AI MIRROR
PRIVACY POLICY
Last Updated: Oct 28, 2026
AI Mirror is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI Mirror mobile application and related services (collectively, the "Service"). Polyverse Entertainment Inc. ("Polyverse") is responsible for the processing of Personal Information in the AI MIRROR app. Polyverse is a technology company based in 200 Continental Drive, Suite 401, 19713 Newark, DE, US and you can contact us via [email protected].
AI Mirror is an artificial intelligence-powered photo and video editing and enhancement application that uses advanced machine learning algorithms to transform your photos with various AI-driven effects, filters, and enhancements. We understand that when you use our Service, you are entrusting us with your personal information and visual content, and we take this responsibility seriously.
This Privacy Policy applies to all users of the AI Mirror application, whether you access it through mobile devices, web browsers, or other platforms. This Policy explains our data practices. Where processing requires your permission, we will request that permission separately before it begins. Receiving this Policy or using unrelated features does not itself grant permission for AI sharing, tracking, model training, or promotion.
We encourage you to read this Privacy Policy carefully and contact us if you have any questions or concerns about our privacy practices. We are committed to transparency in our data handling practices and will always strive to protect your privacy while providing you with the best possible user experience.
We may update this Privacy Policy according to changes in our service functions and measures concerning the protection of Personal Information. If we make changes to this Privacy Policy, we will update it through our App. Thus, you are advised to review this page periodically for any changes.
We will notify you of material changes through the App before they take effect and obtain a new permission where required before introducing a new recipient or purpose.
1. Information We Collect
1.1 Personal Information
For account access, we process the account identifier, authentication status, and the name, email address or profile image actually provided by your chosen sign-in method, such as Apple or Google. We do not receive your Apple or Google password. Guest use may be associated with a device identifier.
We process profile information that you choose to provide for an available feature. The fields and whether they are optional will be explained at collection.
Guest or device-linked identifiers may associate activity, purchases and Credits with your use of the Service. Signing in may associate eligible guest entitlements with your account through the migration flow explained in the app. A guest identifier is not anonymous merely because it does not contain your name.
We receive transaction and subscription information needed to verify purchases, deliver benefits, maintain Credit records and provide support. The applicable app store processes payment and manages your payment method. We also process information you voluntarily send when contacting support.
1.2 Content and Face Image Data
“Input” means the materials you provide for a request, such as selected photos, videos, prompts and reference images, together with audio or other attachments where the selected feature uses them. “Output” means the images, videos, replies or other results returned by the Service. Input and Output are referred to together as “Content.”
Cloud features upload the materials needed for the generation, editing or analysis you request. Depending on the feature, processing may include detecting facial landmarks, expressions and other visual features in selected media (“Face Image Data”). We do not use Face Image Data for biometric authentication, identity verification, or facial recognition. Facial landmark detection for editing is distinct from recognizing or authenticating a person. Applicable law may still treat facial information as sensitive or biometric information.
Before the first upload or AI request requiring consent, we explain the processing and obtain your affirmative consent. If you decline or close the notice, we do not upload or send Content for that request. Selecting a photo, granting device permissions, or proceeding through onboarding does not provide this consent. If analysis or upload takes place before generation, consent must be obtained before that earlier processing.
We use your uploaded media, prompts and generated Content only to provide the generation and editing you request, not for model training or public promotion. We do not sell Face Image Data or use it for marketing or advertising.
Input and Output follow the retention and deletion rules in Section 6. You can request deletion of your Content through available controls or by contacting support.
1.3 Device Information and Permissions
We process technical information relevant to operating and protecting the Service, including device and app information, operating system, IP address, identifiers, network information, crash reports and performance records. Information remains personal information while it can reasonably be linked to an account or device.
Camera access enables taking photos and recording video. Microphone access enables recording sound when required by a feature. Photo-library access enables selecting media or saving media you choose to export. We request permissions for the features that need them. Device permissions are separate from permission for cloud or third-party AI processing. If camera-frame cloud analysis is offered, it requires the relevant disclosure and consent before transmission.
1.4 Usage and Analytics
We process interactions such as feature use, page views, task status, session information and purchase-flow events to understand usage and improve reliability. Screenshot-event analytics may include the current page, displayed pop-up and associated model. This description concerns event metadata and does not itself authorize uploading a screenshot or its contents.
Product analytics and recommendations do not grant permission to use your Content for general AI model training. Advertising identifiers and cross-company tracking are subject to applicable consent, platform settings and regional privacy choices.
2. How We Use Information
2.1 Providing and Maintaining the Service
We use information to provide requested editing, generation and analysis; manage accounts and guest access; verify purchases and deliver subscriptions and Credits; save and deliver results; answer support requests; and troubleshoot errors.
2.2 Recommendations and Product Improvement
We use feature-usage information to recommend relevant tools and templates, understand preferences and improve usability, speed and stability. Where possible, we use aggregate statistics or genuinely anonymized information. General references to research, improvement or personalization do not authorize unrelated reuse of uploaded or generated Content.
