What personal data the Miróir app (iOS and Android) processes, where it lives, why, who we share it with and what rights you have, under Regulation (EU) 2016/679 ("GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003).
Data controller
- Company
- Start & Go S.r.l.
- Address
- Viale Sardegna 14, 53100 Siena (SI), Italy
- VAT number
- IT01462330521
- Company register
- Siena Company Register no. 149728
- Certified email (PEC)
- startegois@pec.it
- Privacy contact
- miroir@startegois.com
The controller has not appointed a Data Protection Officer (DPO): you can send any request directly to the contacts above.
1In short
Your wardrobe (photos, items, saved outfits) and your preferences stay on your phone.
On our servers we keep only your account and the corrections you make to the analysis, never photos.
An item's photo goes to Anthropic to recognise it, and Anthropic does not use it to train its models.
No ads, no commercial profiling, no tracking. We do not sell your data.
We use your location only if you allow it, and only for the weather.
Delete your account and data whenever you like, right from the app.
2Where your data lives
Every piece of data has its place. Here is which.
On your phone
Never leaves the device- Photos of your items and their details
- Saved outfits
- Favourite styles, colours and fits
- Today's mood and biological sex (optional)
- Language and units
On our servers
Database in Europe- Account: email, name, profile photo (optional)
- Corrections to the analysis, without photos
- Technical request data, 30 days at most
Sent for processing
Not kept by us- The item's photo, to Anthropic, to recognise it
- Your text and item descriptions, to Anthropic, for the AI Stylist
- Coordinates or city, to Open-Meteo, for the weather
The details, one by one
Account data
Your email address, password and the name you choose. If you sign in with Apple or Google we receive your email and name from them. Your password is handled by Firebase Authentication (Google) in encrypted form and is never visible to us. You can optionally add a profile photo, which is stored in your Firebase account.
Wardrobe
Photos of your clothes, the details recognised or entered by you (name, category, colours, style, fit, season, size, brand) and the outfits you save are stored only on your device. Background removal runs on the device (Apple Vision on iPhone, Google ML Kit on Android) and no image is sent anywhere for it.
Data sent to the artificial intelligence
When you add an item, its photo is sent to our server and from there to Anthropic to recognise its category, colours and style.
When you use the AI Stylist, the text you type and a description of the chosen items (name, category, colours, style), together with the context used to choose them (occasion, and weather and mood if enabled), may be sent to Anthropic to understand the request and write the outfit explanation. We do not send your name or email.
Corrections to the analysis
When you correct a value detected by the AI, we save in your account the item's name, the field corrected, the AI's value and yours. We do not save photos.
They tailor later analyses to you and, aggregated and anonymised, improve the analysis for everyone. You can view them, delete them or turn the tailoring off in Account → What Miróir has learned.
Preferences
Styles, fit, aesthetics, favourite colours, today's mood, biological sex (optional), language and units stay on the device and are used only to personalise suggestions.
Location
Only if you allow it, the app reads the device location to get the weather, as an alternative to a city you choose. The coordinates are sent to Open-Meteo to get the forecast and are not stored on our servers.
Technical data
Our server logs technical request data (IP address, date and time, service called, outcome) for security and to find errors. We also keep an anonymous daily count of analyses. The app contains no analytics or advertising tools.
3Why we process it
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, signing you in | Performance of a contract (Art. 6(1)(b) GDPR) |
| Recognising items from photos and suggesting outfits with the AI Stylist | Performance of a contract (Art. 6(1)(b)) |
| Tailoring the analysis to your corrections | Performance of a contract (Art. 6(1)(b)); you can turn it off at any time |
| Improving the analysis for everyone with corrections aggregated and anonymised | Legitimate interest (Art. 6(1)(f)); you can object by turning the tailoring off |
| Using the device location for the weather | Consent (Art. 6(1)(a)), given through the device permission and revocable in settings |
| Security, abuse prevention and fixing errors | Legitimate interest (Art. 6(1)(f)) |
| Complying with the law and responding to authorities | Legal obligation (Art. 6(1)(c)) |
4What's required · How we protect it
What's required
An email and password (or signing in with Apple or Google) are needed to create an account, and without photos of your clothes the app cannot recognise them. Profile photo, biological sex, location and preferences are optional: the app works without them, with less personalised suggestions.
How we protect it
Always-encrypted communication (HTTPS) and a server that only accepts requests authenticated with your account. Corrections are visible only to you and, aggregated and anonymised, to the team improving the analysis. No decision with legal effects is made solely by automated means.
5Who we share it with
Providers that process data on our behalf as processors (Art. 28 GDPR), only for the purposes above. Our staff access data only when necessary and under specific instructions, and we do not hand data over to third parties for their own purposes.
Authentication and the corrections database.
Database in EU Authentication USPhoto analysis and AI Stylist text.
USThe server that forwards requests to Anthropic.
USWeather forecasts: receives only coordinates or the city.
No personal data6Outside the European Union
Google, Anthropic and Vercel may process data in the United States. They rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, for certified providers, or on the standard contractual clauses approved by the Commission (Art. 46 GDPR). You can ask about the safeguards by writing to miroir@startegois.com.
7How long we keep it
Deleted immediately when you delete your account.
Deleted when you delete your account or uninstall the app.
Kept by Anthropic under its commercial terms, then deleted.
Used only for security and to find errors.
Longer periods apply only where required by law or needed to establish or defend legal claims.
8Your rights
Tap a right to write to us directly: we reply within one month.
If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the authority of the country where you live.
9Children, cookies and changes
Children
Miróir is for people aged 14 and over. If a child under 14 has given us data, write to miroir@startegois.com and we will delete it.
Cookies
This site uses no cookies or tracking tools and loads no resources from other sites. The app contains no analytics or advertising tools.
Changes
If we change this policy we update the date at the top and, for significant changes, let you know in the app.