GDPR
Last updated: May 22, 2026
Privacy Policy / GDPR Policy MindosMirror.com
Last updated: 22 May 2026
This Privacy Policy explains how ACTIVE KARE CONSULTANCY SRL, operating under the brand name MindosMirror (“MindosMirror”, “we”, “us”, or “our”), collects, uses, stores, shares, protects, and deletes personal data when you visit or use mindosmirror.com and our related digital services.
MindosMirror is a digital self-reflection and personal insight service. Our services may include AI-assisted reports, facial reflection interpretations, personality-oriented insights, emotional or symbolic interpretation content, digital reports, user accounts, payment pages, downloadable materials, email-delivered content, and other related digital services.
This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy, Refund Policy, and any consent notice displayed before you upload a photo, submit personal information, or purchase a digital service.
- Who we are
MindosMirror is operated by:
ACTIVE KARE CONSULTANCY SRL Operating brand: MindosMirror Website: mindosmirror.com Registered address: Șos. Mihai Bravu 475, Et. 1, Ap. 5, Sector 3, Bucharest, 030314, Romania Trade Registry number: J2022007733404 Tax identification number / CUI: 46009148 EUID: ROONRC.J2022007733404 Email: support@mindosmirror.com
For the purposes of the General Data Protection Regulation (“GDPR”), ACTIVE KARE CONSULTANCY SRL is the data controller for the personal data processed through mindosmirror.com, unless otherwise stated.
- What MindosMirror is and is not
MindosMirror provides digital self-reflection, personal insight, personality-oriented, emotional, symbolic, and lifestyle-oriented content.
MindosMirror may allow users to upload photos, answer questions, provide written context, or submit personal reflections in order to receive a generated report or interpretation.
MindosMirror does not provide:
medical advice; psychological diagnosis; psychiatric diagnosis; therapy; biometric identification; identity verification; legal advice; financial advice; employment suitability decisions; insurance assessment; credit assessment; health assessment; scientific proof of personality; final decisions about your identity, character, emotions, health, future, relationships, or life circumstances.
MindosMirror is a reflection tool, not a verdict.
- What personal data we collect
Depending on how you use our website and services, we may collect the following categories of personal data.
3.1 Account and contact data
We may collect:
name; email address; account login details; communication history; support messages; preferences you choose to provide; billing-related contact details. 3.2 Photo, image, and facial-related data
If you choose to upload a photo, we may process:
the photo you upload; visible facial characteristics from the photo; facial expression and appearance-related elements; image metadata, if technically attached to the file; the generated MindosMirror report; optional context you provide with the photo, such as name, age range, gender, relationship context, emotional context, or other information you voluntarily submit.
We only process photos that you actively choose to upload. We do not access your full photo gallery. If your device asks for camera or gallery permissions, this is only to allow you to select or upload the image you choose.
3.3 User-provided text and self-reflection inputs
You may voluntarily provide:
answers to questions; personal reflections; emotional context; personality-related descriptions; relationship context; goals, concerns, or preferences; feedback about your generated report.
Please do not submit sensitive information unless it is necessary for the service you request.
3.4 Payment and transaction data
If you make a purchase, we may collect:
product or service purchased; price; currency; transaction status; order details; invoice details; refund status; billing contact details.
Payments may be processed by third-party payment providers, including Stripe. Stripe may process payment details, fraud-prevention data, authentication information, and transaction information according to its own privacy policy and terms.
MindosMirror does not store your full card number on its own servers.
3.5 Technical, usage, and device data
When you visit or use our website, we may collect:
IP address; browser type; device type; operating system; approximate location based on IP address; pages visited; time spent on pages; buttons clicked; referral source; error logs; performance data; cookie identifiers, where applicable.
This helps us operate, secure, improve, and protect the website.
- Special note about photos, facial data, and biometric data
MindosMirror may process user-uploaded photos and visible facial characteristics only to generate the requested self-reflection or personal insight report.
MindosMirror does not use facial data to:
identify you uniquely as a person; verify your legal identity; authenticate your identity; compare your face against a database of individuals; create a biometric ID; create a permanent biometric template; perform face recognition for identification; perform surveillance; make legal, employment, medical, financial, insurance, education, security, or high-impact decisions about you.
Although MindosMirror does not provide biometric identification, facial photos can be sensitive. For this reason, we apply a protective approach and process uploaded photos only for the purpose clearly explained to you before upload.
Where required by law, we rely on your explicit consent for the processing of uploaded photos or facial-related data.
- Legal bases for processing under GDPR
We process personal data only when we have a valid legal basis.
5.1 Performance of a contract
We process certain data because it is necessary to provide the service you requested, including:
creating and managing your account; generating your report; delivering digital content; processing your order; providing customer support; managing access to purchased services.
Legal basis: Article 6(1)(b) GDPR.
