Privacy Policy for MirrAi

1. Introduction

Moraalink ("we," "our," or "us") operates the MirrAi mobile application (the "App"). We are committed to protecting your privacy and ensuring you have a positive experience on our App. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information we receive through the App.

By using the App, you consent to the data practices described in this policy. This Policy is drafted in compliance with the General Data Protection Regulation (GDPR) and the laws of The Netherlands.

2. Information We Collect

To provide our AI-powered virtual try-on services, we collect and process the following categories of data:

A. Personal Information

When you sign up or log in, we collect information via Google Sign-In authentication, which includes:

• Email address.
• Google User ID.
• Profile name (if applicable).

B. Biometric and Image Data (User Content)

• Input Images: Photos of your face and body that you capture via the camera or upload from your gallery.
• Apparel Images: Photos of clothing or items you wish to try on.
• Generated Content: The final images created by our AI algorithms based on your inputs.

C. Device and Usage Data

We automatically collect certain information when you access the App using third-party analytics tools (such as Firebase and New Relic), including:

• Device model and manufacturer.
• Operating system version.
• IP address and approximate location (country/region).
• App usage patterns, crash logs, and performance data.

3. How We Use Your Information

We use the collected information for specific, legitimate purposes:

1. Service Provision: To process your photos and generate the "virtual try-on" results using Artificial Intelligence.
2. Account Management: To manage your credits, purchase history, and account status.
3. Community Features: If you choose to share your results, we display your generated images in the public community feed for voting and interaction.
4. Content Moderation: To automatically scan uploaded and generated images to detect and prevent illegal, pornographic, or prohibited content, ensuring a safe environment.
5. App Improvement: To analyze crash reports and usage data to fix bugs and improve App stability.

4. How We Share Your Information

We do not sell your personal data. However, to provide our services, we share data with the following third-party service providers:

A. AI Processing Providers

To perform the virtual try-on function, your uploaded images are securely transmitted to third-party cloud-based AI services. We utilize the following providers:

• OpenAI
• Microsoft (Azure)
• Google (Gemini/Vertex AI)

These providers process the data solely for the purpose of generating the requested image and are subject to strict data processing agreements.

B. Analytics Providers

We use Firebase (Google) and New Relic to analyze user behavior and app performance.

C. Legal Requirements

We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to comply with Dutch laws or legal processes served on us.

5. Data Storage and Retention

A. Storage Infrastructure

User Content — including uploaded photos, AI-generated images, edited images, and saved gallery content — is stored on secure cloud-based servers provided by reputable third-party infrastructure providers. Each user's content is stored under unique, system-generated identifiers designed to segregate individual user data and reduce the risk of unauthorized access.

B. Retention Periods

• Processing Data: Images uploaded for AI processing are retained temporarily on our servers (or our AI providers' servers) only for the time necessary to generate the result.
• Saved Content: Images you save to your in-app gallery are stored on our cloud servers for as long as your Account is active, or until you delete the content.
• Community Data: If you post an image to the Community, it is stored on our servers until you delete it, request its removal, or your Account is terminated.
• Account Data: We retain your account information (Email/User ID) as long as your account is active. You may request deletion at any time.

C. Data Security Disclaimer

While we implement commercially reasonable technical and organizational measures to protect your data — including data segregation, access controls, and cloud infrastructure security — no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee the absolute security of your data against unauthorized access, interception, loss, or disclosure. By using the Service and uploading content, you acknowledge and accept the inherent risks associated with cloud-based storage and Internet data transmission. Please refer to Section 9 (Security) below for additional details.

6. Content Moderation and Account Termination

We prioritize safety. We use automated AI systems to scan images for nudity, pornography, and prohibited content.

Note: While this is a privacy policy, please be aware that the detection of prohibited content (as defined in our Terms of Service) constitutes a breach of our policies. Data related to such violations may be preserved to enforce account bans and for legal documentation.

7. Your Rights (GDPR)

As a company based in The Netherlands, we respect your rights under the GDPR. You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct any inaccurate data.
• Erasure (Right to be Forgotten): Request the deletion of your account and all associated data.
• Restriction: Restrict the processing of your data under certain circumstances.

To exercise these rights, please contact us at: service@moraalink.com.

8. International Data Transfers

Our servers and third-party service providers (like OpenAI or Microsoft) may be located outside the European Economic Area (EEA), specifically in the United States. We ensure that such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Security

We take the protection of your personal data seriously and implement a combination of administrative, technical, and organizational security measures to safeguard your information, including but not limited to:

• Use of reputable third-party cloud infrastructure providers with industry-standard security certifications;
• Segregation of user data using unique, system-generated identifiers to isolate content between users;
• Authentication via established third-party identity providers;
• Automated content moderation and monitoring systems.

Important Disclaimer: Despite our efforts, no method of electronic transmission over the Internet or method of electronic storage is completely secure. We cannot warrant or guarantee the absolute security of your personal data or User Content against unauthorized access, alteration, disclosure, or destruction. Security measures are continuously reviewed and improved; however, you acknowledge that you provide your personal information and upload content at your own risk.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected users in accordance with Articles 33 and 34 of the GDPR.

10. Children's Privacy

Our Service is intended for users aged 16 and older. We do not knowingly collect personally identifiable information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to remove that information.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this page periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Company: Moraalink
• Email:service@moraalink.com
• Location: The Netherlands