How Mira handles your data.

Overview

Mira ("Mira", "we", "us") is an AI makeup try-on app operated by Rohan Dhiman. This policy describes what information Mira collects, how it is used, who it is shared with, and the choices you have. It applies to the Mira iOS and Android apps and to this website.

The short version

• Your selfie photo is sent to our backend only when you start a skin analysis or a makeup preview, so it can be forwarded to our AI provider to generate a result.
• We do not upload your photo to cloud storage and we do not keep a copy of it on our servers. It exists only in memory for the length of that one request, then it's gone.
• Your original photo and your generated looks are saved only on your own device, inside the app. They only leave your device if you tap "Save to gallery" or share them yourself.
• Your beauty profile (skin tone, undertone, skin type, etc.) is stored locally on your device. Your skin-analysis result specifically is also cached on our servers, tied to your account, so you don't have to redo it next time; it's deleted when you delete your account.
• We keep a small usage log per account (which feature you used and when) for abuse prevention and cost tracking. This log does not contain your photos.

Information we collect

• Account information. If you sign in with Google or Sign in with Apple, we receive basic profile details from that provider, such as your name and email address, in order to create and secure your Mira account.
• Photos you provide. When you take or choose a selfie photo for skin analysis or a makeup preview, that photo is processed as described in "How your photos are processed" below.
• Beauty profile and look history. Details such as skin tone, undertone, eye color, lip color, face shape, and skin type, along with your generated looks, tutorial content, and saved-look history, are stored locally in the app on your device. Your skin-analysis result (skin tone, undertone, eye color, lip color, face shape, skin type) is also cached on our servers, tied to your account, so you don't have to redo the analysis next time you open the app.
• Locale. Your device's language/region setting may be sent along with a request so that product suggestions are localized (for example, currency and retailer names). This value is used only to build that response and is not stored by us.
• Diagnostic and usage data. If the app crashes or encounters an error, technical details (device model, OS version, app version, and a stack trace) are sent to Firebase Crashlytics so we can fix the problem. We also record a lightweight usage entry per AI request (your account ID, which feature was used, an approximate cost/token figure, and a timestamp) for abuse prevention and cost control. This entry does not include your photo or its contents.

How your photos are processed

When you start a skin analysis or generate a makeup look, your photo is resized on your device and sent over an encrypted connection to Mira's backend (Firebase Cloud Functions). The backend forwards it to our AI processing provider, OpenAI, to analyze the image or generate the makeup preview, and the result is returned directly to your device in that same request.

Our backend does not write your photo, or the AI-generated preview image, to any database or file storage. Both images only exist in server memory for the few seconds it takes to complete that request, then they're gone. The one exception is your skin-analysis result (a short text summary: skin tone, undertone, eye color, lip color, face shape, skin type, not an image) which we do cache on our servers, tied to your account, so you don't have to redo the analysis next time. See "Beauty profile and look history" above. We do not use your photos to train AI models, and we do not use them for advertising or marketing.

Because OpenAI is the third party that performs the analysis and image generation, your photo is subject to OpenAI's own API data-handling terms while it is being processed by them (for example, retention for a limited period for abuse and safety monitoring). See openai.com/policies for their current terms. We do not control and are not responsible for OpenAI's independent data practices.

What stays on your device

Your original photo and every generated look are saved only inside Mira's private app storage on your own device, the same place your beauty profile and preferences live. None of this is synced to a server or cloud database. If you tap "Save to gallery," a copy of the generated image is written to your device's own photo library; that action is always something you choose to do, and it never happens automatically.

How we use information

• To generate makeup previews, skin analysis results, tutorial steps, and product suggestions that you request.
• To create and secure your Mira account and keep your session signed in.
• To detect abuse, enforce usage limits, and understand AI processing costs.
• To diagnose crashes and fix bugs.
• To respond to support requests you send us.

Who we share information with

We do not sell your personal information, and we do not share your photos with advertisers. We share limited information with the service providers that help us run Mira:

• OpenAI: receives the photo you submit for that single analysis or generation request, as described above.
• Google Firebase (Authentication, Cloud Functions, Crashlytics): provides sign-in, runs our backend, and collects crash/error diagnostics.
• Google / Apple sign-in: used only if you choose to sign in with those providers.
• RevenueCat: if you purchase the optional Mira Pro subscription, RevenueCat manages your subscription status and entitlement on our behalf; it receives your account ID and purchase/entitlement data from the App Store or Google Play, not your payment card details.

We may also disclose information if required by law, to protect the rights and safety of Mira or our users, or in connection with a merger, acquisition, or sale of assets.

Data retention

Photos are not retained by us at all (see above). Your beauty profile and generated looks remain on your device until you delete them in the app, clear the app's data, or uninstall the app. Your cached skin-analysis result and the lightweight usage log described above are tied to your account ID and are retained on our servers until you delete your account as described below; we do not currently auto-expire them.

Your choices and rights

• You choose which photo, if any, to submit for analysis or generation. Nothing is captured or processed in the background.
• You can permanently delete your account at any time from Profile → "Delete account" in the app. This immediately deletes your sign-in account, your locally stored beauty profile and saved looks, and the server-side usage log tied to your account. See our Delete Account page for details.
• Depending on where you live, you may have additional rights to access, correct, or port your information, or to object to certain processing. Contact us to exercise these rights.
• You can revoke Mira's access to your Google or Apple account at any time from that provider's account settings.

Canadian privacy rights

Mira is operated from Canada, so our handling of your personal information is subject to Canadian privacy law: the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and Quebec's Act respecting the protection of personal information in the private sector where applicable.

• Accountability. Rohan Dhiman is the person responsible for privacy compliance at Mira. Contact support@trymira.beauty with any privacy question or request.
• Access and correction. You can request a copy of the personal information we hold about you, or ask us to correct it. In practice, most of this data (your beauty profile, look history, saved photos) lives locally on your own device and is already visible to you in the app.
• Cross-border processing. As described above, your photo and account data are processed on infrastructure located in the United States. This means your information may become subject to the laws of the United States, including potential access by its courts, law enforcement, or national security authorities, for the time it is being processed there.
• Complaints. If you're unsatisfied with how we've handled your personal information, you can contact us directly first, and you also have the right to file a complaint with the Office of the Privacy Commissioner of Canada or, for matters connected to Quebec, the Commission d'accès à l'information du Québec.

Children's privacy

Mira is not directed at children and requires users to confirm they are at least 13 years old before using the app's photo features. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Security

We use encryption in transit (HTTPS) for requests between the app and our backend, and we rely on Firebase's access controls and secret management to protect backend credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International data transfer

Our backend and service providers operate infrastructure located in the United States. If you use Mira from outside the United States, your information, including the photo you submit for a single processing request, will be transferred to and processed in the United States.

In-app purchases

Mira includes a free trial of 3 watermarked AI generations per device before requiring a subscription. Beyond that, Mira offers an optional auto-renewing "Mira Pro" subscription for a higher AI generation quota without a watermark. Purchases are processed by the Apple App Store or Google Play, not by us directly, and subscription status/entitlement is managed through RevenueCat as described above. See our Terms of Use for renewal and cancellation details.

Changes to this policy

We may update this policy as Mira evolves. We will update the effective date above when we do, and for material changes we will provide additional notice, such as an in-app notification.

Contact us

Questions about this policy or your data can be sent to support@trymira.beauty.