Privacy policy
Mirror App
Last updated: October 23, 2026
Privacy Policy - Mirror App
Mirror VOF ("we", "our" or "us") provides the Mirror application (the "App"), the Mirror device ("Mirror") and associated services (the "Services"), and is responsible for the data processed in connection with the App. This Privacy Policy explains which data we collect, why we collect it, how long we retain it and what rights you have.
Data We Collect
When a Mirror is scanned, the App sends the Mirror's hardware identifier to our servers to verify that it is a genuine and active Mirror. This processing is necessary for the performance of our contract with you, as the App cannot function without it.
In addition, the App transmits basic usage statistics and technical details about the App when a Mirror is used. This data is recorded against the Mirror's hardware identifier and is not linked to you. We process it on the basis of our legitimate interest in understanding how Mirror is used.
On the rare occasions that the App contacts our servers, those servers receive your IP address. We process it solely to keep our servers secure, on the basis of our legitimate interest. We do not store your IP address or use it to identify you. Our hosting provider retains it in standard request logs for 24 hours, after which it is deleted automatically.
Data Processed on Your Device
The App uses Apple's Screen Time APIs to block the apps and websites you select. By Apple's design, the App receives these selections in a form it cannot read, and all usage figures are processed exclusively on your device. No Screen Time data is transmitted to us or to any third party.
Recipients and Storage Location
We do not sell your personal data. We share it only with our cloud hosting provider, which acts as our processor, is bound to protect the data as described in this Privacy Policy, and stores it within the European Union. Our hosting provider is established outside the European Union and may access the data from there for support purposes. Such transfers are governed by the European Commission's Standard Contractual Clauses, a copy of which is available on request.
Retention Period
Server logs are deleted after 24 hours. Data associated with your Mirror is retained until you request its erasure.
Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify and erase your personal data, to restrict its processing, and to receive it in a portable format. To exercise any of these rights, please contact us at info@mirrorfocus.com; we will respond within 30 days. As we are unable to identify you by other means, please include the code displayed at the bottom of the Settings screen in the App, so that we can locate the data associated with your Mirror.
Right to object. Where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing at any time. To do so, please contact us at info@mirrorfocus.com.
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority competent for Mirror VOF is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl.
Changes to This Privacy Policy
Mirror VOF reserves the right to amend this Privacy Policy at any time. We encourage you to review this page periodically. By continuing to use the App, you accept the most recent version of this Privacy Policy.
Mirror Website
Last updated: October 23, 2026
Privacy Policy - Mirror Website
Mirror VOF ("we", "our" or "us") operates mirrorfocus.com (the "Site"), through which we sell the Mirror device and related products to consumers and businesses, and is responsible for the personal data processed in connection with the Site. This Privacy Policy explains which data we collect when you visit the Site, place an order or otherwise communicate with us, why we collect it, with whom we share it, how long we retain it and what rights you have.
Data We Collect
Information you provide to us. When you place an order, we collect your name, billing and delivery address, email address and phone number, together with the products you order and confirmation of your payment. Your card or bank details are processed by our payment processors and are not stored by us. For orders placed by businesses, we also collect the business name and VAT number. If you create an account, we also collect your login details and order history. If you contact us, subscribe to our newsletter or take part in one of the programmes described below, we collect the information you provide in doing so.
Information collected automatically. When you visit the Site, we and our partners automatically collect information about your device, browser, network connection and IP address, and about how you use the Site, such as the pages you view and the products you add to your cart. This information is collected through cookies, pixels and similar technologies (together, "Cookies"), as described below.
Information from third parties. We receive information about you from parties that support the Site, such as Shopify, which hosts our store, our payment processors, which confirm your payment and help us prevent fraud, our shipping carriers, which provide delivery updates, and the apps connected to our store.
You are not obliged to provide us with your personal data, but we cannot process an order without your contact, delivery and payment details.
How We Use Your Data
Orders. We use your contact, order and payment details to process your payment, fulfil and deliver your order, handle returns, exchanges and warranty claims, and send you messages about your order. This is necessary for the performance of our contract with you. We also retain order records to comply with our legal obligations, including those under Dutch tax law.
Your account. If you create an account, we use your details to maintain it and to show your order history, for the performance of our contract with you.
Customer support. We use the information you provide when you contact us to answer your questions and improve our service, on the basis of our legitimate interest in responding to you.
