Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Journal Entries: Audio recordings, video recordings, and text that you create in the app
• Account Information: Email address, username, and profile settings
• User Preferences: Your character selections, friendship settings, and app customization choices
• Subscription Information: Payment details processed through Apple's App Store (we do not directly collect or store payment card information)

1.2 Automatically Collected Information

• Usage Data: How you interact with the app, features used, and time spent
• Device Information: Device type, operating system version, unique device identifiers
• Technical Data: IP address, crash reports, and performance diagnostics
• Analytics: Aggregated usage patterns to improve the app experience

2. How We Use Your Information

We use your information for the following purposes:

• Core App Functionality: To process your journal entries and generate AI character responses
• Memory Features: To power the Memory Gacha Machine and provide personalized insights
• Service Improvement: To enhance AI character personalities and improve response quality
• Account Management: To manage your subscription and authenticate your access
• Customer Support: To respond to your questions and resolve technical issues
• Legal Compliance: To comply with applicable laws and protect our legal rights

3. AI Processing and Data Security

3.1 AI Character Interactions

Your journal entries are processed using advanced AI technology to generate responses from your AI friends. This processing includes:

• Speech-to-text transcription for audio and video entries
• Natural language understanding to comprehend your emotions and thoughts
• Response generation tailored to each AI character's personality
• Long-term memory formation to maintain conversation continuity

3.2 Data Security Measures

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict access limitations - only essential personnel can access systems
• Secure Storage: Your data is stored on industry-standard secure cloud infrastructure
• Regular Audits: We conduct regular security assessments and vulnerability testing

4. Data Sharing and Third Parties

4.1 We DO NOT Sell Your Data

We will never sell, rent, or trade your personal information or journal entries to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in these specific circumstances:

• AI Service Providers: Trusted AI/ML providers who process your entries under strict confidentiality agreements (e.g., OpenAI, Anthropic)
• Cloud Infrastructure: Secure hosting providers (data remains encrypted)
• Payment Processors: Apple App Store for subscription management
• Analytics Services: Anonymized, aggregated data only (no personal content)
• Legal Requirements: When required by law or to protect safety

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access: Request a copy of all your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and all associated data
• Portability: Export your journal entries in a machine-readable format
• Object: Object to certain data processing activities

5.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

6. Data Retention

We retain your information as follows:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Data permanently deleted within 30 days of account deletion request
• Legal Obligations: Some data may be retained longer if required by law
• Backups: Deleted data may persist in backups for up to 90 days before permanent removal

7. Children's Privacy

Mirrorfy is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete it. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws, including GDPR and CCPA.

9. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Remember your language preferences
• Analyze website traffic and usage patterns
• Track marketing campaign effectiveness
• Improve user experience

You can control cookies through your browser settings.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy in the app
• Sending an email notification to your registered email address
• Displaying a prominent notice when you open the app

Your continued use of Mirrorfy after changes take effect constitutes acceptance of the updated policy.

11. Regional Privacy Rights

11.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to deletion
• Right to non-discrimination for exercising your rights

11.2 European Union Residents (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

12. Contact Us