Privacy Policy
Last Updated: April 5, 2026
Introduction
Welcome to Mirrorly (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application (“App”).
By using Mirrorly, you agree to the collection and use of information in accordance with this policy.
- Device Identifier: We generate a unique anonymous identifier stored securely in your device’s Keychain to provide our services
- This identifier is not linked to your personal identity (no email, name, or account required)
- The identifier persists even if you delete and reinstall the App
- If you change devices or factory reset, a new identifier is created and previous data cannot be accessed
Usage Data
- Try-On History: Images you upload and virtual try-on results are stored to provide you with your wardrobe history.
- Credit Balance: We track your credit purchases and usage.
Images
- Human Photos: Photos you upload for virtual try-on.
- Garment Images: Clothing or accessory images you upload or select.
- Result Images: AI-generated try-on results.
Face & Biometric Data
To comply with privacy guidelines, we want to be fully transparent about how any photos containing facial features are handled.
1. Reasons for Storing Face Data
When you upload a full-body photo for virtual try-on, it may contain your facial features. We store this uploaded photo only to provide the “Wardrobe/History” feature, allowing you to view and compare your past virtual try-on results within the App.
2. Length of Time Face Data is Stored and Why
We do not store face data indefinitely. Your uploaded photos (containing face data) are stored on our secure servers for a maximum of 30 days from the date of the try-on, or until you manually delete them from your wardrobe (whichever occurs first).
Why this specific length of time? This 30-day period provides you with a reasonable window to review and download your recent virtual outfit generations, while ensuring that sensitive biometric information is not kept permanently or longer than necessary. After 30 days, these source photos are automatically and permanently deleted from our servers.
3. Which Third Parties We Share Face Data With
Your photo is shared strictly with one third-party service: EachLabs AI.
4. Reasons for Sharing Face Data with Third Parties
We share your photo with EachLabs AI exclusively for the purpose of processing the image through their virtual try-on AI models to generate the final clothing result.
5. Third-Party Data Storage Practices
Does EachLabs AI store your face data? No.
EachLabs AI processes your image in real-time. Once the AI generation is complete and the result is returned to our App, EachLabs AI immediately discards the data. They do not permanently store, log, or use your face data for training purposes. The data retention on the third-party side is strictly limited to the processing time.
User Consent
Before any images are sent to our AI provider for the first time, the App explicitly asks for your consent through an in-app disclosure screen. You must tap “I Agree & Continue” before any data is transmitted. If you decline, no data is sent.
We use the collected information to:
- Provide and maintain the virtual try-on service
- Process your credit purchases
- Store your try-on history
- Improve our AI technology and user experience
- Enforce our Terms of Service: We may monitor usage to prevent abuse, such as the generation of deepfakes, Non-Consensual Intimate Imagery (NCII), or terms violations.
- Legal Compliance: We may share your device identifier, IP address, and usage logs with law enforcement authorities if we believe in good faith that you have engaged in illegal activities.
Third-Party Services
We use the following third-party services:
Supabase
RevenueCat
EachLabs AI (Third-Party AI Processing)
- Purpose: Virtual try-on image processing using AI (Nano Banana 2 Edit API)
- Data Sent: Your uploaded photo (including facial features) and garment/accessory image
- How Data Is Processed: Images are sent via HTTPS encryption to EachLabs servers, where AI generates a virtual try-on result image
- Data Retention by EachLabs: EachLabs retains information as long as necessary to deliver the service. Images are processed in real-time and are not permanently stored after processing
- Data Protection: EachLabs commits to using reasonable and appropriate measures to keep content confidential and protected from unauthorized access (see EachLabs Privacy Policy)
- User Consent: The App asks for explicit user consent before sending any data to EachLabs for the first time
- Contact: For data protection inquiries to EachLabs: support@eachlabs.ai
Data Storage and Security
- Your images and data are stored securely on Supabase private servers
- All image storage buckets are private — images are accessible only via time-limited signed URLs
- We use industry-standard HTTPS encryption for all data transmission
- Device identifiers are stored in your device’s secure Keychain with
.whenUnlockedThisDeviceOnly protection
- All API communications between the App and our servers use JWT authentication
Data Retention
- Uploaded Photos: Retained for a maximum of 30 days, or until you delete them from your wardrobe or delete your account (whichever occurs first).
- Try-On Results: Retained for a maximum of 30 days, or until you delete them from your wardrobe or delete your account (whichever occurs first).
- AI Processing (EachLabs): Images are processed temporarily and not permanently stored by EachLabs
- Account Data: Retained as long as you use the App
- Deleted Data: Permanently removed from our servers within 30 days of deletion
- Account Deletion: Full data removal including all images, try-on history, transactions, and user records
Your Rights
You have the right to:
- Access: View all your stored try-on history in the App
- Delete: Remove individual try-ons from your wardrobe
- Data Portability: Download your result images to your device
- Account Deletion: Permanently delete your account and all associated data from within the App
- Withdraw Consent: You may stop using the virtual try-on feature at any time; however, previously processed data will remain until you delete it
Age Requirement
Mirrorly is strictly for users who are 18 years of age or older (or the age of legal majority in their jurisdiction). We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from someone under 18, we will take steps to securely delete such data immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.
If you have any questions about this Privacy Policy, please contact us:
Email: appmirrorlyapp@gmail.com
© 2026 Mirrorly. All rights reserved.