Privacy Policy

1Who we are

The Mirror: Know Yourself ("The Mirror", "the app", "we", "us") is an iPhone app made and run by Fatma Bingül, an independent developer based in Türkiye. We are the party responsible for your personal information (the "data controller") when you use the app and this website.

Questions about privacy go to themirror.support@proton.me.

This policy explains what information the app collects, why, who it's shared with, how long it's kept, and the choices and rights you have. It applies to the app and to this website.

2What we collect

What you give us

• Your first name and your birth date, which you enter when you start. We use your birth date to personalise reflections, for example the season of the year you were born in.
• Your answers during setup, such as the tone you'd like The Mirror to use and what you hope to get from it.
• What you write in the app: your messages to The Mirror, the questions you bring to Mirror Call, your intentions, obstacles, steps, notes and letters in Manifest, the names and relationship labels you add in Mirror 777 (for example "Sam, friend"), and your pages in Chapters.
• Reports. If you report a reply from The Mirror, we receive that reply and the reason you choose.
• Messages to support. If you email us, we receive your email address and whatever you write.

What the app creates for you

• AI replies and writing: The Mirror's replies, daily echoes, cards, weekly letters, chapters and similar text written for you.
• The Mirror's memory: short notes the app keeps about what you've shared (for example, people who matter to you or something you're working on), so it can remember you between conversations. You can read, correct or delete these notes in the app.
• Your activity in the app: what you've opened, kept or completed (for example, which cards you turned or which intentions you marked), and simple counts such as how many messages you've sent today, so the app can work and apply daily limits.

Account and technical information

• An anonymous account ID, created by Google Firebase when you first open the app. It isn't linked to your name, email or phone number.
• Your time zone, so your day, reminders and weekly cards follow your local time.
• A notification token and your notification settings, if you allow notifications.
• Technical information such as app version, device type, operating system version, and error and server logs, which we need to keep the service running, secure and fixed when something breaks.

Purchase information

• If you subscribe or buy extra messages, Apple processes the payment. Through RevenueCat we receive your subscription status (for example: in a free trial, active, expired, or a billing issue), the product, the dates of the current period, and how many extra messages you have. We never receive your card details, your Apple ID email, or your billing address.

What we don't collect

We don't ask for or collect your email address, phone number, contacts, photos, camera, microphone, precise location, health app data or advertising identifier. We don't use advertising or analytics tools that track you across other companies' apps or websites.

3Sensitive things you choose to share

The Mirror is a place for reflection, so you may choose to write about personal things such as your feelings, mental health, relationships, family, beliefs or body. Some laws treat this as sensitive or special category information.

We only process it to give you the service you asked for: to reply to you, remember you, and write your reflections. We never use it for advertising, never sell it, and never use it to make decisions about you that have legal or similarly significant effects. Before you begin, the app asks for your explicit agreement to this. You can withdraw that agreement at any time in You › AI and your words, which deletes your account and data (because The Mirror can't work without it).

You decide what to share. Please don't share other people's sensitive details beyond what you're comfortable with, and never share passwords, card numbers or ID numbers.

4How we use it

We don't use what you write to train AI models, and we don't build advertising profiles.

Who reads your words. Your conversations are processed automatically. We don't read them, except: a reply you report (and the reason you give); when you ask us to look at something for support; when it's needed to investigate a serious safety or security problem or abuse of the service; or when the law requires it.

5How the AI works with your words

The Mirror's replies and written reflections are created by Claude, an AI model provided by Anthropic, PBC (USA). To write them, our servers send Anthropic the information needed for that task, which can include:

• your first name, birth date and setup answers;
• what you write to The Mirror, and in Manifest, Mirror 777 and Chapters;
• relevant notes from The Mirror's memory and your recent history in the app.

Anthropic processes this to generate the reply and returns it to us. Under its commercial terms, Anthropic does not use this data to train its models, and keeps it only for a limited time under its own data retention policy, for example to operate the service and detect misuse. You can read more at anthropic.com/legal/privacy.

The app shows you this before you begin and asks for your agreement. Mirror Call's coin, die and matches work on your phone and our servers without sending your question to the AI.

AI can be wrong, incomplete or miss context. The Mirror's replies are reflections to consider, not facts, advice or predictions. You can report any reply by pressing and holding it and choosing Report this reply.

6Who we share it with

We share information only with service providers that help us run The Mirror, and only what each needs. They process it on our behalf and under contracts that require them to protect it.

We may also share information if the law requires it (for example, a valid court order), if it's needed to protect someone's life or safety, or to protect our rights and enforce our terms. If The Mirror is ever transferred to a new owner, your information would move with it under this policy, and we'd tell you first.

We do not sell your personal information, and we do not share it for targeted or cross-context behavioural advertising.

Pass It On. If you send a Pass It On code from Mirror 777, the message and code are shared only with whoever you choose to send them to. The person who uses your code doesn't see your name or anything you wrote unless you put it in the message yourself.

7Where it's stored

Our database and servers run on Google Cloud in the United States (us-central1). Anthropic, RevenueCat and Netlify also process data in the United States. If you live outside the US, including in Türkiye, the EU or the UK, your information is transferred to the US.

