Privacy Policy
Last updated: October 8, 2026
What the app does
Mirror Mirror provides private AI scores and suggestions about a submitted photo, including lighting, framing, expression, grooming and style. Photos are not publicly posted. The service does not identify people using biometrics or provide medical assessments.
Information we process
Account information includes your email, account identifier and acceptance of terms, managed through Amazon Web Services (AWS) Cognito. Photos and feedback are linked to your account. Apple product and transaction identifiers, transaction ownership digests and credit balances support purchase delivery and fraud prevention. We do not receive card details. Service activity, job identifiers, errors, model token counts and processing times help operate and troubleshoot the service.
Sharing and permission
Before each upload, the app asks for explicit permission to securely send that photo to OpenAI for AI scores and tips. Retake or Cancel does not upload the photo. AWS provides authentication, protected photo storage and service infrastructure; OpenAI processes the photo and prompt for the requested feedback; Apple processes purchases. Processing may occur outside your country, including the United States. We do not sell your data, run advertising or track you across other apps and websites.
Retention and security
Photos are transmitted over encrypted network connections. Cloud photos and feedback records are scheduled for expiration after one day; storage lifecycle expiration and account cleanup are asynchronous and can take additional time. The app requests that OpenAI not store the response. OpenAI may separately retain API content for abuse monitoring for up to 30 days, or longer for legal or safety reasons; API content is not used for model training by default. Current in-app history is excluded from device backups and remains on this device until cleared, signed out or deleted with the account. Older app versions or previously created device backups may retain separate copies. Account information remains until account deletion. Service logs are configured for approximately seven days. Purchase and credit records may be retained for delivery, accounting, legal obligations and fraud prevention. No system can guarantee absolute security.
Your choices
You can decline photo sharing, retake a photo or clear local history. Settings → Account includes account details, password management for password accounts, purchase help and Delete Account. Deletion removes the authentication account and requests associated cloud photo and feedback cleanup; necessary purchase records may remain. Contact support@ideaspike.com for access, correction, deletion assistance or questions about retained records. Your rights under applicable privacy law remain available.
Children and updates
The service is not designed for children under 13. Share only photos you are entitled to share, with permission from people pictured. We update this policy when processing changes; material photo-sharing changes require an updated in-app permission notice before upload.