Marketing. If you subscribe to our newsletter, we send you marketing emails on the basis of your consent. If you have purchased from us, we may email you about similar products on the basis of our legitimate interest. Every marketing email contains an unsubscribe link. With your consent, we also use advertising Cookies to show you Mirror advertisements on other platforms and to measure their effectiveness.
Analytics. With your consent, we use analytics Cookies to understand how visitors use the Site and to improve it.
Security and fraud prevention. We use your information to detect and prevent fraudulent, unlawful or malicious activity, and to handle disputes and chargebacks, on the basis of our legitimate interest in protecting our business and our customers.
Legal obligations. We may use and disclose your information where necessary to comply with the law, to respond to lawful requests from authorities, and to establish, exercise or defend legal claims.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects for you.
User-Generated Content and Affiliate Programmes
We may invite you to create content featuring our products, such as reviews, photos or videos, or to take part in an affiliate or referral programme, for example in exchange for a discount or a commission. Participation is voluntary. If you take part, we process your name, contact details, social media handle, the content you submit and, for affiliate programmes, the information needed to track referrals and pay commissions. We process this data to perform our agreement with you, and we use your content publicly only with your consent. Content you publish in a public area of the Site or on social media is visible to anyone, and we are not responsible for how others use it.
Partner Applications
When you apply to become a partner through the Site, we process your name, the name of your business, your email address, phone number, website and location, and any other information you include. We use this data to respond to your application and to perform any partnership that follows, which is necessary to take steps before entering into a contract and for the performance of that contract. With the partner's agreement, we may publish its business details, such as its name, address and opening hours, on the Site.
Cookies
Cookies that are strictly necessary for the Site to function, such as those for your cart, checkout and login, are always active. Analytics and advertising Cookies are placed only with your consent, which you can give or withdraw at any time through the cookie settings on the Site. You can also block or delete Cookies through your browser settings, although parts of the Site may then no longer work properly. For more information on the Cookies used by Shopify, see shopify.com/legal/cookies.
Who We Share It With
We do not sell your personal data. We share it only where necessary for the purposes described above: with Shopify, which hosts our store; with our payment processors and shipping carriers; with the apps connected to our store that help us process orders, provide customer support, send emails and run marketing; and, with your consent, with advertising platforms. Each receives only the data it needs. Most of these parties act as our processors and may use your data only on our instructions. Some, such as Shopify, payment processors and advertising platforms, also use it for their own purposes as independent controllers, under their own privacy policies.
We may also disclose your data to authorities where required by law, to our professional advisers, and to a buyer or successor in the event of a merger, acquisition or sale of our business, on the basis of our legitimate interest.
International Transfers
Some of these recipients are established, or process data, outside the European Economic Area, including in Canada and the United States. Such transfers rely on an adequacy decision of the European Commission or on the European Commission's Standard Contractual Clauses, a copy of which is available on request.
Retention Period
We retain orders and invoices for 7 years, as required by Dutch tax law. Account data is retained until you delete your account, support messages for 2 years after our last contact, and your newsletter subscription until you unsubscribe. Cookies expire after at most 12 months. Data relating to a user-generated content or affiliate programme is retained for as long as you participate, and thereafter only for as long as the law requires. Partner applications that do not lead to a partnership are deleted 2 years after our last contact.
Security
We take appropriate technical and organisational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children's Data
The Site is not intended to be used by children, and we do not knowingly collect any personal data about children. If you are the parent or guardian of a child who has provided us with their personal data, you may contact us using the contact details set out below to request that it be deleted.
As of the date on which this Privacy Policy was last updated, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal data of individuals under 16 years of age.
Third-Party Websites
The Site may contain links to websites and platforms operated by third parties, such as social media. Their privacy practices are governed by their own policies, for which we are not responsible.
Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify and erase your personal data, to restrict its processing, and to receive it in a portable format. Where processing is based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal. To exercise any of these rights, please contact us at info@mirrorfocus.com; we will respond within 30 days and may first ask you to verify your identity.
Right to object. Where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing at any time. You may also object at any time to the use of your personal data for direct marketing, for example by using the unsubscribe link in any marketing email, after which we will no longer use it for that purpose.
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority competent for Mirror VOF is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ Den Haag, autoriteitpersoonsgegevens.nl.
Changes to This Privacy Policy
Mirror VOF reserves the right to amend this Privacy Policy at any time. We encourage you to review this page periodically. By continuing to use the Site, you accept the most recent version of this Privacy Policy.
Contact
If you have any questions about this Privacy Policy or our privacy practices, please contact Mirror VOF at info@mirrorfocus.com.