Privacy Policy
Last updated: October 14, 2026
What the app does
Mirror Mirror provides private AI scores and suggestions about a submitted photo, including facial appearance, skin and makeup, with lighting and framing as contributing factors. Photos are not publicly posted. The service does not identify people using biometrics or provide medical assessments.
Information we process
Account information includes your email, account identifier and acceptance of terms, managed through Amazon Web Services (AWS) Cognito. Photos and feedback are linked to your account. Apple product and transaction identifiers and credit balances support purchase delivery, duplicate prevention and account balance management. We do not receive card details. We use usage and diagnostic information to operate and troubleshoot the service.
Sharing and permission
Before each upload, the app asks for permission to securely send the photo to OpenAI for the requested AI scores and tips. Retake or Cancel does not upload the photo. OpenAI processes the photo and the selected analysis language. AWS provides account authentication, protected photo storage and service infrastructure; Apple processes purchases. Processing may occur outside your country, including the United States. We do not sell your data, run advertising or track you across other apps and websites.
Retention and security
Photos are transmitted over encrypted connections. Cloud photos are scheduled for cleanup after one day, and feedback one day after its last update. Cleanup may take some processing time. Service diagnostics are kept for approximately seven days. Local history is excluded from device backups and remains until you clear it, sign out or delete your account. Account information remains until account deletion. Purchase and credit records are retained only as needed to deliver credits, prevent duplicate delivery and resolve purchase requests. OpenAI may retain API content for abuse monitoring for up to 30 days, subject to the exceptions described in its API data controls.
Your choices
You can decline photo sharing, retake a photo or clear local history. Settings → Account includes account details, password management for password accounts, purchase help and Delete Account. Deletion removes the authentication account and requests cleanup of associated cloud photos and feedback. Purchase records may remain to prevent duplicate credit delivery and resolve transaction status. Clearing only local history is not a cloud-account deletion request. Contact support@ideaspike.com for access, correction, deletion assistance or questions about retained records. Your rights under applicable privacy law remain available.
Children and updates
The service is not designed for children under 13. Share only photos you are entitled to share, with permission from people pictured. We update this policy when processing changes; material photo-sharing changes require an updated in-app permission notice before upload.
Website and support
Opening legal or reference links sends ordinary web-request information, such as an IP address and browser information, to the hosting provider. Information you choose to send to support is used to respond to your request. For information about our privacy practices and our service providers, including processing outside your country, contact the IDEASpike Privacy Contact at support@ideaspike.com.