5.2 Consent
We may rely on your consent for:
uploading and processing a photo; processing facial-related data where required; non-essential cookies; marketing communications, where required; optional analytics or tracking technologies; any future AI training use, if separately offered and accepted.
Legal basis: Article 6(1)(a) GDPR.
Where processing may involve special category data, we may rely on explicit consent under Article 9(2)(a) GDPR, where required.
You may withdraw your consent at any time by contacting us at support@mindosmirror.com. Withdrawal of consent does not affect processing that took place before withdrawal.
5.3 Legitimate interests
We may process certain data based on our legitimate interests, provided that your rights and freedoms do not override those interests.
This may include:
website security; fraud prevention; service improvement; technical troubleshooting; limited analytics; protecting our legal rights; preventing abuse of our platform; improving user experience.
Legal basis: Article 6(1)(f) GDPR.
5.4 Legal obligations
We may process data to comply with legal, tax, accounting, consumer protection, payment, anti-fraud, or regulatory obligations.
Legal basis: Article 6(1)(c) GDPR.
- How we use your personal data
We may use personal data to:
provide MindosMirror services; generate AI-assisted self-reflection reports; generate facial reflection or personality-oriented content; deliver purchased digital products; create and manage accounts; process payments and refunds; provide customer support; respond to your messages; improve our website and services; maintain security; prevent fraud and abuse; analyze website performance; manage cookie and privacy preferences; send service-related communications; send marketing communications, where permitted; comply with legal obligations; defend or exercise legal claims. 7. AI, automated processing, and limitations
MindosMirror may use automated tools, AI-assisted systems, structured interpretation models, or third-party technology providers to generate or support its reports.
The output may be generated automatically based on information you provide, including photos and text inputs.
MindosMirror does not use automated processing to make decisions that produce legal effects concerning you or similarly significant effects, such as decisions about employment, credit, medical treatment, insurance, legal status, access to essential services, or security screening.
Any interpretation generated by MindosMirror may be subjective, incomplete, symbolic, inaccurate, or influenced by the quality, lighting, angle, expression, context, and technical characteristics of the uploaded photo.
You should not make important decisions about health, safety, relationships, employment, finance, legal matters, parenting, therapy, medical care, psychological treatment, or personal wellbeing based only on MindosMirror output.
- No AI training without separate consent
By default, MindosMirror does not use your uploaded photos, facial data, or private personalized reports to train AI models unless we obtain your separate consent where required by law.
By default:
uploaded photos are used only to generate your requested output; uploaded photos are not sold; uploaded photos are not used for third-party advertising; uploaded photos are not used for biometric identification; uploaded photos are not used to create a facial recognition database; uploaded photos are not used to train AI models without separate consent.
We may use aggregated, anonymized, or de-identified information to understand service performance, improve quality, prevent abuse, and develop MindosMirror, provided such information does not identify you.
- Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Uploaded photos
Uploaded photos are used only for the purpose of generating the requested report or output.
Our intended practice is:
no permanent storage of uploaded photos; deletion of uploaded photos from active processing systems as soon as technically possible after report generation; where technically possible, deletion within 24–72 hours after the report is generated; no use of uploaded photos for identification; no sale of uploaded photos; no use of uploaded photos for advertising; no use of uploaded photos for AI training without separate consent.
Temporary technical copies, encrypted backups, logs, or cache fragments may exist for a limited period where required by hosting, security, fraud prevention, legal compliance, payment dispute evidence, support requested by you, or technical troubleshooting.
Generated reports
Generated reports may remain available to you depending on the purchased product, account settings, delivery method, or legal obligations.
Account and contact data
Account and contact data may be kept while your account is active and for a reasonable period afterward.
Payment and invoice data
Payment, invoice, accounting, and tax-related data may be kept for the period required by applicable tax, accounting, and legal obligations.
Support messages
Customer support communications may be kept for as long as needed to respond to requests, maintain records, resolve disputes, prevent abuse, or defend legal claims.
Marketing data
Marketing data is kept until you withdraw consent, unsubscribe, or object to direct marketing, unless a longer period is legally required.
- How we share personal data
We do not sell your personal data.
We may share personal data with trusted third parties only when necessary for the purposes described in this Privacy Policy.
These may include:
hosting providers; cloud infrastructure providers; AI or image-processing service providers; payment processors, including Stripe; analytics providers; cookie consent tools; email service providers; customer support tools; security and fraud-prevention providers; legal, tax, or accounting advisors; public authorities, where legally required.
Service providers are expected to process personal data only according to our instructions and only for the purposes necessary to provide services to MindosMirror, unless they act as independent controllers under their own legal obligations.
We do not allow service providers to use your uploaded photos or generated reports for their own independent marketing purposes.
- Payments and Stripe
We may use Stripe to process payments securely.
When you make a payment, Stripe may collect and process certain personal data, including payment method information, transaction information, fraud-prevention data, authentication information, billing information, and verification information.
