Legal

Privacy Policy

Last updated: 2026-08-20 · Applies to the MyMiracle app and mymiracle.world

Contents

Data controller
Data we process
Purposes & legal basis
Children's personal data
Sharing & processors
Retention & transfers
Your rights
Security
Changes & contact

MyMiracle AB ("we", "us") respects your and your child's privacy. This policy explains how we process personal data when you use the MyMiracle app and the website mymiracle.world, in accordance with the EU General Data Protection Regulation (GDPR).

In short: We show no ads and we do not track you across other apps or websites. Data is used to make the app work — to store your memories and enable family sharing.

1. Data controller

MyMiracle AB, company reg. no. 559596-5145, Stora Tomegatan 4A, 223 51 Lund, Sweden, is the data controller. Contact: info@mittmirakel.com.

2. Data we process

Depending on how you use the service, we may process the following categories of data, which you provide or create in the app:

Category	Examples
Contact details	Name, email address, phone number, postal address
Account data	User ID, login and profile information
Content you create	Photos and videos, diary and chat entries, other user content
Audio	Voice recordings and speech-to-text in KidSaid
Location	Location (if you allow it) for weather in chat and to find nearby "miracle groups"
Sensitive data	Information about children and family you choose to save (e.g. health/vaccination notes)
Purchases	Purchase history for orders and in-app purchases

This corresponds to the data types we declare in the app's App Store privacy information. We do not process this data for tracking.

3. Purposes and legal basis

Providing the service (saving memories, family sharing, chat, KidSaid) — legal basis: performance of a contract.
Camera, microphone, photos, contacts, location and calendar are used only after your explicit device permission, for the features you choose.
Orders and purchases in the shop/app — legal basis: contract and legal obligation (accounting).
Support and safety (handling reports, preventing abuse) — legal basis: legitimate interest.
Notifications (push) — legal basis: consent/contract; can be turned off on your device.

4. Children's personal data

MyMiracle is intended to be used by adults to document children's lives, and it contains information about children. A child account is always created and controlled by a guardian, who is responsible for and consents to the processing of the child's data.

We process children's data solely to make the service work for the family — never for advertising or tracking. A guardian can view, change or delete the child's data at any time. A child's chat is limited to a contact list approved by the guardian, and content can be reported and blocked.

5. Sharing and processors

We never sell your data. Data is only shared with:

Other family members you invite into a child's space.
Google Firebase (Google Ireland Ltd / Google LLC) — our provider for authentication, database, file storage and push notifications, processing data on our behalf.
Payment and print partners to complete purchases and deliver ordered products.
Authorities where required by law.

A data processing agreement under the GDPR is in place with each processor.

6. Retention and transfers

Data is stored for as long as your account is active or as long as needed for the purposes described here, and as long as the law requires (e.g. accounting). When you delete your account, your personal data is removed or anonymised, except where we are legally required to keep it.

Some providers may process data outside the EU/EEA. Where that happens, we safeguard the level of protection using the European Commission's Standard Contractual Clauses or equivalent measures.

7. Your rights

Under the GDPR you have the right to request access to, rectification or erasure of your data, restriction of or objection to processing, and data portability. You can withdraw any consent at any time.

Request deletion: see the Delete account & data page.
Contact us: info@mittmirakel.com.
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Security

We use technical and organisational measures to protect the data, including encrypted transfer, access controls and secure cloud storage with Google Firebase. Only authorised staff have access, and only when needed.

9. Changes and contact

We may update this policy. Material changes will be announced in the app or on the website. For privacy questions, contact info@mittmirakel.com.