Privacy

Last updated: 8 October 2026

Face data

Mirror guide detects the position of your facial features so it can draw each guide in the right place. This section describes that processing in full.

What face data is collected. While the mirror is running, the app computes a set of 468 geometric landmark points for the current frame — numeric x, y and z coordinates that describe the outline of your eyes, brows, nose, lips and jaw. This is done on your device by Google’s MediaPipe Face Mesh, which is a software library that executes locally inside the app, not an online service. The app does not create a face template, a faceprint or any other biometric identifier, and it does not use face data to recognise, identify, authenticate or verify any person.

How it is used. The landmark coordinates are used for one purpose only: placing the makeup guides over the live image, and showing you simple proportions on screen, such as the height-to-width ratio of your face. Face data is never used for advertising, profiling, analytics, or to train any model.

Where it is stored. Nowhere. Face data exists only in your device’s memory, for as long as it takes to draw the frame it came from. It is never written to disk, never added to your account, never uploaded, and never leaves your device. Our servers and our database never receive it.

How long it is retained. The retention period is zero. Each frame’s landmarks are overwritten by the next frame’s and are released as soon as you turn the camera off, leave the mirror or close the app. No face data survives the frame it was computed from, so none is kept after a session.

Sharing with third parties. None. Face data is not shared with, sold to, or disclosed to any third party, including Google and including our hosting provider. Because the processing is local, there is no transmission to share. In the iOS app the MediaPipe library is bundled inside the app, so nothing is even downloaded while you use the mirror.

Deletion. Because no face data is stored, there is nothing to delete and you do not need to ask us for anything. Turning the camera off ends the processing immediately. Deleting your account removes the account data listed further down; it has no face data to remove, because none was ever kept.

Camera and photos

Mirror guide asks for camera access so it can draw makeup guides on the real points of your face. Face tracking runs entirely on your device. Frames are held in memory only for as long as it takes to draw the current frame, and are then discarded.

The same applies to a photo you choose to upload: it is read locally by the app and never transmitted.

If you tap Save PNG, the image is written to your own device. We never receive a copy.

Your skin tone

The Scan my skin feature reads the average colour of a few small areas of the current frame in order to suggest shades. The reading happens on your device, and the result is three small values: a colour in hexadecimal, a depth level from 0 to 5, and an undertone label (warm, cool, neutral or olive). If you are signed in, those three values are saved to your account so your shade suggestions follow you between devices. They describe a colour, not a face: they cannot be used to recognise you or to reconstruct your image. No image, frame or landmark is ever stored or sent.

If you create an account

Accounts are handled by Supabase, which stores the data on our behalf. What is stored:

• Your email address and the name you choose.
• Your password, held only as a cryptographic hash. Nobody, including us, can read it.
• If you sign in with Apple or Google, there is no password: we receive only your name and email address from them (with Apple, this can be a private relay address if you choose to hide yours), plus an account identifier. We never see your Apple or Google password.
• Your saved skin tone as described above, your starred looks and products, the looks you built yourself, your preferred eyeliner angle and length, and the last routine you opened.

That is all. No images, no video, no face data and no face measurements are stored in your account or anywhere on our servers. There is no profiling, no advertising, no analytics and no tracking across other apps or websites. We do not sell or share your data, and we do not use it to train anything.

You can use the mirror without an account, and nothing above is collected if you never sign up.

What loads from the internet

On the website, the face-tracking library and the typefaces are loaded from public content delivery networks (jsDelivr and Google Fonts) the first time you visit. Those services see your IP address, as they would for any website. In the iOS app the face-tracking library is bundled inside the app, so it is not downloaded at all.

Children

Mirror guide is not directed at children under 13, and we do not knowingly create accounts for them.

Your rights

You can delete your account at any time from inside the app, with no need to contact us. On iPad and on the web, tap Account in the top bar, then Delete my account. On a phone, open the panel at the bottom of the mirror, tap You, then Delete my account. After one confirmation step it removes your account and everything saved with it straight away, and it cannot be undone.

You can also ask for a copy of your data or ask us to correct it. Write to the address below and we will action it within 30 days.

Changes

If this notice changes in a way that matters, we will update the date at the top and say so in the app before the change takes effect.

Contact

Questions or requests: privacy@mirror-guide.com