2.3 Service Communications and Marketing
We may provide account, purchase, service and security notices. Promotional communications are subject to the permissions and choices required by applicable law. You can use the unsubscribe option provided with a communication, manage device notification permissions, or contact support. Refusing marketing does not prevent necessary service communications.
2.4 Security and Content Safety
We process information needed to prevent fraud, protect accounts and infrastructure, check requests against content restrictions, investigate reports and enforce our Terms. Access to Content for these purposes is limited to what is necessary and permitted by law.
3. Legal Bases for Processing
For users in the European Economic Area and the United Kingdom, relevant legal bases include performance of our contract for requested services and purchases; legitimate interests in security, fraud prevention and proportionate service improvement, balanced against your rights; compliance with legal obligations; and consent where required, including applicable sensitive-data processing and third-party AI sharing.
You may withdraw consent through the relevant available control or by contacting support. Withdrawal applies to future consent-based processing and does not make earlier lawful processing unlawful. Device permissions, AI consent and advertising choices serve different purposes and are not interchangeable.
4. Sharing and Disclosure
4.1 Service Providers and AI Recipients
We use providers for AI processing, hosting and storage, analytics, attribution, advertising, payment support and customer support according to their actual roles. We limit disclosure to information necessary for the disclosed purpose.
Before personal data is sent to a third-party AI provider, we obtain your clear consent covering that sharing. This Policy describes the relevant categories of recipients, data and purposes. A valid consent may cover subsequent requests within the disclosed scope; we obtain renewed consent before sharing outside that scope where required.
For AI-powered features, selected Content may be disclosed to third-party AI processing providers solely to provide the generation, editing or analysis requested by you. Depending on the feature, this may include photos, videos, prompts, reference materials, audio and visual or facial-feature data needed to produce the requested result.
Providers acting on our instructions are restricted to the disclosed purpose and must protect the information and support applicable deletion requests. If a recipient acts independently, its role, purposes and applicable choices must be identified. Your request does not grant providers independent permission to sell your Content or use it for general training or advertising.
Other service providers may process limited account, device, usage, transaction or support information for hosting, storage, analytics, attribution, advertising, payment support and customer support. These providers may use the information only for the applicable disclosed purpose and subject to appropriate contractual and security requirements.
4.2 Business Transfers
Information may be transferred in a merger, acquisition, reorganization or sale of assets subject to applicable law and continued protection. We will give required notice and explain available choices. A business transfer does not itself authorize a new use requiring your consent.
4.3 Legal and Protective Disclosures
We may disclose information where legally required or necessary and lawful to protect rights, safety and security. We assess requests for validity and scope and provide notice when required and legally permitted.
4.4 Anonymous Statistics
We may share aggregate information that cannot reasonably identify or single out a person or device. Account-linked records, pseudonymous identifiers, identifiable media are not treated as anonymous merely because names are removed.
5. Data Security
We use technical and organizational safeguards appropriate to the information and processing, including limiting access to authorized purposes. No storage or transmission method is completely secure. Where a personal-data breach requires notification, we will notify the relevant authorities and affected individuals within applicable legal deadlines.
Security measures do not mean that Content is never uploaded, stored or shared. The applicable purposes, recipients and retention periods are described separately in this Policy.
6. Retention and Deletion
6.1 Accounts and Account Deletion
We retain account information while needed to provide the Service, subject to your rights and the limits below. After an account-deletion request, you have 7 days to cancel through the account-restoration flow explained in the app. If you do not cancel, the account is scheduled for closure at the end of that period.
We delete the associated personal information from AI Mirror’s active systems, controlled backups and copies held by our third-party service providers within 30 days of your original account-deletion request, unless you cancel the request within the 7-day cancellation window, and subject to the limited legal-retention exceptions in Section 6.4.
Account deletion covers associated personal information and Content, including uploaded media, generated results and controlled provider copies, subject to the specific lawful exceptions in Section 6.4. The cancellation window does not restart or extend the published deletion deadline.
6.2 Content Retention and Deletion
For ordinary cloud generation and editing, Input includes the original and reference images, videos, audio, prompts and attachments you submit. We delete Input from AI Mirror’s active systems immediately after processing of that request ends. Temporary working files and facial or frame information derived solely for that request are deleted at the same time.
Output includes generated images, videos, audio, AI replies and other results returned to you. We retain Output in our active systems for 30 days after processing ends and then delete it. In Chat Edit, your messages and attachments are Input, and AI replies are Output. Save any Output you want to keep to your device.
Processing ends when a request completes successfully, or when processing stops following failure or cancellation. Input for an unstarted or abandoned request is deleted when the request is terminated and no further processing will take place. A task that is still rendering has not finished processing.
These ordinary retention rules apply to our active systems. Account deletion covers associated personal information in controlled backups and provider copies within the 30-day period in Section 6.1. It does not extend the ordinary retention periods above.
Copies you export to your device or share outside AI Mirror are managed separately by you or their holders. Removing an item from a screen does not by itself describe when all cloud copies are erased.
