Private beta
Privacy and your data
Mirror holds unusually personal information. This page explains what is protected today, where human access remains technically possible, and what Mirror will never do with your record.
The honest access boundary today
David is currently Mirror’s only operator. The system prevents other users from seeing your information, but it is not yet end-to-end encrypted. That means David could technically access stored information through administrative systems. He will not inspect your personal content for support or product work without your permission.
Your account is separate from everyone else’s
Mirror’s database and private audio storage use account-level access controls. Another signed-in person should not be able to read, change, export, or delete your record.
Your personal information is not training data
Mirror does not use entries, recordings, transcripts, reflections, maps, corrections, onboarding answers, companion conversations, or saved personal memories to train a shared or general AI model. One person’s record never personalizes another person’s Mirror.
AI is used only when a feature needs it
When you request transcription, reflection, map, or companion features, Mirror sends the information needed for that request to its service providers. Text-generation requests require a zero-data-retention route. Completed provider transcripts are scheduled for deletion after Mirror safely stores your review copy.
Conversation and personal memory stay distinct
Companion messages are saved to your account. Lasting personal memories require your review and preserve original quotes, with user statements, tentative interpretations, and corrections labeled separately. Clearing chat hides conversation history and can be undone; it does not erase saved memory. Forgetting makes a memory inactive, while retaining its original conversation and correction history. You can export both from the companion’s memory controls. These are not permanent-deletion controls.
You remain in control
You can inspect, correct, export, move entries to Recently deleted, and restore them during the recovery window. Nothing from a voice recording becomes an entry until you approve the transcript.
Services involved
Mirror currently uses Supabase for accounts, database, and private file storage; Vercel for hosting and private AI routing; AssemblyAI for voice transcription; and Resend for account email. These services process only what their part of Mirror needs.
Questions, export, or deletion
During the private beta, contact David if you want help understanding a data flow or permanently deleting your account. You can export your active record from Mirror at any time.
Last updated September 24, 2026.