without the relevant core processing. Optional features will have separate choices where required.

7. Parental Consent

Before collecting child personal information that requires parental permission, Mira will provide direct notice and use a method reasonably designed to confirm that consent comes from the Parent.

The consent record may include:

1. Parent and Child Profile identifiers.
2. The exact consent language and document versions.
3. Date and time.
4. Consent method and verification status.
5. Country, IP address, and device or browser information.
6. Scope, status, withdrawal, and renewal history.

The Parent may withdraw consent through available account controls or by contacting Info@mira-stages.com. Withdrawal does not make earlier lawful processing unlawful, but Mira will stop consent-based processing and delete or restrict affected data unless another legal requirement applies.

8. Child Media

Photos and videos may reveal a child's face, voice, behavior, location metadata, or other personal information.

Mira will:

1. Keep Child Profiles and child media private by default.
2. Use separate parental controls for any sharing outside the private profile.
3. Remove or restrict prohibited or high-risk information where reasonably possible.
4. Strip unnecessary location metadata from media before wider display where technically feasible.
5. Not sell child media or use it for targeted advertising.

9. Disclosure and Service Providers

Mira may disclose limited data to contracted processors that provide:

1. European hosting and storage.
2. Security and infrastructure.
3. Email delivery.
4. Analytics and performance measurement.
5. Crash and error reporting.
6. Content moderation or customer support.
7. Payment processing if paid features are introduced.

Only active providers should be listed in a public subprocessor register before launch. Mira will contractually limit providers to documented purposes and prohibit independent marketing with child data.

Mira may also disclose information where reasonably necessary to comply with law, protect a child, investigate abuse, establish legal claims, or complete a corporate transaction with appropriate safeguards and notice.

Mira does not sell children's personal data.

10. International Transfers and European Hosting

Mira stores primary service data on servers located in Europe.

Because the Operator is established in Oman and users may be located worldwide, data may be accessed or transferred across national borders for support, security, legal compliance, or service operations.

Mira will use applicable transfer safeguards, contractual protections, risk assessments, and explicit consent where required. Before transferring personal data outside Oman, Mira will follow the Oman Personal Data Protection Law and its Executive Regulation, including applicable consent and adequacy requirements.

European hosting alone does not make all processing compliant with the GDPR or other privacy laws.

11. Retention

Mira retains personal data only for defined purposes and periods.

Before launch, Mira must publish a retention schedule covering at least:

Mira will not retain child data indefinitely for unspecified future analytics or profiling.

12. Security

Mira uses reasonable organizational and technical measures appropriate to the sensitivity of Parent and child data. Measures may include access controls, encryption, logging, least-privilege access, secure development, vendor review, incident response, and backup protection.

No system is completely secure. Parents should report suspected unauthorized access to Support@mira-stages.com.

13. Parent Rights

Subject to applicable law and verification, a Parent may request:

1. Access to Parent or child personal data.
2. Correction of inaccurate information.
3. Deletion of an account, Child Profile, media, or other data.
4. Restriction or objection to certain processing.
5. Withdrawal of consent.
6. A portable copy where applicable.
7. Information about processing and recipients.
8. Review of a significant automated decision, if any.
9. A complaint to the relevant data-protection authority.

Requests should be sent to Info@mira-stages.com. Mira may verify identity and parental authority before disclosing or deleting child information.

14. Children's Choices

Mira will provide age-appropriate explanations and tools where suitable, but the Parent controls the Parent Account and legal permissions.

Mira should consider the child's views and evolving capacity, especially for older children, while preserving parental control and applicable legal rights.

15. Cookies and Analytics

Mira may use strictly necessary cookies for authentication, security, preferences, and core operation.

Non-essential analytics, advertising, cross-site tracking, or similar technologies require a separate assessment and any consent mandated by the user's jurisdiction. Mira will not use child data for behaviorally targeted advertising.

16. Data Breaches

Mira will investigate suspected breaches and notify affected users and competent authorities where required by law. Notices may describe the incident, affected data, likely risks, protective actions, and contact details.

17. Changes to This Policy

Mira may update this Policy and will maintain a version and effective date.

Mira may notify Parents of non-material changes without requesting consent again.

Before a material change to previously authorized collection, use, disclosure, public sharing, retention, profiling, or third-party access to child data, Mira will provide direct notice and obtain renewed or separate parental consent where required. A policy update cannot retroactively create consent for a new purpose.

18. Contact and Complaints

Privacy and legal requests: Info@mira-stages.com
Support, security, and child-safety reports: Support@mira-stages.com

Parents may also complain to the competent privacy or consumer authority in their country where applicable.