Your messages are encrypted.
Your messages are encrypted in transit and at rest. They are decrypted on our servers only to run the features you use (your replies, insights and reports), using an AI service provider. We never sell your data.
Sanctity of thought
The sanctity of thought is our covenant.
Self-discovery requires total honesty, and honesty requires absolute safety. The Mirror is not a product; it is a sanctuary built so your reflections can remain yours alone.
The sanctuary promise
We protect your inner world with a layered practice of stewardship. Think of it as our vows.
Your story is never a commodity.
We never sell your data. The Mirror exists to serve your growth, not to profit from your data.
Every touch leaves a light.
Whenever your information is accessed, adjusted, or shared with your blessing, the moment is recorded in the Record of Integrity.
Ownership as a birthright
You hold the key to your own narrative. We designed sovereignty into the product so you can carry or erase your story at will.
Take your journey
Request a full export anytime. We hand you every journal, interview, and insight in a format you can store, print, or hand to a therapist.
Erase the record
Delete individual entries or your entire account. When you close the door, backups follow within thirty days — no residue, no shadow copy.
Silence the messenger
Toggle reminders, emails, and notifications whenever you need quiet. We listen to your preferences immediately.
The ethics of memory
Our AI remembers so it can guide you, not so it can market to you. We reference SocraticEngine insights only to reflect wisdom back to you.
Inner weather only
Mood arcs, identity gaps, and recurring themes exist to show you patterns. They never leave your account unless you explicitly share them.
No external mirrors
We do not rent or syndicate your emotional graph. The Mirror’s memory serves one person: you.
Growth, not targeting
Insights feed your reports, reminders, and reflections. They are never used for ads or predictive profiles.
Guarding the bridge
Many members link with clinicians. In that hybrid space, you remain the architect of consent.
Invisible rigor
Behind the calm UI lives the Record of Integrity: encryption, logging, and incident response.
How your data is handled
Your messages are encrypted in transit and at rest. They are decrypted on our servers only to run the features you use (your replies, insights and reports), using an AI service provider. Internal access is limited and logged. We never sell your data.
Logged events
Access, export and deletion events are logged. You can request a report at any time.
Rapid response
If something seems off, we isolate the event, notify the right people, and document the resolution. Transparency is not optional.
The essentials (plain language)
Sometimes you just need a checklist. Here is what we collect and why:
Account essentials
Email, name, timezone, and login tokens keep your account synchronized and secure.
Reflections & insights
Your messages fuel reports, reminders, and the SocraticEngine’s guidance. Nothing else.
Diagnostics only
Crash logs and device data help us improve reliability. No contact lists, no precise location, no ad IDs.
Billing receipts
We track subscription status but never store full payment data. Stripe/Apple keep the numbers.
Your immediate rights
- Update or correct data inside Settings.
- Export everything at any time.
- Delete entries or your entire account — irreversible by design.
- Unsubscribe from emails or in-product reminders with one click.
- Contact support@trythemirror.com for privacy requests.
- Report security issues to security@trythemirror.com.
“We remember so you can grow — never so we can own you.”— The Mirror Privacy Covenant
Need the legal copy? Want an audit log export? Working with clients in a clinical setting? Talk to us about your requirements.
Talk to the sanctuary stewards