Privacy Policy

Mirror ("we", "our", or "us") is an AI-powered face analysis app. This policy explains what data we collect, how we use it, and your rights over it. We built Mirror with privacy in mind — your face images are never stored on our servers.

1. Data We Collect

We collect the following categories of data:

Account data — email address and display name when you sign up via Firebase Authentication.
Face images — photos you take in the app are sent to our server for analysis and immediately discarded. We do not store your face images.
Scan results — your scores, archetypes, and grooming recommendations are stored in your account so you can view history.
Purchase history — records of credit purchases and Pro subscriptions (processed by Google Play).
Usage data — app interactions, scan count, streak, and crash logs used to improve the app.

2. How We Use Your Data

To provide and personalise the Mirror experience.
To calculate your face score and generate your archetype and recommendations.
To manage your credits, Pro subscription, and purchase history.
To maintain your scan history and progress over time.
To diagnose crashes and improve app performance.

3. Face Images

Photos you take are transmitted securely to our analysis server (hosted on Render, USA) via HTTPS, analysed in real time, and immediately deleted. We do not retain, sell, or share your face images with any third party. No biometric identifiers are stored.

4. Third-Party Services

Mirror uses the following third-party services, each with their own privacy practices:

Firebase (Google) — authentication, database, and push notifications.
Google AdMob — banner ads shown to free users. AdMob may use device identifiers for ad personalisation.
Google Play Billing — processes all in-app purchases. We never see your payment card details.
Render — hosts our backend API server.

5. Data Sharing

We do not sell your personal data. We do not share your data with third parties except as required to operate the services listed above, or where required by law.

6. Data Retention

Your account data and scan history are retained as long as your account is active. You can request deletion at any time (see Section 8). Face images are deleted immediately after analysis and are never retained.

7. Security

All data is transmitted over HTTPS. Your account is protected by Firebase Authentication. Firestore security rules prevent any user from accessing another user's data.

8. Your Rights & Data Deletion

You have the right to:

Access the data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and all associated data.
Opt out of personalised ads via your device's ad settings.

To delete your account and all data, go to Mirror → Settings → Delete Account, or email us at abhinavsinghiitkanpur@gmail.com. We will process deletion requests within 30 days.

9. Children's Privacy

Mirror is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of Mirror after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at abhinavsinghiitkanpur@gmail.com.