Privacy Notice

1. Who we are

Mirra is operated by Aura Miel LLC. For the personal data described here, Aura Miel LLC acts as the data controller — we decide why and how your data is used. You can reach us at support@mirra.app.

2. What we collect and why

• Account data — name, email address and login credentials, to create and secure your account (performance of our contract with you).
• Wardrobe photos and item details — the garments you photograph and label, to suggest daily outfits (performance of contract).
• Routine and styling preferences — wake and leave times, timezone, reminder settings, styling rules such as colours you avoid, to build and time your daily plan (performance of contract).
• Support messages — what you send us, to answer you (legitimate interests).
• Usage and device data — pages viewed, approximate device and browser, IP address and error logs, for security, fraud prevention and product improvement (legitimate interests).
• Marketing emails — only if you opt in, and you can withdraw consent at any time (consent).

We may also process data where we have a legal obligation to do so, for example responding to lawful requests.

3. Who we share data with

• Service providers — hosting, database, storage, email delivery and error monitoring providers acting on our instructions.
• Paddle.com — our Merchant of Record, for the sale of the membership, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal data, and we do not use your photos to train AI models.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

We keep account, wardrobe and preference data while your account is open, and for up to 30 days after you close it so you can change your mind or export it. Billing records are kept as long as tax and accounting law requires. After that, data is deleted or anonymised.

6. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can also complain to your local data protection authority (in the UK, the ICO). Email support@mirra.app and we will respond within one month.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, private photo buckets accessible only to you, row-level database access rules, and restricted internal access.

8. Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences — these are required for the service to work. We do not use advertising cookies. Any analytics we add will be described here first, and you can manage or clear cookies at any time in your browser settings.