Privacy

MIRRORSU is for people aged 18 and over. It is not designed for children. We do not knowingly collect information from children.

On this device. After you tap Save, the recording is written to this browser's IndexedDB, encrypted with AES-GCM. The matching key also lives on this device. Someone with this browser profile can decrypt it. A leftover database file without the key is not plaintext.

Audio is not uploaded because analysis failed. The order is: record → save → confirm saved → then optional words and insight. If you close the tab during processing, the recording remains.

You, on this browser. MIRRORSU staff cannot open your recordings — there is no shared audio bucket. A person with physical access to this unlocked device can play what you saved.

Optional server-side transcription is not enabled on this public beta. Audio is not sent to a vendor for transcription, even if you tick the optional consent box. Live captions, when the browser supports them, are produced by the browser vendor's speech engine and may leave the device according to that vendor's rules.

Insight is a word-list lookup on this device. We do not send audio off this device unless a transcription service is configured and you have opted in.

MIRRORSU does not use your audio or transcripts to train a model. We do not sell them. Because server transcription is not enabled on this public beta, there is no transcription vendor receiving your audio.

Until you delete that recording, delete the reflection, erase this device, or the browser throws the site data away (clearing Safari data, a new profile, private mode ending). Audio is not retained on a server because it is not stored on a server.

Yes. On a reflection: delete the recording (keeps words) or delete the reflection (removes both). On Profile: export, restore, erase this device, or delete the account. Erase and account-delete also drop the encrypted audio database. Skill answers and takeaways live in the same on-device store and go with export and erase.

A small on-device activity log (screens opened, save succeeded or failed, latency). Optional /api/telemetry beacons send only an area name, an event name, ok/fail, and latency — never a transcript, never audio. We do not send advertising analytics.

This device is wiped, including recordings. If you signed in to a hosted project, we delete the synced reflection metadata we can reach. The login itself is removed when a service role is configured.

No account required. Guest mode is the default. Email or Google sign-in appears only when a Supabase project is configured. That optional path can copy reflection metadata (themes, dates, transcripts you already have) so another device can show the same timeline. Raw audio is not the default sync payload.

Traffic to the site uses TLS. Audio at rest on this device is AES-GCM. This is not a HIPAA claim. MIRRORSU is not a covered entity and does not call itself a medical record.

You are writing about how you feel. That can be sensitive even when a product is not HIPAA-covered. The FTC Health Breach Notification Rule can still apply to health apps. We treat a loss of this data as a serious event, not an ordinary bug.

Microphone — only after explicit consent, and only if you choose to speak. You can refuse and type.

Notifications — only if you turn on an optional reminder. Scheduled on this device.

No advertising cookies. A theme preference and, if you sign in, session cookies for that host.

There is no public support email configured on this copy of MIRRORSU. You can export, restore, or erase your data from Profile.