Privacy Policy

1. Data controller

The data controller is Hacer Berber Tekir (“we”, “us”). You can reach us about anything privacy-related at support@usemirrorai.com.

2. Data we collect

When you use the App, we process the following data:

• Account data: the unique user identifier Apple sends us when you use Sign in with Apple and, if you choose to share them, your name and email address. If you use “Hide My Email”, we only see Apple’s relay address.
• Style profile: the gender, style and colour preferences you pick during onboarding or later in settings.
• Outfit photos: photos you take with the camera or choose from your library for analysis. We only access the photos you select; we never browse your library.
• Outfit details and results: the context you add (event, time of day, country, who the outfit is for, your notes), the scores and comments the AI gives, the outfit’s colours and its date.
• Weather city: the city you choose for weather-aware suggestions. We never access your device’s location (GPS).
• Purchase data: your subscription status, plan, purchase dates, App Store transaction IDs, the number of analyses you have used and your credit balance. We never see or store your card details; payments are handled entirely by Apple.
• Technical logs: basic records our infrastructure keeps automatically when the App talks to our servers (e.g. IP address, request time, error logs).

The App contains no advertising or analytics tools, we do not track you across other apps or websites, and we do not sell your personal data.

3. How we use your data

• To create your account and keep you signed in
• To analyse and compare your outfits, and to tailor suggestions to your style profile, event and the weather
• To keep your outfit history and wardrobe so you can come back to them
• To manage your subscription, free allowance and credits, and to prevent abuse of usage limits
• To keep the service secure and to find and fix errors
• To answer support requests and meet our legal obligations

4. Legal bases

We rely on the following legal bases:

• Performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)): your account, analyses, outfit history and purchases.
• Legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)): security, abuse prevention and fixing errors.
• Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)): keeping records required by law.
• Explicit consent (KVKK Arts. 6 and 9; GDPR Arts. 6(1)(a) and 9(2)(a)): outfit photos can reveal your appearance and attire, which Turkish law may treat as a special category of personal data. We process your photos only when you choose to upload them for analysis. You can withdraw your consent at any time by deleting your photos or your account; this does not affect processing carried out before you withdrew it.

5. How your photos are handled

• Your photo travels over an encrypted connection to our server and from there to Anthropic’s Claude AI model for analysis.
• Once the analysis is complete, the photo is saved to your outfit history together with its results. Photos are kept in private storage that only your account can access, and are shown to you through short-lived, secure links.
• When you delete an outfit from your wardrobe, its photo is permanently deleted too.
• We do not use your photos to train AI models. Under its commercial terms, Anthropic does not use data sent through its API to train its models either.
• We do not run facial recognition on your photos or extract biometric data from them.
• Your photos are never shown to other users or made public. Sending your results to others through the share menu is entirely up to you.

6. Who we share data with

To run the service, we share your data with the following providers, and only as far as necessary:

• Supabase: database, authentication, file storage and server functions (hosting).
• Anthropic: AI analysis of your photos and outfit details. We send only what the analysis needs (photos, outfit context, style profile) — never your name or email address.
• Apple: Sign in with Apple, App Store payments and WeatherKit weather data (only the coordinates of the city you choose are sent).
• RevenueCat: subscription and purchase management (your in-app user ID and purchase data).
• Open-Meteo: city search (the text you type in the search box is sent directly from your device).

Beyond these, we share your data with public authorities only when the law requires it.

7. International transfers

Our providers’ servers may be located outside Türkiye (e.g. in the US and the European Union), so your personal data is transferred abroad. Transfers rely on appropriate safeguards such as standard contracts, and on your explicit consent where required, in line with KVKK Art. 9; under the GDPR they rely on safeguards such as the European Commission’s Standard Contractual Clauses.

8. How long we keep data

• Account and profile data: for as long as your account is open.
• Outfit photos and history: until you delete them or your account.
• Data sent to Anthropic for analysis: kept by Anthropic for the limited period stated in its terms for security and abuse prevention, then deleted.
• Purchase records: for as long as the law requires.
• Technical logs: for the short period set by our infrastructure provider.
• On your device: your language setting and chosen city are stored only on your device, until you delete your account or the App.

When you delete your account in the App, your data is deleted from our systems immediately. If you ask us by email, it is deleted or anonymised within 30 days. Removing it from backups may take a little longer.

9. Your rights

Under KVKK Art. 11 you have the right to:

• learn whether your personal data is processed and, if so, request information about it
• learn the purpose of processing and whether the data is used accordingly
• know the third parties in Türkiye or abroad to whom your data is transferred
• have incomplete or inaccurate data corrected
• have your data deleted or destroyed
• have third parties to whom your data was transferred notified of any correction or deletion
• object to an outcome against you that results solely from automated analysis
• claim compensation if you suffer damage from unlawful processing

Where the GDPR applies, you also have the right to data portability, to restrict processing and to object to processing. You can lodge a complaint with the Turkish Personal Data Protection Authority or, in the EU, with the data protection authority in your country.

To exercise your rights, email support@usemirrorai.com from the email address linked to your account. We will respond free of charge within 30 days. You can also edit your style profile in the App’s settings and delete outfits from your wardrobe at any time.

10. Deleting your account

You can permanently delete your account and all data linked to it (profile, outfit history, photos, permanent analyses) in the App under Profile > Delete account. This cannot be undone.

If you can’t access the App, you can also request deletion by emailing support@usemirrorai.com from the email address linked to your account.

Deleting your account does not cancel your App Store subscription. Cancel it separately on your iPhone under Settings > [your name] > Subscriptions.

11. Security

Your data is encrypted in transit (TLS). Each record in our database can be read only by the account that owns it, and photos are kept in private storage and served through expiring links. Still, no method is 100% secure. If a data breach occurs, we will notify you and the relevant authorities as the law requires.

12. Children

MirrorAI is not directed at children under 13, and we do not knowingly collect data from them. If you become aware that this has happened, let us know at support@usemirrorai.com and we will delete the data.

13. Changes

We may update this policy from time to time. We will announce material changes in the App, and the date of the current version always appears at the top of this page.

14. Contact

Data controller: Hacer Berber Tekir

Email: support@usemirrorai.com