Privacy Policy

Privacy by Design

Privacy is part of the architecture.

Health Mirror is designed to minimize the amount of information that leaves your device.

Your captured tongue image is prepared on your device. Health Mirror sends only the processed information needed for model inference to its remote inference service. The prediction data returned by that service is interpreted locally on your device to generate your wellness reflection.

Health Mirror does not use your wellness information for advertising, behavioral profiling, or cross-app tracking.

On Your Device

Most Health Mirror information remains local.

Depending on how you use Health Mirror, the app may create or store the following information on your device:

• Your captured tongue images.
• Your saved wellness reflections and journey history.
• Profile information you provide in the app.
• Your consent record.
• A randomly generated installation identifier used to distinguish this installation of Health Mirror.
• Cached membership information used to present your current membership experience.

Saved reflection records and profile information are stored locally in encrypted form. Images associated with saved reflections are stored within the app's local storage. Security-sensitive application records use device-protected storage where appropriate.

Health Mirror provides controls within the app for managing your locally stored information. You can clear your saved journey and its associated locally stored images while keeping your profile and consent record, or start fresh by removing your saved reflections, associated images, profile information, and consent record and returning to onboarding.

Camera

Camera access is used for tongue observation.

Health Mirror requests access to your device camera so you can capture a tongue image for reflection.

Health Mirror does not use camera access for advertising, background surveillance, or unrelated data collection.

Remote Inference

Processed image information is used only to produce a prediction.

Health Mirror does not upload the original captured image file to its inference service.

Before inference, the image is prepared on your device. The app sends processed numerical image data required by the model to the Health Mirror inference service over an encrypted network connection.

The inference service returns prediction data to the app. Health Mirror then performs its reflection analysis and interpretation locally on your device.

Health Mirror does not intentionally retain the processed image data submitted for inference or the returned prediction result on its inference servers after the request is processed.

The infrastructure used to operate the inference service may process ordinary network and operational information needed to deliver, secure, and troubleshoot the service, such as request timing, response status, network address information, and service-generated request identifiers.

Membership & Purchases

Store providers handle payment transactions.

If you purchase or manage a Health Mirror membership, the transaction is handled by the store provider associated with your device, such as Apple App Store or Google Play.

Health Mirror uses purchase and subscription information made available by the store provider to determine your membership status. The app reduces that information to the limited membership evidence needed to determine whether membership access is active, such as the membership product, entitlement status, purchase date, and applicable expiration date.

Store transaction identifiers and purchase tokens are not retained as part of Health Mirror's normalized membership state.

Health Mirror does not receive or store your full payment-card or bank-account information. Payment credentials are handled by the applicable store provider under its own terms and privacy practices.

Service Providers

Limited third-party processing supports core functionality.

Health Mirror relies on cloud infrastructure to process model inference requests. Membership purchases and subscription management are handled through the applicable Apple or Google store services.

These providers may process information necessary to deliver their respective services under their own privacy policies and legal obligations.

What Health Mirror Does Not Do

Your reflection is not an advertising profile.

Health Mirror is not designed around advertising or behavioral tracking.

• Health Mirror does not sell your personal information.
• Health Mirror does not use your wellness reflections for advertising.
• Health Mirror does not use advertising identifiers for cross-app tracking.
• Health Mirror does not include third-party advertising or analytics SDKs.
• Health Mirror does not request your location or contacts for its reflection experience.

Retention & Deletion

Local information remains under your control.

Saved journey history, associated locally stored images, profile information, and your consent record remain on your device until you remove them through Health Mirror or they are otherwise removed with the app's local storage.

You can clear your journey to remove your saved reflections and associated locally stored images while keeping your profile and consent record. You can also start fresh to remove your saved reflections, associated images, profile information, and consent record and return the app to onboarding.

Membership information may be re-established from the applicable store provider when Health Mirror verifies an existing subscription entitlement.

Security

Health Mirror uses layered safeguards.

Health Mirror uses encrypted local storage for saved reflection and profile information, device-protected storage for sensitive application records, and encrypted network connections for production inference requests.

No method of storage or transmission can be guaranteed to be completely secure. Health Mirror is designed to reduce unnecessary data exposure and to limit remote processing to what is required for the service to function.

Children

Health Mirror is not designed as a children's service.

Health Mirror is a wellness and educational tool and is not intentionally designed to collect personal information from children.

Changes

This policy may evolve with Health Mirror.

We may update this Privacy Policy as Health Mirror evolves, including when features, service providers, or legal requirements change. When we make material changes, we will update the effective date shown on this page.