Privacy Policy

Effective August 2, 2026

Overview

This Privacy Policy explains how Rene Labs collects, uses, discloses, stores, and protects information in connection with Mirror, including the mobile application, websites, links, notifications, and related services.

By using Mirror, you acknowledge that we process information as described in this Privacy Policy. If you do not agree, do not use Mirror.

Information You Provide

We collect information you provide directly, such as your username, display name, profile details, posts, photos, prompts, comments, feedback, group membership, invitations, and any messages or support requests you send.

If you use Apple Sign in, we may receive an Apple user identifier, an email address or private relay address if Apple provides one, your name if you choose to share it, authentication metadata, and related account information.

When you create or interact with posts, we collect content and related metadata such as post IDs, timestamps, response windows, privacy settings, group associations, share links, feedback counts, and comment activity.

If you allow notifications, we collect push notification tokens, platform information, and notification delivery metadata so we can send account, post, group, comment, and feedback notifications.

Information Collected Automatically

We automatically collect technical and usage information such as device type, operating system, app version, language, time zone, crash logs, diagnostics, performance data, IP address, approximate location derived from IP address, and information about how you interact with Mirror.

We may collect identifiers used for authentication, security, fraud prevention, analytics, notifications, or app operations. These identifiers may include Supabase user IDs, anonymous session IDs, Apple identity IDs, device-related identifiers, push tokens, and generated post or share identifiers.

We may collect camera and photo library access status, but photos are collected only when you choose to capture, upload, or share them through Mirror.

How We Use Information

We use information to create and maintain accounts, authenticate users, connect Apple identities, restore linked accounts, provide posting and feedback features, display profiles, manage groups, process comments, generate share links, and maintain your history.

We use information to send push notifications, respond to support requests, troubleshoot bugs, monitor performance, improve safety, prevent abuse, enforce our terms, and improve Mirror.

We may use information to comply with legal obligations, respond to lawful requests, protect rights and safety, investigate suspicious activity, and defend against claims.

We may aggregate or de-identify information so it can no longer reasonably identify you, and use that information for analytics, research, product development, and business purposes.

Information Shared with Other Users

Some information is shared with other Mirror users as part of the app. For example, your username, display name, posts, photos, prompts, comments, feedback, group membership, and shared links may be visible to people in your group or to users who can access a public or shared post.

If you post to a community feature or share a link, information associated with that post may be accessible outside your private group depending on the settings you choose.

You should not submit content that you do not want other users to see or potentially save, copy, screenshot, or share.

Service Providers and Third Parties

We may share information with service providers that help us operate Mirror, including providers for authentication, databases, hosting, storage, image processing, push notifications, analytics, logging, app updates, customer support, security, and infrastructure.

Service providers are authorized to process information as needed to provide services to us and are expected to protect information according to their agreements with us.

We may share information with app stores, operating system providers, or third-party platforms when needed for sign-in, notifications, sharing, app distribution, security, or compliance with their rules.

Legal, Safety, and Business Transfers

We may disclose information if we believe it is necessary to comply with law, legal process, court orders, subpoenas, government requests, or regulatory obligations.

We may disclose information to enforce our terms, investigate violations, detect or prevent fraud, security, or technical issues, protect the rights, property, and safety of Rene Labs, users, or others, or respond to emergencies.

If Rene Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred or disclosed as part of that transaction.

Device Permissions

Mirror may request access to your camera and photo library so you can capture or select photos. You can control these permissions in your device settings.

Mirror may request permission to send push notifications. You can accept, decline, or later disable notifications in your device settings.

If you disable permissions, some features may not work as intended.

Cookies, Local Storage, and Similar Technologies

Mirror may use local storage, secure storage, device storage, app cache, cookies on web pages, and similar technologies to keep you signed in, store preferences, support sharing, improve performance, and understand usage.

You can clear some local data through device or browser settings, but doing so may sign you out, remove cached content, or affect app functionality.

Data Retention

We retain information for as long as reasonably necessary to provide Mirror, maintain your account, operate features, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain backups or business records.

Photos, posts, comments, group data, and profile information may remain while your account is active or as needed to provide shared features to other users.

If you request deletion, we will take reasonable steps to delete or de-identify information, subject to legal, security, anti-fraud, backup, and legitimate business needs. Some content may remain if it has been shared with others or retained in backups for a limited period.

Your Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information.

You may be able to update certain profile information directly in Mirror. You can manage app permissions and push notifications through your device settings.

To make a privacy request, contact us through the support contact listed in Mirror or in the applicable app store listing. We may need to verify your request before responding.

California Privacy Notice

If you are located in California, you may have rights under the California Consumer Privacy Act and related laws, including the right to know, delete, correct, and opt out of certain sharing or sales of personal information.

Mirror does not sell personal information for money. We also do not knowingly sell or share personal information of users under 16 as those terms are defined by California law.

We may disclose categories of personal information described in this policy to service providers and other parties for the business and operational purposes described above.

International and EEA/UK Users

If you are located in the European Economic Area, United Kingdom, or similar jurisdictions, our legal bases for processing may include your consent, performance of a contract, compliance with legal obligations, protection of vital interests, and our legitimate interests, such as operating, securing, improving, and promoting Mirror.

You may have rights to access, correct, delete, restrict, object, port your data, or withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection authority.

International Data Transfers

Information may be processed and stored in the United States or other countries where we or our service providers operate. These countries may have data protection laws that differ from those where you live.

By using Mirror, you understand that information may be transferred to and processed in countries outside your location.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your device, account access, and any credentials used to access Mirror.

Children and Child Safety Standards

Mirror is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information to Mirror, contact us so we can take appropriate steps.

Mirror and Rene Labs have zero tolerance for child sexual abuse and exploitation (CSAE) or child sexual abuse material (CSAM). Users must not use Mirror to create, upload, store, request, share, promote, or distribute content that sexually exploits, abuses, or endangers a child. Prohibited conduct includes child grooming, sextortion, sexualization of a minor, trafficking of a child for sexual purposes, and attempts to facilitate any such conduct.

Users can report a post or comment from its in-app Report or Block control and can submit child-safety concerns through Mirror’s in-app feedback feature. Do not download, copy, or redistribute suspected CSAM when making a report.

Rene Labs reviews reports and may remove content, restrict access, suspend features, or terminate accounts that violate these standards. When we obtain actual knowledge of apparent or confirmed CSAM, we will take appropriate action, including preserving and reporting relevant information to the National Center for Missing & Exploited Children or another appropriate regional authority when required by applicable law.

Mirror complies with applicable child-safety laws and cooperates with valid legal requests relating to child safety. If a child is in immediate danger, contact local law enforcement or emergency services. Other child-safety questions or reports can be sent through the support contact listed in Mirror or in the applicable app store listing.

Third-Party Links and Services

Mirror may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices, content, or security of third-party services.

You should review third-party privacy policies before providing information to them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through Mirror, the app store listing, or another reasonable method.

The updated policy will be effective when posted or otherwise made available unless a later effective date is stated. Your continued use of Mirror after an update means you acknowledge the updated policy.

Contact Us

Questions or requests about this Privacy Policy can be sent through the support contact listed in Mirror or in the applicable app store listing.