Privacy Policy

The protection of your personal information is important to Hofund Inc ("Mirror", "we", "us", or "our"). When you visit our website and use our services, you provide us with personal information. In this Privacy Policy, we explain what information we collect, how we use it, to whom we disclose it, and what rights you have in relation to it.

Please thoroughly review this Privacy Policy before you begin to use our Services. If there are any terms in this Privacy Policy that you do not agree with, please discontinue the use of our Sites and Services.

This Privacy Policy applies to all information collected through our website, web application, and any related services, sales, marketing, or events (collectively referred to as the "Sites").

What Information Do We Collect?

The information we collect depends on the context of your interactions with us, the choices you make, and the features you use. We collect information that you voluntarily provide to us and information we obtain automatically when you use our Sites.

Information You Provide Directly

Email Address: When you subscribe to updates or request access to our services.
Cycle Data: Information you enter during Morning Reset, Midday Check, and Evening Loop cycles, including your emotional state, chosen operating identity, intended outcomes, predicted friction points, reflections, and lessons learned.
Communications: Information you provide when you contact us for support or feedback.

Information Collected Automatically

Session Information: Anonymous session identifiers stored in your browser to associate your cycle entries.
Device Information: Browser type, operating system, and device characteristics.
Usage Data: Information about how you interact with our Sites, including pages visited, time spent, and features used.
Location Data: General location information derived from your IP address (country, region), timezone, and locale settings.
IP Address: We collect and hash your IP address for security purposes. We do not store raw IP addresses in our user interaction database.

How Do We Use Your Information?

We use your information for the following purposes:

Providing Our Services

Generating personalized AI reflections based on your cycle inputs
Storing your cycle history so you can review previous entries
Communicating with you about your account and service updates
Processing your requests and responding to inquiries

Improving Our Services

Analyzing usage patterns to improve features and user experience
Training and improving our AI reflection system (using anonymized data)
Identifying and fixing technical issues
Conducting research and development

Safety and Security

Detecting and preventing fraudulent or malicious activity
Monitoring for distress signals to provide appropriate support resources
Ensuring the security of our Sites and users

Use of Artificial Intelligence

Mirror uses artificial intelligence (AI) technology, specifically OpenAI's language models, to generate personalized reflections based on the information you provide during your daily cycles. For detailed information about our AI practices, please review our Use of AI Policy.

Key points about our AI usage:

AI is used solely to generate supportive reflections and insights
AI does not make any automated decisions that affect your legal rights
You can review what inputs were sent to the AI and what response was generated
We may use anonymized, aggregated data to improve our AI systems

Data Storage and Security

Where Your Data Is Stored

Browser Storage: Your cycle data is stored locally in your browser's localStorage, allowing you to access your history without requiring an account.
Cloud Database: We store cycle data and AI responses in a secure cloud database (Supabase) for service improvement, research, and to enable future features like cross-device sync.
Email Provider: Email addresses submitted for updates are stored with our email service provider (Airtable).

Data Retention

We retain your information for as long as necessary to provide our services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Security Measures

We implement organizational and technical security measures to protect your information. However, no system is 100% secure, and we cannot guarantee the absolute security of your data. You should only access our Sites within a secure environment.

Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf, such as hosting, analytics, email delivery, and AI processing (OpenAI, Vercel, Supabase, Airtable).
Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, safety, or property.
Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
With Your Consent: When you explicitly authorize us to share your information.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and improve our services. Types of technologies we use include:

Essential Cookies: Required for the Sites to function properly.
Analytics: Help us understand how visitors interact with our Sites.
Local Storage: Used to store your cycle data and preferences in your browser.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of our Sites.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access: Request access to the personal information we hold about you.
Correction: Request correction of inaccurate personal information.
Deletion: Request deletion of your personal information, subject to certain exceptions.
Data Portability: Request a copy of your data in a portable format.
Opt-Out: Opt-out of marketing communications at any time using the unsubscribe link in our emails.
Local Data: Clear your browser's localStorage at any time to delete locally stored cycle data.

To exercise these rights, please contact us at contact@trymirrorapp.com.

California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt-out of the sale of personal information. We do not sell personal information.

California Civil Code Section 1798.83 ("Shine The Light" law) permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.

Children's Privacy

Our Sites are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

International Users

Our Sites are operated in the United States. If you are accessing our Sites from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

Third-Party Links

Our Sites may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of our Sites after any changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: contact@trymirrorapp.com
Contact Form: mirrorOS.app/contact