Privacy Policy

Who we are

Mira Analysis is operated by Cplex Management AG, Lättichstrasse 6, 6340 Baar, Switzerland (CHE-366.087.080).

For any privacy-related questions, contact us at hello@miraanalysis.com.

What information we collect

When you use Mira Analysis, we collect the following:

Account information: Your name and email address when you create an account.

Payment information: We use Stripe to process payments. We do not store your card details. Stripe's privacy policy applies to payment processing.

Onboarding responses: Your answers to the questionnaire you complete after purchase — including your goals, areas of concern, budget, and lifestyle information.

Photos: The facial photographs you submit for analysis. These are the most sensitive data we handle and are treated accordingly (see below).

How we use your data

We use your information solely to prepare and deliver your personal facial analysis report. Specifically:

• —Your onboarding answers are used to personalise your report
• —Your photos are used by our team to conduct the analysis
• —Your email is used to deliver your report and send account-related communications
• —We do not use your data for advertising, profiling, or any purpose other than delivering your report

Your photos — our commitment

We take the handling of facial photographs seriously. Here is exactly what happens to your photos:

• —Your photos are uploaded securely and accessed only by the analyst preparing your report
• —Your photos are permanently deleted from our systems after your report has been delivered
• —We do not store, archive, or retain your photos after delivery under any circumstances
• —We do not use your photos to train AI models
• —We do not share your photos with any third party
• —We do not use your photos for any purpose other than preparing your report

If you would like confirmation that your photos have been deleted, email us at hello@miraanalysis.com and we will confirm within 48 hours.

Legal basis for processing (GDPR)

For users in the European Union, United Kingdom, and Switzerland, we process your personal data on the following legal bases:

• —Contract performance: Processing your name, email, photos, and onboarding answers is necessary to deliver the service you have paid for
• —Legitimate interests: Maintaining basic account records for customer support and legal compliance
• —Consent: Where we send you optional communications, we rely on your consent which you can withdraw at any time

Facial photographs may constitute sensitive personal data under GDPR and Swiss data protection law. We process them solely for the purpose of delivering your report and delete them after delivery.

Data retention

You can request deletion of your account and associated data at any time.

Who we share data with

We share data only with the following service providers who process it on our behalf:

• —Stripe — payment processing (stripe.com/privacy)
• —Supabase — secure database and file storage
• —Lovable — website hosting

We do not sell your data. We do not share your data with advertisers. We do not share your data with any third party for their own purposes.

Your rights

Depending on your location, you have the following rights regarding your personal data:

• —Access: Request a copy of the data we hold about you
• —Correction: Request correction of inaccurate data
• —Deletion: Request deletion of your data at any time
• —Portability: Request your data in a portable format
• —Objection: Object to certain types of processing
• —Withdrawal of consent: Withdraw consent for optional communications at any time

To exercise any of these rights, email hello@miraanalysis.com. We will respond within 30 days.

Data security

We take reasonable technical and organisational measures to protect your personal data, including:

• —Encrypted data transmission (HTTPS)
• —Secure cloud storage with access controls
• —Limited access — only the analyst preparing your report can access your photos
• —Automatic deletion of photos after report delivery

No system is completely secure. If you have concerns about a specific security issue, contact us immediately at hello@miraanalysis.com.

Minors

Mira Analysis is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact us and we will delete it immediately.

International transfers

Cplex Management AG is based in Switzerland. Your data may be processed by our service providers in the European Union and United States. Where data is transferred outside Switzerland or the EEA, we ensure appropriate safeguards are in place consistent with Swiss and EU data protection requirements.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email. The date at the top of this page reflects when the policy was last updated.

Contact

For any questions about this privacy policy or how we handle your data:

Cplex Management AG
Lättichstrasse 6
6340 Baar
Switzerland
CHE-366.087.080

Email: hello@miraanalysis.com