Privacy policy
Last updated: June 2026
What Miruwa does
Miruwa provides monitoring support for chronic-care programs: it collects daily check-ins and vital readings, applies deterministic escalation rules, and surfaces results to the care team. Miruwa does not diagnose, prescribe, or replace clinical judgment.
Data we process
On behalf of the deploying healthcare organization, Miruwa processes: patient identification details entered by the care team (name, age, conditions, caregiver contact), WhatsApp messages and voice-note transcripts sent to the check-in number, vital readings (weight, blood pressure, heart rate, activity, sleep), and the resulting risk evaluations. An append-only audit trail records every access and action for accountability.
Where it lives and who sees it
Data is stored in the organization's dedicated database (Supabase Postgres) and is scoped to that organization. Access requires a staff account provisioned by the organization's administrator. Voice notes are transcribed and free-text messages are structured using AI services (speech-to-text and language models); these services process message content only and never decide clinical severity.
Retention and rights
The deploying organization controls retention and deletion. Patients and caregivers can direct questions, correction requests, or deletion requests to their care provider, who administers the data. Hong Kong's Personal Data (Privacy) Ordinance (PDPO) applies to deployments in Hong Kong.
Contact
For privacy questions about a specific deployment, contact the deploying organization's administrator.