Stripe’s processing of your personal data is governed by Stripe’s own privacy policy and terms.
MindosMirror does not store your full card number on its own servers.
- Cookies and similar technologies
We use cookies and similar technologies as explained in our Cookie Policy.
We may use:
strictly necessary cookies; analytics cookies; functional cookies; marketing cookies; payment-related cookies; fraud prevention technologies; cookie consent tools.
You can manage cookie preferences through our cookie banner or cookie settings tool.
Non-essential cookies are used only where permitted by law and, where required, based on your consent.
- International data transfers
Some service providers may process personal data outside Romania, the European Economic Area, or your country of residence.
Where personal data is transferred internationally, we take steps required by applicable law to protect your data. These may include:
using providers located in countries with adequate data protection safeguards; entering into Standard Contractual Clauses approved by the European Commission; applying technical and organizational safeguards; limiting the data transferred; using encryption, pseudonymization, or access controls where appropriate. 14. Your GDPR rights
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy rights, you may have the right to:
access your personal data; request a copy of your data; correct inaccurate or incomplete data; request deletion of your data; restrict processing; object to processing based on legitimate interests; withdraw consent at any time; request data portability; object to direct marketing; lodge a complaint with a supervisory authority.
To exercise your rights, contact us at:
We may need to verify your identity before responding to your request.
If you are located in Romania, you may also contact the Romanian data protection authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal Website: dataprotection.ro
- Marketing communications
We may send you marketing communications only where permitted by law.
You can unsubscribe at any time by:
clicking the unsubscribe link in our emails; contacting us at support@mindosmirror.com.
Even if you unsubscribe from marketing emails, we may still send service-related messages, such as purchase confirmations, security notices, legal updates, support responses, account notices, or payment-related communications.
- Children and minors
MindosMirror is intended for adults.
Our services are not directed to persons under 18 years old.
Users under 18 must not use MindosMirror, create an account, purchase services, or upload photos.
We do not knowingly collect personal data from children or minors. If you believe that a minor has provided us with personal data, please contact us at support@mindosmirror.com, and we will take appropriate steps to delete the data.
- Photos of other people
You should only upload photos of yourself or of another person if you have the legal right and permission to do so.
You must not upload:
photos of minors; private photos without permission; intimate or explicit images; images obtained unlawfully; images used to harass, shame, manipulate, threaten, exploit, or harm another person; images that violate privacy, publicity, copyright, image rights, or other third-party rights.
If you upload a photo of another person, you are responsible for ensuring that you have the lawful right and permission to provide that image to MindosMirror.
We may delete content, refuse processing, suspend access, or report unlawful activity if we believe an image has been uploaded unlawfully or in breach of our Terms.
- Sensitive information
Please do not submit sensitive information unless it is necessary for the service you request.
Sensitive information may include:
health information; medical history; mental health information; religious beliefs; political opinions; sexual orientation; genetic data; biometric data used for identification; criminal history; financial vulnerability; highly private emotional or trauma-related details.
If you voluntarily provide sensitive information, we will process it only as necessary for the service you requested, based on your consent or another valid legal basis where applicable.
- Data minimization
We aim to collect only the data necessary to provide and improve MindosMirror.
For facial interpretation, we only need the image and context necessary to generate the requested report.
We do not need your national ID, passport, medical records, bank card image, precise location, or other unnecessary sensitive documents to generate a MindosMirror interpretation.
Please do not upload unnecessary sensitive information.
- Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
encryption where appropriate; access controls; secure hosting; limited access to personal data; confidentiality obligations; monitoring and logging; deletion procedures; data minimization; fraud prevention measures; security reviews.
However, no online service can guarantee absolute security. You are responsible for keeping your account credentials confidential and for using secure devices and networks.
- Data breach handling
If we become aware of a personal data breach, we will assess the risk and take appropriate steps in accordance with applicable data protection laws.
Where required by law, we may notify the competent supervisory authority and affected individuals.
- Third-party websites and services
Our website may include links to third-party websites, platforms, payment pages, social media services, or external tools.
We are not responsible for the privacy practices of third parties. Their processing of personal data is governed by their own privacy policies and terms.
- Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, payment providers, third-party tools, or data practices.
When we update this Privacy Policy, we will revise the “Last updated” date at the top of this page.
If changes are significant, we may provide additional notice where required by law.
- Contact us
If you have questions about this Privacy Policy, your personal data, your privacy rights, photo upload, AI-assisted processing, payments, or data deletion, you can contact us at:
ACTIVE KARE CONSULTANCY SRL Operating brand: MindosMirror Website: mindosmirror.com Registered address: Șos. Mihai Bravu 475, Et. 1, Ap. 5, Sector 3, Bucharest, 030314, Romania Trade Registry number: J2022007733404 Tax identification number / CUI: 46009148 EUID: ROONRC.J2022007733404 Email: support@mindosmirror.com