6.3 Analytics, Support and Transaction Records
We retain these records only for their disclosed purposes and applicable legal requirements. Records remain personal information while linked or reasonably linkable to you. Account deletion applies to linked records unless a specific lawful exception requires retention.
Usage and analytics records, including event-level records and aggregate reporting data, are retained for 30 days from the date they are recorded and then deleted. They are used for reporting and feature-usage analysis, not for AI model training. Account deletion includes records associated with your account or guest identity and does not restart or extend their ordinary retention period.
Support records are retained as needed to resolve your request and any related dispute. Security and transaction records are retained for their necessary security, purchase-verification and legal purposes. We determine these periods by the duration of the relevant service relationship, applicable recordkeeping duties and any specific legal claim or investigation. Any exception to an applicable deletion deadline is limited by Section 6.4.
6.4 Limited Legal Retention and Backups
Any exception to deletion must have a specific lawful basis, a defined data scope and a necessary duration. It does not permit further generation, training, advertising or promotion. Access is restricted, and retained data is deleted when the basis ends. Backup and provider deletion must follow the deadlines published above; restoring a backup must not restore data to ordinary use contrary to an existing deletion request.
7. Your Rights and Choices
Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction of processing, or objection to processing based on legitimate interests. You may withdraw consent and exercise applicable advertising choices. Contact [email protected]. We may verify requests proportionately to protect your information without requiring unnecessary new information.
You may start account deletion through the account-deletion option in the app, including while you have an active subscription. Guests may contact support for deletion of information linked to their guest identity. The timing and scope are governed by Section 6. Deleting the app, signing out and deleting an AI Mirror account do not cancel an Apple or Google Play subscription. Manage renewal separately through the store where you subscribed.
You can withdraw AI consent without deleting your whole account. Future processing requiring that consent will stop; only the features dependent on it may become unavailable. Deletion of existing data and withdrawal of permission are related but distinct actions.
You can manage camera, microphone, photo and notification permissions in your device settings. iOS tracking permission is separate from regional advertising opt-outs; refusing tracking must not be bypassed using another identifier.
8. International Transfers
AI Mirror operates internationally, and information may be processed outside your country, where privacy protections may differ. Where required, international transfers are subject to appropriate safeguards under applicable law. Contact us to request information about safeguards applicable to your data.
Data collected through the Service is stored in the United States. Because we operate internationally and use service providers in different locations, information may be transferred to and processed in countries other than the country where you live. For transfers from the European Economic Area or the United Kingdom, we rely on adequacy decisions, Standard Contractual Clauses or other legally approved safeguards where required.
9. Age Requirement and Children’s Privacy
The Service is intended only for individuals aged 18 or older. Individuals under 18 may not use the Service, even with parental or guardian consent. We do not knowingly collect personal information from users under 18.
If we learn that a person under 18 has used the Service or provided personal information as a user, we will take reasonable steps to suspend or terminate their access and delete the associated personal information as required by law. Contact [email protected] if you believe an underage person is using the Service.
The user-age requirement is separate from the permissions needed for another person depicted in uploaded Content. Such Content remains subject to the rights and safety restrictions in our Terms.
10. Third-Party Websites and Services
Independent websites you choose to visit may have their own privacy policies. Opening a link does not itself authorize us to send them your photos or other Content. AI providers and other parties processing information for AI Mirror remain covered by our disclosures and applicable responsibilities; describing them as third parties does not remove those responsibilities.
11. Regional Privacy Rights
11.1 California
Subject to applicable conditions, California residents may request information about collection, use and disclosure; access, correction or deletion; opt out of sale or sharing for cross-context behavioral advertising; and exercise applicable rights concerning sensitive personal information without unlawful discrimination.
Advertising disclosures of identifiers or app activity may constitute “sale” or “sharing” under California law even if no money is exchanged. Face Image Data and uploaded Content are not used for advertising targeting. You can submit an advertising opt-out or other privacy request to [email protected] and use applicable controls provided in the app or device settings. ATT and California opt-out rights are distinct.
During the preceding 12 months, the categories of personal information we collected included identifiers, internet or other electronic-network activity, commercial or transaction information, and approximate geolocation. We obtained this information directly from users and from advertising, marketing and analytics providers. For targeted advertising, identifiers and app-activity analytics may have been disclosed to advertising, marketing and analytics providers and may constitute a sale or sharing under California law. We honor applicable opt-out requests and legally recognized preference signals. Face Image Data and uploaded Content are not used for advertising targeting.
11.2 EEA and United Kingdom
In addition to the rights in Section 7, you may complain to your local data-protection authority. Contact us regarding the legal bases and safeguards relevant to your information.
11.3 Other Regions
Additional rights may apply where you live. We will handle requests under applicable law. Contact us for help with a regional privacy request.
12. Contact
Email: [email protected]
Mail: AI Mirror Privacy Team, Polyverse Entertainment Inc., 200 Continental Drive, Suite 401, Newark, DE 19713, United States.