At a glance
The house lights dim. Two editions take the stage.
This policy covers both editions of the Mirror app for iPhone and iPad, published by Winkpass Creations, Inc. (“Winkpass”, “we”, “us”): Mirror, the paid edition, and Mirror Free, the ad-supported edition. Both share one promise: your reflection never leaves your device. They differ only in what happens around it.
- No ads, no analytics, no third-party SDKs
- No account and no sign-in
- Settings stay on your device
- Ads, analytics and ad settings from Google
- Consent prompts where the law requires them
- Ad tracking only if you allow it
Neither edition asks for your name, email address, contacts, photos or precise location. Neither has an account system. There is no Winkpass server that receives anything you see in the mirror.
The reflection
A single spotlight. The camera, alone with its subject.
Mirror uses your device’s front camera to show you your reflection. With your permission, iOS gives the app a live stream of video frames. Here is everything that happens to them:
On-device, in-memory, and gone
- Mirror view. Frames are drawn to your screen and immediately replaced by the next frame. Mirror keeps only the newest frame in memory.
- Tap to zoom. When you tap an eye, brow or your lips, Mirror uses Apple’s on-device Vision framework to find facial landmarks so the magnifier can follow that feature. The landmark positions are used for that moment and then discarded.
- Smile to Check. When this is on, Mirror checks frames on-device for a smile so it can zoom to your teeth. It produces only a smiling/not-smiling result, which is discarded once it has been used.
- Light. The light raises your screen brightness while Mirror is open and restores it when you leave. No data is involved.
What never leaves the stage
- Camera framesNever saved, never uploaded.
- Facial geometryNever stored, never used to identify you.
- Smile stateUsed on-device for a moment, then discarded.
- Zoomed close-upsNever saved and never photographed.
Mirror does not take photos or record video, and it does not build a face profile. It never shares camera imagery or facial data with Winkpass, advertisers, analytics providers or anyone else. That applies to both editions.
You can turn off camera access at any time in Settings › Mirror › Camera. Mirror can’t show a reflection without it.
A quiet house
The paid edition. No sponsors, no programme sellers, no one taking notes.
Mirror (the paid edition) collects no data. It contains no advertising, analytics, crash-reporting or other third-party software development kits, and it does not send information about you or how you use it to Winkpass or anyone else.
What stays on your device
Mirror remembers a few preferences using the standard iOS storage built into the app, such as whether the light and its bulb frame are on, whether Smile to Check is enabled, and whether you have already seen the tap-to-zoom tip. These settings never leave your device and are deleted when you delete the app.
Apple’s part
Apple handles your purchase, downloads, App Store reviews and any ratings prompt. Apple may also share aggregated, anonymized app statistics and crash reports with developers if you have chosen to share them with app developers in iOS settings. That information is governed by Apple’s Privacy Policy.
Our sponsors
The free edition. The house is full, and the sponsors’ names are in the programme.
Mirror Free pays for itself with ads. To show ads, measure them and keep the app working, it includes software from the companies below. These companies may collect information from your device directly, under their own privacy policies. None of them receive camera frames, facial data or smile results.
The cast
- Google AdMobGoogle Mobile Ads SDK Selects and shows banner and full-screen ads, measures their performance, limits fraud, and coordinates the other ad networks below. How Google uses data from partner apps
- Google User Messaging PlatformConsent management Shows privacy and consent choices where the law requires them, such as in the European Economic Area, the UK and Switzerland, and passes your choices to ad partners.
