Digital sanctuary

Security as sacred architecture

Your reflections are sacred. We built an invisible architecture so that every word you whisper here belongs to you alone. This is more than security — it is the craft of guarding the privacy of your becoming.

Read the full covenant See your controls

Sanctuary checklist

Invisible Shield · Record of Integrity · Careful stewardship · Consent-first sharing.

Encrypted in transit and at rest Audit logged

The Guarded Soul

We call our protection layer The Invisible Shield — a woven system of sealing, separation, and watchfulness that ensures every entry remains between you and the sanctuary.

Encrypted messages

Your messages are encrypted in transit and at rest. They are decrypted on our servers only to run the features you use (your replies, insights and reports), using an AI service provider. We never sell your data.

Separate vaults

We keep the encryption key apart from the stored messages. Your messages are decrypted on our servers only to run the features you use, using an AI service provider. We never sell your data.

Protective passage

Every request travels through shielded channels. We monitor for anomalies, cut off unsafe routes, and verify that the person knocking is truly you before anything is delivered.

Record of integrity

Trust is built on light. Access, export and deletion events are logged in the Record of Integrity so you can see how your data is handled.

Visible stewardship

We log access to your data, from automated systems and from people. Nothing slides in unnoticed.

Clinic-grade proofs

Linked providers receive clarity, not mystery. Actions they perform on shared data are logged.

Logged events

Access, export and deletion events are logged. You can ask us for a report of the events on your account.

Working with providers

Many of our members work directly with licensed providers, so we take care with how sharing and access are handled.

Access controls and logging

Our infrastructure uses encryption at rest, access logging and least-privilege access. The Mirror is a consumer app: we are not a HIPAA covered entity and we do not sign Business Associate Agreements.

Working with clients in a clinical setting?

Talk to us about your requirements. Use the clinic inquiry page and tell us what your practice needs.

Safety rituals

We log access to sensitive data, and abnormal behavior is investigated and documented.

True ownership

You hold the key to your own door. Export everything, lock it away, or burn the archive — the choice is always yours.

Take it with you

Generate a machine-readable export anytime. We package your reflections, insights, and supporting context so you can store or share them on your terms.

Erase the trail

Deletion is permanent. Remove individual entries or your entire account, and backups follow within thirty days.

Silence the messenger

Control reminders, emails, and notifications in one place. Opt out and the sanctuary goes quiet until you invite it back.

Consent-first architecture

Nothing moves without your blessing. Every sharing flow begins with you opening the door.

How consent shapes the product

Granular sharing: Toggle “Share with Provider” on a single journal entry or your full notebook. We notify linked clinicians and log the event.
Provider invitations: Clinicians must accept your invitation through a secure portal before they can see anything.
Care-team transparency: When a clinician downloads or reviews a shared insight, the Record of Integrity reflects it.
Safety escalations: If our system detects high-risk language, you control whether a provider is notified. We surface guidance — you decide.

Need formal language? Read the full privacy covenant, or talk to us about your requirements.

Stewardship practices

What we collect and why

Account essentials such as email, timezone, and login tokens keep your profile aligned with your schedule.
Your reflections, interviews, and optional context stay encrypted and exist only to power your reports and notebooks.
Diagnostics (crash logs, device model, OS version) help us maintain reliability — never to build advertising profiles.
Subscription receipts confirm billing compliance; full payment data stays with Stripe or Apple.

Data lives on U.S. servers with separate key management. EU/UK members are protected by contractual clauses and your explicit consent.

Your rights at a glance

Review or update account details inside Settings.
Request export or deletion anytime at support@trythemirror.com.
Report security concerns directly to security@trythemirror.com.
Contact your local regulator if we ever fall short — your jurisdictional rights are honored.

“A mind is a sanctuary. Our work is to keep the gates locked until you open them.”

— The Mirror Privacy Covenant

Need deeper detail on policies, audits, or provider workflows?

Visit the privacy FAQ