Privacy Policy

• Account details: your email address, a password (stored only as a secure hash by our sign-in provider), or the basic profile shared when you sign in with Google or Lovable.
• Profile: the display name and optional avatar image you choose.
• Memories you save: notes you write, web links you add (with the page title and readable text we fetch from that page), and documents you upload (PDF, TXT, Markdown) along with the text extracted from them.
• Conversations: the questions you ask MIRROR and its answers, saved so you can return to them.

Your data is stored in our hosted database and private file storage. Access rules in the database restrict every record and file to the account that created it, and uploaded files are not publicly accessible. No system is perfectly secure, but we design access so other users cannot read your memories.

To make memories searchable and to answer your questions, text from your memories and your questions is sent from our server to an AI service (provided through the Lovable AI Gateway, which routes requests to model providers such as Google and OpenAI). This is used to create search indexes and generate answers. MIRROR only answers from memories found in your own account. AI keys are kept on our server and never sent to your device.

• Hosting, database, sign-in and file storage: Lovable Cloud.
• AI processing: Lovable AI Gateway and the model providers it uses.
• Optional sign-in: Google or Lovable, if you choose to continue with either.
• Fonts: Google Fonts, which receives standard request information when pages load.
• Websites you save: when you add a link, our server visits that address to read the page.

We do not sell your data and do not show advertising. We do not use your memories for any purpose other than providing MIRROR to you.

Your data is kept while your account exists. You can delete individual memories at any time. You can permanently delete your account from Settings → Delete account; this removes your uploaded files, memories, conversations, profile and login. Deletion cannot be undone. Limited technical logs kept by our infrastructure providers may persist for a short period according to their own retention schedules. Full steps are on the Account Deletion page.

For privacy questions or data requests, email clicqr@gmail.com. Secondary contact: jasvinraj42@gmail.com.

If this policy changes, we will update this page and the date below.