- Google Analytics for Firebasewith Firebase Remote Config Counts app launches, sessions and ad events so we can understand usage in aggregate. Remote Config lets us adjust ad settings, such as how often ads appear, without an app update. Firebase privacy information
- Meta Audience Networkvia AdMob mediation Bids to supply some of the ads shown in the app. Meta Privacy Policy
- ironSource (Unity)via AdMob mediation Bids to supply some of the ads shown in the app. Unity Privacy Policy
What may be collected in Mirror Free
| Information | Examples | Used for | Ad tracking? |
|---|---|---|---|
| Device identifiers | Advertising identifier (only with your permission), app-instance and installation IDs | Ads, ad measurement, analytics | If you allow it |
| Advertising data | Ads shown, taps, impressions | Ads, ad measurement, analytics | If you allow it |
| Product interaction | App opens, session length, screens | Analytics, ads, app functionality | If you allow it |
| Coarse location | Approximate region derived from your IP address. Never GPS. | Ads, legal consent requirements, analytics | No |
| Diagnostics | Crash data, performance and SDK health, device model, OS version | Analytics, ad delivery, app functionality | No |
Tracking only with your blessing
On iOS 14.5 and later, Mirror Free asks for your permission through Apple’s App Tracking Transparency prompt before ad partners can use your device’s advertising identifier to personalize ads or measure them across other companies’ apps and websites. If you choose “Ask App Not to Track”, the advertising identifier is not shared. You will still see ads, but they will be based on context and limited signals rather than your activity elsewhere.
Where consent is legally required, Mirror Free shows Google’s consent message before ads are requested. A Privacy choices button appears below the ad so you can change your decision at any time.
What Winkpass itself sees
We receive aggregated reports from Google: things like how many people opened the app, how many ads were shown and how much they earned. We cannot see your name, email address, camera imagery or anything else that identifies you directly. We do not sell personal information. However, under some US state laws, allowing ad partners to use identifiers for personalized advertising may count as “sharing” or a “sale”. You can opt out of that by declining tracking, as described in the Intermission.
Mirror Free also stores a few settings locally, such as your preferences and a launch count used to decide when ads begin. These settings never leave your device.
Your choices
The lights come up. Stretch your legs, and take control.
- Decline or revoke tracking. Change it in Settings › Privacy & Security › Tracking, or turn off “Allow Apps to Request to Track” for every app.
- Revisit consent. In Mirror Free, tap Privacy choices below the ad to review or withdraw consent, when that option applies in your region.
- Limit ad personalization. Adjust it in Settings › Privacy & Security › Apple Advertising and in your Google My Ad Center.
- Turn off the camera. Settings › Mirror › Camera. Without it, there’s no reflection to show.
- Choose the quiet house. The paid edition, Mirror, has no ads or third-party SDKs and collects no data at all.
- Exit stage left. Deleting the app removes everything it stored on your device.
The fine print
Read slowly. Every word earns its keep.
Children
Mirror is a general-audience app and is not directed to children under 13 (or the equivalent minimum age where you live). We do not knowingly collect personal information from children. If you believe a child’s information has been collected through Mirror Free’s ad partners, contact us and we will help you have it addressed.
Retention
Camera frames and facial data are never stored, so there is nothing to retain. Settings stay on your device until you delete the app. Information collected by Google, Meta and Unity in Mirror Free is kept according to their policies and our Firebase and AdMob retention settings, and is then deleted or aggregated.
Your rights
Depending on where you live, including the EEA, the UK and US states such as California, you may have the right to access, correct or delete personal information, to object to or restrict certain processing, and to opt out of targeted advertising, “sharing” or “sale”. Because Winkpass does not hold personal information about Mirror users on its own servers, most requests are best handled through the choices above or directly with the partners listed in Act III. You are still welcome to write to us, and we will help.
For Mirror Free in the EEA and UK, ad partners rely on your consent, which you give or refuse through Google’s consent message, to store information on your device and personalize ads. Analytics and ad-fraud prevention rely on our legitimate interest in running and funding the app. Your data may be processed in the United States and other countries where our partners operate, under the safeguards described in their policies.
Security
The best protection is not collecting data in the first place, which is why camera processing stays on-device. Our partners protect the data they collect in transit and at rest as described in their policies.
Changes to this policy
If Mirror changes in ways that affect your privacy, we will update this page and its effective date. If a change is significant, we will explain it in the app’s release notes.
This policy replaces all earlier Mirror privacy policies, including those hosted at other addresses.
Curtain call
Questions, requests or a standing ovation? Write to us.
privacy@winkpass.com[Exeunt. The bulbs stay lit.]