Privacy Policy

Effective Date: September 23, 2026 | Last Updated: September 23, 2026

At Sleekmirror ("we," "our," or "us"), we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the Sleekmirror mobile application and web services (collectively, the "Service").

By using Sleekmirror, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect only the information necessary to provide, secure, and improve our AI-powered visual analysis service:

Device Identifiers: Hardware-bound, volatile device IDs collected to allow immediate app usage without forcing account creation.
Email Address (Optional): Collected if you choose to link or register an account for cross-device synchronization and account recovery.
Uploaded Images: Images you submit for analysis are uploaded to our secure object storage (Cloudflare R2).
Technical Metadata: Server logs, timestamps, IP addresses, platform details, and authentication cookies (`httpOnly`, `Secure`).
AI Analysis Data: Visual feedback scores, category evaluations, and text feedback stored in our database.

2. How We Use Your Information

Service Delivery: To analyze uploaded images using third-party AI engines and present structured feedback.
Account & Balance Management: To track your free daily token allocations, credit balances, and subscription statuses.
Session Security: To authenticate user requests, prevent unauthorized access, and mitigate abusive API calls.

3. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal data. We share data with trusted service providers solely to operate the Service:

OpenAI (GPT-4o Vision API): Images are processed strictly for feedback generation. API data is not used to train OpenAI models and is retained by OpenAI for up to 30 days solely for abuse monitoring.
Cloudflare R2: Used for hosting uploaded images with HMAC-signed URLs (1-hour time-to-live) to restrict public exposure.
MongoDB Atlas: Hosted database infrastructure used to store account profiles and analysis records.

4. Data Security & Storage

We implement industry-standard technical measures to safeguard your information, including `httpOnly` and `Secure` authentication cookies, encrypted HTTPS/TLS transport, and rate-limited OTP authentication.

5. Data Retention & Your Rights

Retention Schedule: Images and scan history are retained until you request deletion. Authentication tokens expire automatically (15 minutes for access tokens, 7 days for refresh tokens).

Your Rights: You have the right to request full account and data deletion at any time. Account deletion triggers a cascading cleanup that permanently removes your profile, scan history, and stored images.

6. Children's Privacy

Sleekmirror is not intended for use by children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this document.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: privacy@sleekmirror.com