Privacy Notice

• Mirror does not sell personal information or use reflection content for advertising.
• Reflection text, titles, AI conversations, names, emails, uploaded material, and safety labels are kept out of product analytics.
• Optional features explain what will move and where before you choose them.
• You can use Mirror without AI, export your archive, delete local entries, and leave the pilot.

Mirror is offered by Pragmatic Artistry Collective. The contact address at the bottom of this notice is the current path for privacy questions and requests.

By default, readable reflections, guided transcripts, titles, tags, locally calculated patterns, preferences, and content-free AI receipts are stored in the browser you use. Anyone with access to that unlocked browser may be able to see them.

This information stays until you delete it, clear browser storage, or the browser removes it. It does not automatically follow you to another browser or device.

When you enter a pilot code, Mirror processes a pseudonymous code identifier and label, a randomly generated browser access identifier, a signed access-session cookie, and ordinary request and security metadata. Your IP address is used temporarily to limit repeated access and sign-in email attempts.

• The access session normally expires after 30 days.
• Failed-attempt rate-limit records expire after 10 minutes.
• Browser-redemption records expire after up to 180 days.
• A version, timestamp, and pseudonymous code identifier may be retained for up to 400 days as evidence of pilot-notice acknowledgement.

These records do not contain reflection text.

Mirror records a limited set of behavioral events and non-identifying counts, such as opening the app, starting or completing a reflection, opening the Archive, using export, or visiting support. This helps operate the pilot and understand whether key paths work.

PostHog, when configured, receives only allowlisted events; automatic pageview capture, session replay, heatmaps, person profiles, and location enrichment are disabled. Vercel processes hosting, request, and basic analytics information. Neither service is intentionally sent reflection text or other private writing.

• AI features: The material identified in the confirmation is sent to OpenAI. Mirror requests no stored response history. OpenAI says API data is not used for model training by default, though abuse-monitoring data may be retained for up to 30 days.
• Encrypted backup and account continuity: Mirror encrypts the archive in the browser before upload. The service receives ciphertext and limited retrieval, revision, size, integrity, and timing metadata—not readable reflection content.
• Shared rooms: Material you intentionally share is encrypted in the browser. The service stores ciphertext, key envelopes, membership, status, and timing metadata. It does not open either person’s private Mirror archive.
• Feedback: Mirror stores the feedback you intentionally submit in a private founder queue. A reply email is stored only when you ask to be contacted. Attachments are not sent to AI or analytics.
• Export: Export creates a file on your device. What happens to the downloaded file is under your control.

Deleting local content cannot retract material already processed in a completed AI request, downloaded, or intentionally shared.

Depending on the feature and current pilot configuration, Mirror uses Vercel for hosting and basic analytics; OpenAI for deliberately chosen AI features; Supabase for optional account authentication, encrypted archive storage, encrypted shared spaces, and private feedback storage; PostHog for allowlisted product events; and server-side key-value storage for pilot limits, pseudonymous metrics, acknowledgement records, and optional sealed backups.

Providers also operate under their own infrastructure, security, and legal obligations. Mirror limits the information sent to what the selected function needs.

• Browser-local material remains until you delete it or browser storage is cleared.
• An optional sealed backup-vault copy expires one year after its latest save.
• Connected Archive keeps the current encrypted revision and up to two prior encrypted revisions, then prunes older revisions after successful sync.
• Feedback and related audit records are kept while needed to review the report, operate the pilot, and preserve an accurate change history.
• Hosting, analytics, account, and email providers retain operational information under their configured settings and legal obligations.

Contact the pilot team to ask about access, correction, or deletion of server-held pilot information. Disconnecting a browser stops Connected Archive there, but does not by itself delete the browser archive or encrypted server copy.

• Use Solo Reflection without AI.
• Review what an AI action will send before choosing it.
• Export an encrypted archive and delete individual local entries.
• Clear Mirror’s local browser storage or disconnect an authorized browser.
• Decline optional feedback and contact permission.
• After entering Mirror, review detailed controls on the Privacy & Data page. If you do not want to accept the current terms, you may still contact the pilot team below to leave or request deletion.

Mirror uses signed pilot sessions, same-origin checks for sensitive changes, browser-side encryption for optional continuity and sharing, and restricted server access. No system is perfectly secure. Protect your access code, Recovery Phrase, passphrase, device, browser profile, and downloaded backups.

The live pilot is for adults aged 18 and older. Mirror versions this notice. If a material change affects what information moves, why it is used, or who receives it, Mirror will present the updated notice before continued use.

The Pilot Terms explain participation, individual access, and the experimental nature of the service.