Last updated: 8 July 2026
The short version: Mirror is designed so that we hold nothing about you. Your answers, results, and check-ins live on your device. There is no account for the core app, no email, no advertising, and no tracking.
Your questionnaire answers, computed scores, saved baselines, and daily check-ins are stored in local storage on your device only. They are made up of constructs — item answers, numeric scores, bands, and timestamps — never a name, an email address, or any other real-world identifier. Uninstalling the app, or using “Log out” in the profile menu, removes them.
Mirror’s profiles describe your thinking and working style from your own answers. They do not test for, screen for, or detect any medical condition, and no score is a medical result. We still treat everything derived from your answers as sensitive: it stays on-device, minimised, and under your control.
If you choose the paid coaching tier, an account is created with a passkey. It is deliberately pseudonymous: an opaque identifier and a cryptographic credential — no email, no password, no name, nothing that identifies you. The server holds that identifier, a credit balance and its audit ledger, bookings, and hashed recovery codes. You can delete this account at any time in the app (“Delete this account permanently”), which erases all of it.
If you ask the coach a free-text question while signed in to the coaching tier, the question and de-identified constructs from your profile (facet names, 0–100 scores, bands) are processed to compose a reply — never your raw answers, and never anything identifying. When a third-party language-model provider is used, it operates under a data-processing agreement with no-training terms. Without the coaching tier, the coach runs entirely on your device.
Purchases are handled by the App Store / Google Play and processed by RevenueCat against a pseudonymous identifier. We never see your payment details.
Because your data lives on your device, you can erase all of it at any time (profile menu → “Log out”, or uninstall). The optional coaching account can be deleted in-app. Under the UK GDPR / GDPR you also have rights of access, rectification, erasure, and portability — straightforward to honour when we hold nothing that identifies you.
Privacy questions: use the in-app contact page (profile menu → 1-2-1 coaching / contact), which composes an email from your own mail app. Data controller: Emergent Services Ltd (United Kingdom).