← Back to Mirrow

Privacy Policy

Mirrow (the "Service", "we", "us") is an AI-powered personal decision assistant. This Privacy Policy explains what information we collect, how we use it, where it is stored, and the choices you have. By using Mirrow, you consent to the practices described below.

1. Information We Collect

We collect only the information necessary to provide and improve the Service.

1.1 Account Information

• When you register, we collect your email address and a password (stored as a salted hash, never in plain text).

1.2 Information You Provide

• Optional identity details you choose to fill in, such as gender, age, MBTI type, and city — used to calibrate your personal profile.
• Your goals, values, priorities, and any other context you share during conversations.

1.3 Conversations and AI Inputs

• The text of your conversations with the AI, including messages, memories, and derived persona insights, is collected so the Service can personalize its responses.

1.4 Birth Information (Optional Astrology Feature)

• If you use the optional astrology feature, you may provide your date, time, and place of birth. This data is used solely to generate astrological content for entertainment and self-exploration and is not required to use the core AI decision-assistant service.

1.5 Payment Information

• Payments are processed by Dodo Payment. We do not store your full card number or CVV on our servers. We may receive and store limited transaction records (e.g., plan type, billing status) associated with your account.

1.6 Device and Usage Data

• We collect anonymous usage analytics such as a randomly generated visitor ID and session ID, locale, approximate country (derived from the request, not stored as a precise IP), and device type (mobile/desktop/tablet). We do not store raw IP addresses.

2. How We Use Information

• To provide the Service: generate personalised AI responses, build your personal model, and produce insights and decision support.
• To operate and secure the platform: maintain accounts, detect abuse, and ensure service availability.
• To process payments: verify subscription status and deliver paid features.
• To improve user experience: understand aggregate usage patterns and refine the product.

We do not sell your personal data or use it for targeted advertising.

3. AI Data Processing and Third-Party Providers

To generate AI responses, relevant conversation fragments are sent to third-party AI inference providers through our API relay. Depending on configuration, these may include DeepSeek, ByteDance Doubao, SiliconFlow, and OpenAI. These providers process the data under their own terms and policies.

Our API relay and cloud infrastructure are hosted on Vercel, and cloud data is stored in a Neon (Postgres) database. Optional Notion sync, if you authorize it, sends your to-do items to your own Notion account under Notion's privacy policy.

4. Data Storage and Retention

• Local storage: If you are not signed in, your conversations, memories, and profile are stored locally in your browser's localStorage and remain on your device. Clearing browser data removes this data permanently.
• Cloud storage: If you sign in, your state (conversations, memories, profile, settings) is synced to and stored on our cloud database (Neon Postgres) so you can access it across devices. User-provided API keys are intentionally not stored in the cloud.
• Retention: We retain your cloud data for as long as your account is active. If you delete your account, we will delete your associated data, except where retention is required by law or for legitimate business purposes (such as financial records).

5. Data Sharing and Disclosure

• We share data only with the service providers described above (AI inference providers, Vercel, Neon, Dodo Payment, and optionally Notion), solely to operate the Service.
• We do not sell or rent your personal data to third parties.
• We may disclose information if required by law, court order, or to protect the rights and safety of Mirrow and its users.

6. Your Privacy Rights and Data Deletion

• You can view, edit, or delete your memories and profile at any time within the app.
• You can clear all local data by clearing your browser storage.
• You can request deletion of your account and associated cloud data by contacting us at the email below. We will respond within a reasonable timeframe.
• Depending on your jurisdiction, you may have rights to access, correct, restrict, or port your personal data.

7. Cookies and Analytics

• We use an essential session cookie (mirrow_session) to keep you signed in. This cookie is required for account functionality and is not used for advertising.
• We use localStorage to store your visitor ID, session ID, and (when not signed in) your conversation data locally.
• We do not currently use third-party advertising cookies or cross-site tracking.

8. International Data Transfers

Mirrow's infrastructure and service providers operate across multiple regions. By using the Service, you acknowledge that your data may be transferred to and processed in jurisdictions that may have different data protection laws than your own. We take steps to ensure that third-party providers handle data appropriately under their own policies.

9. Children's Privacy

Mirrow is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The "Last updated" date at the top reflects the latest revision.

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at 642044678@qq.com.