MIRAGE APP · PRIVACY
Your information and choices
InterCare Dx, Inc. operates Mirage. Contact: info@intercare.com · (866) 767-4832 · 20280 South Vermont Avenue, Suite 215, Torrance, CA 90502, USA.
Information used by the app
Your registration email, account identifier, membership validity, hardware order status and issued sensor identifiers support sign-in, delivery and access. A phone installation identifier, platform, device model, operating system, app version and build support session security and troubleshooting.
Mirage can send exercise identifiers, start times, durations and completion status to the backend for account usage and service operation. Support tickets include your messages, app/device details, connection state and recent connection diagnostics when you submit an error report. Do not include passwords, payment details or unnecessary medical information.
Readings and local history
Live sensor readings and saved session history are used on your device for feedback and progress. This version does not upload the raw continuous reading history or Health Scan answers as its usage record. Diagnostics you choose to send to support may contain device and measurement details. Exported files and phone backups are separate copies under your control.
Service providers
Account and usage services run on AWS infrastructure in the United States. Configured email services deliver account and support messages. Streaming media uses AWS services. Payment providers hold their own transaction records. Android sensor connectivity uses iHealth SDK 2.15.1. Its license and device services include HTTPS requests to iHealth for authorization, sensor time synchronization and usage telemetry. The inspected telemetry model includes an SDK installation identifier, app identifier, phone model/OS/language/region, sensor model/device identifier, event type and timestamp. SDK diagnostic code also includes an HTTPS logging receiver. These manufacturer services are separate from optional Firebase analytics and Mirage support attachments; turning off those choices does not disable the manufacturer SDK. iHealth describes service maintenance, usage monitoring and improvements in its developer privacy notice (https://developer.ihealthlabs.com/privacy). Our static review did not identify raw pulse/SpO2 values in the inspected ordinary live-reading upload path; that finding is not a claim that the SDK never communicates.
Optional app usage analytics
Starting with app version 0.1.42, you can choose whether to share product usage with Google Analytics for Firebase in Help. This is off by default. If you enable it, Google receives fixed app navigation categories, a resettable app installation identifier, app version, basic device and operating-system information, and approximate geographic information derived from network information. We do not attach your account identity or send sensor readings, exercise results, Health Scan answers, support content or free-text input to Google Analytics.
Advertising identifiers, advertising personalization and automatic screen collection are disabled. Turning analytics off stops future collection and resets local analytics data and its installation identifier. Requesting account deletion also disables analytics on that installation. Resetting local analytics does not erase events already processed by Google; those follow the Analytics retention settings. This optional choice does not affect membership or sensor functionality.
No advertising tracking
The Mirage app does not include advertising identifiers, advertising pixels or cross-app advertising tracking in this source version. Account and sensor data is used to provide, secure and support Mirage. Optional usage analytics helps us improve the application.
Delete your account
Use Delete account in your app’s membership screen, or verify your email and request deletion here. We remove your profile, usage, device authorization and personal support content after stopping future membership charges. Minimal transaction, agreement and security references may be retained for accounting, disputes and legal obligations. Backups follow the applicable retention process. Remove app data on other devices and separately erase exported files.
Retention schedule
We keep personal information only for a documented service, security or legal purpose. The following schedule applies from October 22, 2026, with monthly review of records due for deletion or anonymization. A documented legal hold, unresolved payment dispute, safety complaint or mandatory regulatory record can require longer restricted retention; we release the hold and remove unnecessary data when that need ends.
- Accounts: while membership or an account service is active. For abandoned accounts, the retention period is one year after the latest subscription expires. We review records due for deletion monthly and give at least 30 days’ notice before closure; notice is arranged within that review process. Current memberships, unresolved orders and support cases are excluded from inactive-account closure.
- Exercise usage on our servers: 12 months from receipt. Raw continuous readings and Health Scan answers normally stay on your device; local session history keeps up to the latest 100 sessions until you delete it or remove app data.
- Inquiries: 12 months after the last response; support conversations: 24 months after closure. Optional diagnostic attachments are reviewed for removal within 30 days after the issue is resolved. Safety complaints requiring regulated complaint records follow the applicable controlled record schedule.
- Security and audit records: normally 12 months. Verification and recovery secrets expire sooner under their specific security limits. Enrollment codes expire after 10 minutes, verified enrollment authorizations after 30 minutes, and inactive enrollment challenges are removed after one day.
- Financial records: minimal order, payment, refund and agreement references are normally retained for seven years after the relevant financial year ends, where needed for accounting, disputes or legal duties. This is our operational schedule, not a claim that every record has a seven-year statutory requirement.
- Deletion requests: use Delete account in the app or our online deletion form. Personal profile, usage, device authorization and personal support content are removed after future charges are stopped; minimal legally necessary references can remain. Unresolved provider cancellation is tracked for retry and review.
- Backups: isolated from normal application use and restricted to recovery. Mirage-specific operational backups have a 35-day retention target. Shared infrastructure backups and legally retained archives follow their documented infrastructure or hold schedule. We reapply completed deletion requests before restored data returns to normal service. Your own device backups and exports remain under your control.
InterCare reviews retention exceptions monthly and does not use retained legal or backup copies to reactivate deleted accounts or for unrelated marketing. Contact info@intercare.com for access, correction, deletion or retention questions.
Access and correction
For access, correction or privacy questions, contact InterCare using the details above. Do not send a password or verification code by email. This service is intended for adults aged 18 or older.
Updated October 22, 2026. Optional analytics follows the retention period configured for the Mirage Analytics property; turning it off stops future collection. Contact InterCare for the current setting or a privacy request.