Legal · Privacy policy.

Privacy Policy

- last updated: may 16, 2026

1. Introduction

MirrorMe ("we," "our," or "us") is operated by Testarossa Labs, a company registered in Switzerland, located at Impact Hub Zurich, Sihlquai 131, 8005 Zurich, Switzerland. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the MirrorMe mobile application and website (collectively, "the Service").

We are committed to protecting your privacy in compliance with the Swiss Federal Act on Data Protection (FADP/nFADP) and the European Union General Data Protection Regulation (GDPR).

By using MirrorMe, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Data We Collect

2.1 Account Information

When you create an account, we collect your email address and display name. If you sign in via Apple or Google, we receive the information you authorize those providers to share (typically your email address and name).

2.2 Video Recordings

When you perform a confidence analysis, you record a short video (approximately 30 seconds) using your device camera. This video is sent to our servers via a secure, encrypted connection for AI-powered analysis. Our own AI models process the video. The video is deleted from our servers after processing. After processing by the AI, the video is not retained beyond the processing period.

2.3 Analysis Results

We store your Confidence Score, dimension scores, tier ranking, coaching tips, and shareable headline. These results are associated with your account and stored on our servers (PostgreSQL hosted on Railway).

2.4 Usage and Device Data

We collect anonymized usage analytics (pages viewed, features used, session duration, device information) to improve the Service. This data is collected via PostHog, hosted in the European Union (eu.posthog.com), and does not include video content or directly identifying personal data.

2.5 Purchase and Subscription Data

If you subscribe to a premium plan, your transaction data and subscription status are managed by RevenueCat. We do not store credit card details or full payment information. Payments are processed by the Apple App Store or Google Play Store.

2.6 Invite and Referral Data

If you use or share invite codes, we store referral codes and referral relationships associated with your account to manage the referral program and attribute rewards.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and improve the confidence analysis service
• To generate your Confidence Score and personalized coaching tips
• To enable sharing of score cards
• To manage your subscription and feature access
• To operate the invite and referral program
• To send transactional communications (password resets, etc.)
• To improve the Service through anonymized analytics
• To ensure the security and stability of the Service

4. Video Processing

Your video is sent to our servers via a secure, encrypted connection. Our own AI models analyze visual and audio signals to generate your Confidence Score. The video is deleted from our servers after processing. Your content is not used to train third-party models.

5. Local Storage

Your video recordings are stored locally on your device. When you perform an analysis, the video is temporarily uploaded to our servers for AI processing and deleted after processing. Analysis results (scores, coaching tips, history) are also cached locally on your device for offline access and performance. You can delete this local data at any time by clearing app data or uninstalling the app.

6. Third-Party Services

We use the following third-party services:

• Proprietary AI models — Video analysis and score generation. AI processing is handled entirely by us. The video is deleted after processing.
• PostHog (EU-hosted at eu.posthog.com) — Anonymized product analytics. No personal data or video content is shared. Device information is collected in anonymized form.
• RevenueCat — Subscription and in-app purchase management. Processes purchase tokens and subscription status.
• Railway — Backend hosting and PostgreSQL database where analysis results and account data are stored.

7. Data Security

We use industry-standard encryption (TLS 1.3) for all data in transit. Data at rest is encrypted. Access to production systems is restricted to authorized personnel with multi-factor authentication. We regularly review our security practices to ensure the protection of your data.

8. Your Rights

8.1 Under the GDPR (for EEA Residents)

If you are located in the European Economic Area, you have the following rights:

• Access — Request a copy of all personal data we hold about you
• Rectification — Correct inaccurate personal data
• Erasure — Request deletion of your personal data and account
• Portability — Receive your data in a structured, machine-readable format
• Restriction — Restrict processing of your personal data
• Objection — Object to processing based on legitimate interests
• Withdraw Consent — Withdraw your consent at any time where processing is based on consent

8.2 Under the Swiss FADP

If you are located in Switzerland, you have similar rights under the Swiss Federal Act on Data Protection (FADP/nFADP), including:

• Right of Access — Obtain information about the processing of your data
• Right to Data Portability — Receive your personal data or have it transferred to another controller
• Right to Rectification — Have inaccurate data corrected
• Right to Erasure — Request the deletion of your personal data

To exercise any of these rights, contact us at contact@getmirror.me. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with the relevant supervisory authority in your country of residence within the EEA.

9. Legal Basis for Processing

We process your personal data on the following legal bases:

• Performance of Contract — Processing is necessary to provide the Service you requested (confidence analysis, account management, subscription processing)
• Consent — When you record and submit a video for analysis, or when you accept optional cookies
• Legitimate Interests — Improving our Service, ensuring security, and preventing fraud, provided these interests do not override your rights
• Legal Obligation — Where we are required to process data by law

10. International Data Transfers

Your data may be transferred to and processed in countries outside of Switzerland and the EEA. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with the GDPR and Swiss FADP, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where available
• Other safeguards recognized under applicable law

PostHog is hosted within the European Union. Video processing by our AI models runs on our own infrastructure; no transfer to an external sub-processor is required for that step.

11. Data Retention

Account data and analysis results are retained as long as your account is active. Videos are uploaded to our servers for AI processing and deleted after processing. If you delete your account, all associated data is permanently removed from our servers immediately. Anonymized analytics data may be retained in aggregate form after account deletion.

12. Children's Privacy

MirrorMe is not intended for persons under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take immediate steps to delete it. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contact@getmirror.me.

13. Cookies

Our website uses cookies and similar technologies. For details on how we use cookies, please see our Cookie Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For privacy-related inquiries or to exercise your rights:
Company: Testarossa Labs
Address: Impact Hub Zurich, Sihlquai 131, 8005 Zurich, Switzerland
Email: contact@getmirror.me