Your words are sealed before they rest.
Every reflection is wrapped inside an invisible shield the moment you send it. No engineer, marketer, or advertiser can see inside.
Sanctity of thought
Self-discovery requires total honesty, and honesty requires absolute safety. The Mirror is not a product; it is a sanctuary built so your reflections can remain yours alone.
We protect your inner world with a layered practice of stewardship. Think of it as our vows.
Every reflection is wrapped inside an invisible shield the moment you send it. No engineer, marketer, or advertiser can see inside.
We sell nothing, share nothing, and train nothing with your reflections. The Mirror exists to serve your growth, not to profit from your data.
Whenever your information is accessed, adjusted, or shared with your blessing, the moment is recorded in a permanent trail of integrity.
You hold the key to your own narrative. We designed sovereignty into the product so you can carry or erase your story at will.
Request a full export anytime. We hand you every journal, interview, and insight in a format you can store, print, or hand to a therapist.
Delete individual entries or your entire account. When you close the door, backups follow within thirty days — no residue, no shadow copy.
Toggle reminders, emails, and notifications whenever you need quiet. We listen to your preferences immediately.
Our AI remembers so it can guide you, not so it can market to you. We reference SocraticEngine insights only to reflect wisdom back to you.
Mood arcs, identity gaps, and recurring themes exist to show you patterns. They never leave your account unless you explicitly share them.
We do not rent or syndicate your emotional graph. The Mirror’s memory serves one person: you.
Insights feed your reports, reminders, and reflections. They are never used for ads or predictive profiles.
Many members link with clinicians. In that hybrid space, you remain the architect of consent.
Behind the calm UI lives the Record of Integrity — encryption, logging, and incident response designed to match clinical expectations.
We maintain HIPAA-grade processes, run penetration tests, and train every team member on sanctuary stewardship.
Access events, exports, and deletions are recorded in tamper-resistant logs. You can request a report at any time.
If something seems off, we isolate the event, notify the right people, and document the resolution. Transparency is not optional.
Sometimes you just need a checklist. Here is what we collect and why:
Email, name, timezone, and login tokens keep your account synchronized and secure.
Your messages fuel reports, reminders, and the SocraticEngine’s guidance. Nothing else.
Crash logs and device data help us improve reliability. No contact lists, no precise location, no ad IDs.
We track subscription status but never store full payment data. Stripe/Apple keep the numbers.
“We remember so you can grow — never so we can own you.”— The Mirror Privacy Covenant
Need the legal copy or a signed BAA? Want an audit log export?
Talk to the sanctuary stewards