Magic Mirror Styling

1Definitions and Interpretation

For the purposes of this Policy:

• "Personal Information" means any information that identifies or can reasonably be used to identify a natural person, including but not limited to name, email address, device identifiers, image content, and usage data.
• "Processing" means any operation or set of operations performed on personal information, whether or not by automated means, including collection, recording, organization, storage, alteration, retrieval, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Subject" means the natural person to whom the personal information relates (i.e., you).
• "Sensitive Personal Information" may include, under applicable law, biometric data, precise location information, racial or ethnic origin, health data, and similar categories. The App does not intentionally collect such data unless you voluntarily provide it or it is required by law.

2Categories of Information We Collect

We collect the following categories of information based on the necessity of the Service and the extent of your interaction with us:

2.1 Information You Provide Directly

• Account and Registration Information: When you create an account, we may collect your name, email address, username, password (stored in encrypted form), profile photo, or other information you choose to provide.
• User-Generated Content: Photos, images, videos, audio, text prompts, editing parameters, style preferences, filter settings, layer data, and other creative content that you upload, capture, import, or create through the App. Such content may include faces, body features, scenes, or other identifiable elements of you or others.
• Communications and Support Information: Content, contact details, and related records when you contact us via in-app feedback, email ([email protected]), customer support systems, or other channels.
• Transaction and Subscription Information: If you purchase a subscription or make in-app purchases, we may collect transaction-related information such as order number, purchase time, and subscription status. Full payment card details are typically processed directly by third-party payment processors, and we do not store complete card numbers.

2.2 Information Collected Automatically

• Device and Technical Information: Device model, operating system version, unique device identifiers (such as IDFA, GAID, or Android ID), IP address, browser type and version, screen resolution, language preferences, time zone, network type, and similar data.
• Usage and Analytics Data: App launch and close times, feature usage frequency, click paths, session duration, page views, crash logs, performance metrics, and error reports.
• Location Information: Only with your explicit authorization may we collect approximate location data (e.g., country or city level) for content localization, compliance checks, or service optimization. We do not continuously track precise location without authorization.
• Cookies, SDKs, and Similar Technologies: We and third-party service providers may use cookies, local storage, pixel tags, mobile SDKs, and similar technologies to collect the above data.

2.3 Information Obtained from Third-Party Sources

• If you choose to log in using a third-party account (such as Apple, Google, or Facebook), we may receive basic profile information you authorize for sharing (e.g., name, email address, profile picture).
• Analytics and advertising partners may provide us with de-identified or aggregated usage data.
• Information from publicly available sources or commercial data providers, to the extent permitted by law.

3How We Use Your Information

We process personal information for the following purposes and on the corresponding legal bases:

• We process your information to provide the core services and features of the App, including fulfilling your requests, running AI functionalities, managing your account, and providing technical support. This processing is necessary for the performance of our contract with you.
• We may use your information to personalize and optimize your experience, such as recommending features based on your usage habits, adjusting the interface, or improving algorithm performance. This is based on our legitimate interests or, where required, your consent.
• We process usage and technical data for analysis, research, and product improvement purposes, including analyzing usage patterns, fixing bugs, and enhancing performance and security. This is carried out on the basis of our legitimate interests.
• We use certain information for security, fraud prevention, and abuse detection, including detecting anomalous behavior and protecting the integrity of our systems and users. This processing is based on our legitimate interests and, where applicable, legal obligations.
• Where you have provided consent or where permitted under legitimate interests, we may use your contact information to send product updates, feature notifications, and promotional communications. You may unsubscribe at any time.
• We process personal information as necessary to comply with legal obligations, respond to lawful requests from authorities, protect our rights, resolve disputes, and enforce our terms.

We adhere to the principle of data minimization and process personal information only to the extent necessary to achieve the purposes described above.

4Sharing, Disclosure, and Third-Party Processing

We do not sell your personal information. We may share or disclose information only in the following limited circumstances:

• Service Providers and Processors: We share information with cloud service providers, AI computing providers, data analytics providers, payment processors, customer support providers, email service providers, and other third parties who assist us in operating the Service. These parties are contractually bound to process data only in accordance with our written instructions and are subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, asset sale, reorganization, or similar transaction, your information may be transferred as part of the business assets. We will require the acquirer to continue to honor this Policy or provide equivalent protection.
• Legal and Regulatory Requirements: We may disclose information in response to court orders, subpoenas, or lawful requests from government or regulatory authorities.
• Protection of Rights and Safety: We may disclose information when necessary to protect the rights, property, or safety of the Company, our users, or the public, or to investigate fraud or security incidents.
• With Your Consent: We may share information in other circumstances with your explicit consent.

