Draft
This page is being reviewed before launch and may change.
This policy explains what information Mirror Dear collects, why, and the choices you have. It covers this website and the Mirror Dear app. We’ve written it in plain language. If anything is unclear, email hello@mirrordear.com.
The short version
- We can’t read your diary. Entries are encrypted on your phone and synced with end-to-end encryption. Only your devices hold the key.
- The AI runs on your phone. Your words are never sent away to be processed and never used to train AI models.
- No ads, and we never sell your data.
- This website sets no tracking cookies and uses cookie-free analytics.
Who we are
Mirror Dear is a trading name of Software Serenade Ltd (“we”, “us”), the controller of the personal information described here. Software Serenade Ltd is a company registered in England and Wales (no. 15014413). Registered office: 1st Floor, Gallery Court, 28 Arcadia Avenue, London, United Kingdom, N3 2FG. We are registered with the Information Commissioner’s Office (ICO), registration reference ZB720209. You can reach us at hello@mirrordear.com.
On this website
Launch and newsletter sign-ups
When you join the launch or sign up for news, we collect your email address and, on the Join the launch page, your phone type (iPhone or Android). We use it to email you when Mirror Dear launches and, if you agreed, now and then with new guides and events.
We ask you to confirm your email address first (double opt-in): the email we send links to a page where you press a button to confirm, and where you can still choose whether to get news. Where a form offers news, the box starts ticked; untick it if you’d rather not. When you confirm, we send you one welcome email. Every email we send to a list has a one-click unsubscribe link. Our lawful basis is your consent, which you can withdraw at any time.
“Email it to me” in the try-it guide
If you ask us to email you your answers from the try-it guide, we send them once to the address you type, and store nothing. We don’t keep your answers, your drawing or your email address afterwards, and we don’t log them. Email is not end-to-end encrypted, so your answers travel the way any email does.
If you also tick the box for launch news, we treat your email address as a newsletter sign-up, as above.
Contact form and event sign-ups
When you contact us, we email your message to our team. If you ask for a reply, we first email you a link to confirm the address is yours; when you confirm, we send you a note to say we got your message and tell our team they can reply. When you save a place at an event, we use your name and email to send you the event details, and add them to that event’s list in Resend so we can send you reminders and any changes. We keep each event’s list for up to two years after the event, so we can follow up afterwards (a thank-you, a recap, a feedback form), answer questions, handle refunds and keep a record of who attended. Then we delete it. We don’t use it to send you news unless you signed up for news. When you save a place, we also receive anything you choose to tell us about access or dietary needs and how you heard about us, and whether you’re happy to appear in photos and video from the event. If you report a bug, we also receive any screenshot you attach and the name and version of your browser, to help us fix it. We keep these messages for up to two years, then delete them.
Payments
If you support Mirror Dear, Stripe processes your payment. We receive your name, email and the amount, never your card details. We use your name and email once, to send you a thank-you email. We keep payment records for as long as UK tax law requires.
Analytics and cookies
We use Cloudflare Web Analytics, which counts visits without cookies and without identifying you. Our spam protection, Cloudflare Turnstile, checks that a form is sent by a person; it doesn’t use tracking cookies. See our cookie policy.
In the app
- Your diary (entries, voice notes, drawings, photos), AI chats and summary reports are encrypted on your phone. We can’t read them.
- Account details: your email address and basic account settings, so you can sign in and recover your account.
- Anonymous usage: crashes and which screens are used, to fix problems. Never the content of your entries. You can switch this off in settings.
- Community: guides you publish, forum posts, event RSVPs and your profile are visible to other members.
Who we share information with
We use a small number of providers to run Mirror Dear, each under a data-processing agreement:
| Provider | What for |
|---|---|
| Cloudflare | Website hosting, spam protection and analytics |
| Resend | Sending emails, and keeping our mailing lists and event lists |
| Stripe | Payments |
Some providers are based in the United States. Where information leaves the UK, we rely on the UK’s adequacy regulations or the International Data Transfer Addendum.
We never sell your information, and we don’t share it with advertisers.
Your rights
You can ask to see, correct, export or delete the information we hold about you, or object to how we use it. In the app you can export everything as markdown or delete your account and all your data in one step. To ask about anything else, email hello@mirrordear.com. We’ll reply within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
Mirror Dear is for adults. We don’t knowingly collect information from anyone under 18.
Changes
If we change this policy in a way that matters, we’ll tell you by email or in the app before the change takes effect.