Privacy Policy

1. Introduction

Welcome to Mirror Action Tracker (“Mirror”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

We are committed to protecting your privacy and handling your data with transparency. Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

Account Information

• Email Address: Used for account authentication and communication about your account

Habit & Behavior Data

• Behavior Titles: The names of habits and behaviors you create
• Routines: Grouped behaviors including triggers and rewards you define
• Completion Data: Records of when you complete behaviors (check-ins)
• Vote Counts: Cumulative completion counts for your behaviors

Device Information

• Push Notification Tokens: Device identifiers used to send you reminders and notifications (only if you enable notifications)

3. How We Use Your Information

We use the information we collect to:

• Provide Core Functionality: Enable you to create, track, and manage your habits and behaviors
• Authenticate Your Account: Verify your identity and secure access to your data
• Send Notifications: Deliver reminders and updates you've requested
• Sync Your Data: Keep your habits synchronized across sessions and devices
• Improve Our Service: Understand how the app is used to make improvements

4. Data Storage & Security

Where Your Data is Stored

Security Measures

• All data transmission is encrypted using HTTPS/TLS
• Authentication is handled through secure token-based systems
• Database access is restricted and monitored
• We do not store passwords directly; authentication is managed by Supabase Auth

5. Third-Party Services

Mirror uses the following third-party services to operate:

Supabase

We use Supabase for authentication and database services. Supabase processes your email and habit data on our behalf.

Privacy Policy: supabase.com/privacy

Expo

We use Expo for push notifications and over-the-air updates. Expo may receive device tokens and basic device information.

Privacy Policy: expo.dev/privacy

RevenueCat

We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat processes purchase history, subscription status, and anonymous device identifiers on our behalf. No personal habit or behavior data is shared with RevenueCat.

Privacy Policy: revenuecat.com/privacy

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can view all your habit data within the app
• Export: You can export your data using the export feature in Settings
• Deletion: You can delete your account and all associated data by contacting us or using the delete account feature
• Correction: You can edit or update your habits and behaviors at any time
• Portability: Your exported data is provided in a standard format you can use elsewhere

To exercise any of these rights, please contact us using the information below.

7. Data Retention

• Active Accounts: We retain your data for as long as your account is active
• Deleted Accounts: When you delete your account, we remove your personal data within 30 days
• Backups: Data may persist in encrypted backups for up to 90 days after deletion

8. Children's Privacy

Mirror is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the “Effective Date” at the top of this policy
• Sending an email notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

10. Contact Us