Privacy Policy

Last updated: 15 August 2026

Your trading history is the most private thing you own. It shows what you earn, what you lose, and how you behave when money is on the line. Mirror is built on one principle: it sees everything, and it tells no one.

This policy explains what Mirror (a sole proprietorship) collects, why, and the control you keep. In short: we use your trading data to show you your own behaviour, we sell nothing to anyone, and you can delete all of it.

1. What we collect

• Account data — your email address, and a phone number only if you choose to add one.
• Trading data — trades, orders and positions, synced read-only from a broker you connect, or uploaded by you as a file.
• Coaching conversations — what you ask Mirror and what it answers.
• Product usage — anonymous, aggregated measurements of which screens are used, plus error reports, so the product can be fixed and improved.

We do not collect your bank details, your card number, your government identifiers, your contacts, or your location.

2. What we never do

• We never sell your data. Not to brokers, not to advertisers, not to data brokers, not to anyone. There is no version of Mirror in which your trades are a product we sell.
• We never share your trades with another person. Not your broker, not other users, not your family. Only you and your own Mirror account can see them.
• Your data is never used to train AI models. The AI that reads your trades is contractually barred from training on them.
• We never place, modify or cancel an order. Broker access is read-only, and that permission is never granted to us in the first place.
• We never touch your funds. Mirror cannot move money in or out of your broker account.

3. How your data is protected

• Encrypted in transit. Every connection to Mirror is protected with modern TLS encryption.
• Encrypted at rest. Stored data sits on encrypted disks in secure, access-controlled data centres.
• Isolated per account. Database-level rules make your rows readable only by your own authenticated account. Another user cannot query your trades even if they try.
• No standing key to your broker. Broker sessions are held server-side and expire daily, so there is no permanent access token sitting on a server waiting to be stolen.
• Least-privilege access. Access to production systems is restricted, authenticated and logged.
• Data residency. Your data is stored in India.

No system can promise perfection, and we will not pretend otherwise. If a breach ever affects your data, we will tell you and the relevant authority promptly, with what happened and what to do about it.

4. Why we process it

• To compute your behavioural patterns, your Mirror Card and your Discipline score.
• To generate coaching. The relevant slice of your own trading data is sent to the AI model that produces the response, under terms that forbid training on it.
• To send the notifications and emails you have asked for.
• To keep the service secure, and to detect and prevent abuse.
• To meet legal and tax obligations that apply to us.

5. Service providers

Running a product requires infrastructure. We use a small number of established providers for hosting, database, email delivery, payments and error monitoring. They process data only on our instructions, under contract, and only as needed to deliver their part of the service. None of them is permitted to use your data for their own purposes. Payment details are handled entirely by a regulated payment provider — we never see or store your card number.

6. How long we keep it

For as long as your account is open. Delete your account and your profile, trades, conversations and scores are removed from our systems within 30 days, except the minimum records we are legally required to retain, such as invoices for tax purposes.

7. Your rights

• Access and export — request a copy of your data at any time.
• Correction — ask us to fix anything inaccurate.
• Deletion — delete your account yourself from Settings, whenever you want, without asking us.
• Withdraw consent — disconnect your broker, or turn notifications off, at any time.
• Complain — write to us first, and you retain your right to approach the relevant data protection authority.

8. Sharing what you choose to share

Anything you deliberately export or post — a card, a screenshot — is shared by you, by your choice. We never publish anything on your behalf.

9. Children

Mirror is not intended for anyone under 18, and we do not knowingly collect data from them.

10. Changes and contact

If this policy changes materially, we will tell you by email or in the app before it takes effect. Privacy questions and data requests: support@askmirror.in.