What Mirror Mirror collects
Account and contact details; profile, cosmetic and product preferences; products saved in My Haul; routine choices and feedback; photos you choose to capture for face, outfit, product or final-look analysis; spoken or typed questions you choose to ask about a routine step; approximate location-derived weather and country context; AI replies you explicitly report for safety review; and subscription entitlement or store-transaction metadata needed to provide paid access. Precise location is not requested and no location history is created.
How your information is used
We use this information to sign you in, sync your account across devices, analyse photos, personalise routines and product suggestions, show local weather and trend information, save looks, prevent abuse, troubleshoot errors and improve Mirror Mirror. Cosmetic observations are not a medical diagnosis or substitute for professional care.
AI and service providers
Mirror Mirror uses Supabase for account authentication and user-selected cloud storage; Google Cloud Run and Mirror Mirror’s private Liquid service for cosmetic image analysis and routine generation; Google Cloud Vertex AI Gemini for short, safety-bounded routine answers and public beauty-news summaries; Google Cloud Text-to-Speech for optional spoken guidance; and RevenueCat with Apple or Google for subscription entitlements and store purchases. When you tap the routine microphone, a short recording is transmitted securely with the current step context to produce the requested reply. The recording and ordinary question/reply history are processed transiently and are not saved to your account. If you explicitly report a reply as unsafe or offensive, the displayed question and reply are saved with the report so an authorised human reviewer can investigate abuse and improve safety. Providers receive only the information needed to deliver the feature you request. Face photos are not sent to RevenueCat, Apple, Google Play, public beauty-news processing or advertisers, and Mirror Mirror does not sell them.
Face photos, analysis and retention
When you choose the camera-based routine, Mirror Mirror collects the face photo you capture, device-detected face-region geometry such as a face boundary and visible landmark positions, and cosmetic observations produced from the image, such as visible skin-zone appearance. This data is used only to confirm that a face is framed, position cosmetic face zones, generate your personalised skincare or makeup routine, and compare the opening and final photos during the same Look. It is not used to identify you, match you against a population, authenticate you, infer a legal identity, or create an identity biometric template, and it is not used to train Mirror Mirror or third-party models. The opening face photo is held in app memory for the active routine and transmitted over an encrypted connection to Mirror Mirror’s private Liquid analysis service on Google Cloud. The private service keeps the image and job output only in process memory for the job and its recovery window, for no more than one hour, then removes them automatically; it does not write the raw analysis image to a persistent model or training store. Cosmetic routine results and non-identifying skin-zone history may be saved to your Mirror Mirror account until you delete the account. A photo is retained in Supabase storage only when you separately choose to save it as a profile photo, product photo or saved Look; it remains until you replace or delete it, delete the saved item, or delete your account. Account deletion at Profile › Me › Delete Account removes stored photos and associated account data. If you enable Face ID, Touch ID or fingerprint lock, the operating system performs that check and Mirror Mirror receives only whether it succeeded; the app never receives or stores the device biometric template.
Sharing and selling
Mirror Mirror does not sell your personal information. Information is shared only with service providers needed to operate the features you request, to comply with law, protect users and the service, or as part of a business transfer subject to appropriate safeguards.
Security and retention
Data is encrypted in transit and protected by account-level access controls. Raw routine-analysis photos and unreported routine questions are transient as described above. User-selected profile, product and saved-Look photos, AI safety reports and associated account data are retained while your account is active or until you delete the account, unless a limited safety, transaction, fraud-prevention or legal record must be retained for a longer period. Those limited transaction records do not contain your face photos. No system can promise absolute security. Anonymous aggregate statistics that cannot identify you may be retained.
Your choices
You can update profile information and preferences in the app. You can permanently delete your account from Profile › Me › Delete Account. This removes your account, profile, haul, saved looks, analysis history and stored photos. Account deletion does not cancel an App Store, Google Play or web subscription, which must be managed separately. Store providers and payment processors may retain transaction records where required. You may also use the public account-deletion page to request help.
Adults only and changes
MirrorMirror Assistant is intended only for people aged 18 or older. We do not knowingly permit minors to create accounts. We will update the date on this notice when material terms change and provide additional notice where required.
Get in touch
Contact
Questions, privacy requests or account-deletion help can be sent to:
hello@mirrormirrorapp.io