Mira
WORKING DRAFT — not a binding legal document. Sections marked [DOPLNIŤ] must be completed and the whole reviewed by a lawyer before launch.

Privacy Policy

Last updated: [DOPLNIŤ date]

This policy describes how Appinara s. r. o. processes your personal data when you use Mira. A face photo is sensitive data, so we treat it with particular care.

Controller and contact

Appinara s. r. o., [DOPLNIŤ registered address], company ID [DOPLNIŤ].

Data protection contact: [DOPLNIŤ email]. DPO: [DOPLNIŤ, if appointed].

What data we process

Face photo (biometric / special-category data under GDPR Art. 9).

Email address (sign-in and access delivery).

Analysis results, score and plan.

Payment data — processed directly by Stripe; we never see card details.

Technical data: session and language cookies, basic logs.

Legal basis

Face photo: your explicit consent (GDPR Art. 9(2)(a)). You can withdraw it at any time.

Paid service: performance of a contract (Art. 6(1)(b)).

Operation and security: legitimate interest (Art. 6(1)(f)).

[DOPLNIŤ / verify with a lawyer.]

Recipients and processors

Analysis and image generation use AI providers: Anthropic (analysis) and OpenAI (AI "after" image).

Payments: Stripe. Email: Resend. Photo storage: Cloudflare R2 (EU). Database: Turso.

Some providers process data outside the EU (USA). Transfers rely on [Standard Contractual Clauses / EU-US Data Privacy Framework] — [DOPLNIŤ / verify per provider].

Retention

Free mode: the photo is kept only during analysis and then deleted; only the text analysis is stored if you save it.

Paid mode: the photo is stored encrypted in the EU (Cloudflare R2, AES256) until you delete the account or scan.

Exact periods: [DOPLNIŤ].

Your rights

You have the right of access, rectification, erasure (Art. 17), restriction, portability, objection, and to withdraw consent.

Requests: [DOPLNIŤ email].

You may also lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).

Cookies

We use strictly necessary cookies (login session, language choice). [DOPLNIŤ if analytics/marketing is added — that requires a consent banner.]

Changes to this policy

We may update this policy. We will announce material changes [DOPLNIŤ how].