We rely on your explicit consent, given before you begin, and on the safeguards our providers offer, such as standard contractual clauses and their data processing terms, to protect it during and after transfer.

8How long we keep it

• Your account and everything in it are kept while your account exists, so The Mirror can remember you and your book can grow.
• When you delete part of your data (The Mirror's memory together with your conversations, your book, Manifest, Mirror 777 or Mirror Call), it's deleted from our database straight away.
• When you delete your account, your profile, conversations, memory, intentions, cards, book, Mirror Calls, the Pass It On codes you sent, and your anonymous account are deleted from our database straight away. Server logs that may contain technical traces are deleted automatically, usually within 30 days.
• Anthropic keeps the data it receives only for the limited time set out in its own policy.
• Purchase records are kept by Apple and RevenueCat as long as they need for accounting, tax and legal reasons. Our copy is deleted with your account.
• Support emails are kept for up to two years after your last message, then deleted.
• Pass It On codes you've sent are deleted when you delete your account or Mirror 777, and stop working. Codes never contain anything you wrote.

9Your choices in the app

In You, at any time, you can:

• read, correct or delete what The Mirror remembers about you;
• delete one part on its own: The Mirror's memory together with your conversations, your book (Chapters), Manifest, Mirror 777 or Mirror Call;
• download your data as a file;
• delete your account and everything in it;
• withdraw your agreement to AI processing (this deletes your account, because The Mirror can't work without it);
• pause The Mirror, which stops notifications and stops it remembering anything new;
• turn notifications on or off (also possible in iPhone Settings).

Deleting your account doesn't cancel an Apple subscription. Cancel it in iPhone Settings › your name › Subscriptions.

10Your rights

Depending on where you live, you may have the right to:

• know what personal information we have about you and get a copy of it;
• correct information that's wrong;
• have your information deleted;
• receive your information in a portable format;
• object to or restrict some processing;
• withdraw your consent at any time (this doesn't affect what happened before);
• not be treated differently for using your rights;
• complain to a data protection authority.

Most of these you can do yourself, straight away, in the app (see section 9). For anything else, email themirror.support@proton.me. Because your account is anonymous and has no email attached, the fastest and safest way to act on your data is in the app. If you write to us, we may ask for details that help us find your account and confirm it's yours, such as roughly when you started and something you wrote; we will never ask for a password or card details. We reply within 30 days, or sooner where the law requires. You can use an authorised agent where the law allows. If we decline a request, we'll tell you why and how to appeal; you can appeal by replying to our answer.

11For US residents

This section applies to residents of California and other US states with privacy laws, and adds to the rest of this policy.

We collect these for the purposes in section 4, disclose them only to the service providers in section 6, and keep them as described in section 8. We have not sold or shared personal information (as those words are defined in California law) in the past 12 months, and we don't knowingly sell or share the information of anyone under 16. We use sensitive personal information only to provide the service you asked for, so there is no need to ask us to limit it. We don't respond differently to "Do Not Track" or Global Privacy Control signals, because we don't track you or sell or share your information in the first place.

12For people in Türkiye, the EU and the UK

Türkiye (KVKK). We process personal data under Law No. 6698 on the Protection of Personal Data. The data controller is Fatma Bingül. Your data is collected electronically through the app, for the purposes and on the legal grounds in section 4, and is transferred abroad to the providers in section 6 on the basis of your explicit consent and appropriate safeguards. Under Article 11 you may ask whether your data is processed, request information about it, learn the purpose and whether it's used accordingly, know the third parties it's transferred to in Türkiye or abroad, ask for correction, deletion or destruction and for those parties to be told, object to a result against you that comes only from automated analysis, and claim compensation for damage from unlawful processing. Send requests to our email above. You may also complain to the Personal Data Protection Authority (KVKK).

EU and UK (GDPR). The legal bases we rely on are shown in section 4. You can exercise the rights in section 10, and you can complain to the data protection authority where you live or work. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

13Children

The Mirror is for adults 18 and over, and you must confirm you're 18 or older before you begin. We don't knowingly collect information from anyone under 18. If we learn that someone under 18 has used the app, we'll delete their account and data. If you believe a child has used The Mirror, please tell us at themirror.support@proton.me.

14Security

Information travels between the app, our servers and our providers over encrypted connections (TLS), and is encrypted at rest by Google Cloud. Database rules stop anyone but you from reading your account through the app, and the parts that control your plan and limits can only be changed by our servers. Access to our systems is limited to what's needed to run the service. No system is perfectly secure, but if a breach ever affected your information, we'd tell you and the authorities as the law requires.

15This website

This website is hosted by Netlify, which keeps standard request logs (such as IP address, browser type and the page requested) for security and reliability. The site doesn't use cookies, analytics or advertising, and its fonts are served from this site, so your visit isn't shared with other companies.

16Changes to this policy

We may update this policy when the app or the law changes. We'll change the date at the top, and if a change is significant, we'll let you know in the app before it takes effect. If a change needs your consent, we'll ask for it.

17Contact us

Fatma Bingül, developer of The Mirror: Know Yourself
Türkiye
Email: themirror.support@proton.me