We may share de-identified, anonymized, or aggregated data that no longer constitutes personal information.

5International Data Transfers

Because our Service may rely on global infrastructure, your personal information may be transferred to, stored in, or processed in jurisdictions outside your country or region of residence (including but not limited to the United States, EU Member States, Singapore, and other Asia-Pacific locations).

For transfers of data from the European Economic Area (EEA), the United Kingdom, or Switzerland, we implement one or more of the following safeguards:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other appropriate safeguards consistent with Article 46 of the GDPR

You may request further details regarding these safeguards by contacting us.

6Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or for longer periods as required by applicable law. Typical retention periods (which may vary depending on circumstances) include:

• Account information: For the duration of the account and a reasonable period after account deletion (typically no more than 30-90 days for backup and compliance purposes).
• User-uploaded content: Deleted according to your settings after processing, or periodically cleaned when no active account exists, except where retention is required by law.
• Usage and log data: Generally retained for 12-24 months for analysis and security purposes.
• Transaction records: Retained as required by financial and tax laws (typically 5-7 years).
• Communication records: Retained for the period necessary to resolve disputes or meet legal requirements.

After account deletion, we will delete or irreversibly anonymize your personal data within a reasonable timeframe, except where retention is required by law or based on legitimate interests.

7Your Rights and Choices

Depending on the jurisdiction in which you reside, you may have the following rights under applicable law (subject to legal limitations and exceptions):

• Right of Access: To confirm whether we process your data and to obtain a copy.
• Right to Rectification: To request correction of inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): To request deletion of data under certain conditions.
• Right to Restriction of Processing: To request restriction of processing in specific circumstances.
• Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: To object to processing based on legitimate interests or to direct marketing.
• Right to Withdraw Consent: To withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing prior to withdrawal).
• CCPA/CPRA Rights (for California residents): Rights to know, delete, correct, opt out of "sale" or "sharing," limit the use and disclosure of sensitive personal information, and non-discrimination. We do not currently sell personal information.
• Other Jurisdiction-Specific Rights: Corresponding rights under LGPD, PDPA, the Australian Privacy Principles, and other applicable laws.

You may manage certain preferences (such as notifications, location permissions, and data deletion requests) through the in-app settings.

8Children's Privacy

The App is not directed to or intended for children under the age of 13 (or a higher age threshold as required by local law, such as 16 in certain EU Member States). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete such information as soon as possible. If you are a parent or guardian and believe we may hold information about your child, please contact us immediately at [email protected].

9Cookies, Tracking Technologies, and Third-Party Services

We use cookies and similar technologies to support functionality, analyze usage, and improve user experience. Certain third-party service providers (such as analytics tools) may also use their own tracking technologies. You can manage some cookies and tracking preferences through your device settings, browser preferences, or in-app options. Disabling certain technologies may affect the availability of some features.

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their respective privacy policies.

10Data Security Measures

We implement reasonable technical and organizational security measures, including but not limited to transmission encryption (TLS/SSL), encryption of data at rest, access controls and permission management, regular security assessments, employee confidentiality training, logging, and anomaly detection, to protect your personal information against unauthorized access, disclosure, alteration, or destruction.

Despite our efforts, no security system is completely secure. We cannot guarantee absolute security of data transmission or storage. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authorities and affected individuals as required by applicable law.

11Automated Decision-Making and Profiling

Certain AI features of the App may involve automated processing (for example, automatically recommending editing parameters or generating results based on image content). We do not generally make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. If you have questions about this or wish to request human intervention, please contact us.

12Changes to This Policy

We may update this Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Material changes will be communicated through prominent in-app notices, email, or other reasonable means in advance. The updated Policy will become effective on the stated effective date. Your continued use of the App after the effective date constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

13Contact Us

If you have any questions, comments, or requests regarding this Policy, our data processing practices, or the exercise of your rights, please contact us at:

We will review and respond to your inquiry as promptly as possible. For users in the European Union / European Economic Area, information regarding any designated representative may be requested via the above email address.