MINDOS MIRROR Privacy Policy
Last updated: May 22, 2026
This Privacy Policy explains how ACTIVE KARE CONSULTANCY SRL, operating under the brand name Mindos Mirror (“MindosMirror”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal data when you visit or use mindosmirror.com and our related services.
Mindos Mirror is a self-reflection and personal insight service that may use user-provided images, facial features, written inputs, and other information to generate reflective, personality-oriented, emotional, or self-discovery content.
This Privacy Policy should be read together with our Terms and Conditions, Cookie Policy, Refund Policy, and any consent notice displayed before you upload a photo or use a facial interpretation feature.
1. Who we are
Mindos Mirror is operated by:
ACTIVE KARE CONSULTANCY SRL
Operating brand: Mindos Mirror
Website: mindosmirror.com
Registered address: Șos. Mihai Bravu 475, Et. 1, Ap. 5, Sector 3, Bucharest, 030314, Romania
Trade Registry number: J2022007733404
Tax identification number / CUI: 46009148
EUID: ROONRC.J2022007733404
Email: support@mindosmirror.com
For the purposes of the General Data Protection Regulation (“GDPR”), ACTIVE KARE CONSULTANCY SRL is the data controller for the personal data processed through mindosmirror.com, unless otherwise stated.
2. What Mindos Mirror is:
Mindos Mirror provides digital self-reflection, personal insight, and personality-oriented content. Some features may allow you to upload a photo of your face so that our system can generate a reflective interpretation based on visible facial characteristics, expression, proportions, and other visual elements.
Mindos Mirror is designed for personal development, self-reflection, entertainment, and educational insight.
Mindos Mirror does not provide:
- medical advice;
- psychological diagnosis;
- psychiatric diagnosis;
- biometric identification;
- legal advice;
- financial advice;
- employment suitability decisions;
- health assessment;
- guaranteed personality assessment;
- final decisions about your identity, character, future, emotions, or life circumstances.
Mindos Mirror is a mirror for reflection, not a verdict.
3. What personal data we may collect
Depending on how you use our website and services, we may collect the following categories of personal data.
3.1 Account and contact data
If you create an account, contact us, purchase a service, or subscribe to updates, we may collect:
- name;
- email address;
- account login details;
- communication history;
- customer support messages;
- preferences you choose to provide;
- billing-related contact information.
3.2 Photo, image, and facial-related data
If you choose to upload a photo for a Mindos Mirror interpretation, we may process:
- the photo you upload;
- visible facial characteristics from the photo;
- facial expression and appearance-related elements;
- image metadata, if technically attached to the file;
- the generated Mindos Mirror interpretation;
We only process photos that you actively choose to upload.
We do not intentionally access your full photo gallery. If your device asks for camera or gallery permissions, this is only to allow you to select or upload the image you choose.
3.3 User-provided text and self-reflection inputs
You may voluntarily provide written information, such as:
- answers to questions;
- personal reflections;
- emotional context;
- personality-related descriptions;
- relationship context;
- goals, concerns, or preferences;
- feedback about your generated profile.
Please avoid submitting highly sensitive information unless it is necessary for the service you request.
3.4 Payment and transaction data
If you make a purchase, we may collect information related to your order, such as:
- product or service purchased;
- price;
- currency;
- transaction status;
- invoice or order details;
- refund status;
- billing contact details.
Payments may be processed by third-party payment providers, including Stripe. Stripe may process payment details, fraud-prevention data, and authentication information according to its own privacy practices. Stripe states that it processes personal data in connection with payment, verification, and fraud prevention services.
We do not store your full card number on our own servers.
3.5 Technical, usage, and device data
When you visit our website, we may collect:
- IP address;
- browser type;
- device type;
- operating system;
- approximate location based on IP address;
- pages visited;
- time spent on pages;
- buttons clicked;
- referral source;
- error logs;
- performance data;
- cookie identifiers, where applicable.
This information helps us operate, secure, and improve our website.
3.6 Cookies and similar technologies
We use cookies and similar technologies as explained in our Cookie Policy. These may include strictly necessary cookies, analytics cookies, functional cookies, marketing cookies, and payment-related cookies.
You can manage cookie preferences through our cookie banner or cookie settings tool.
4. Special note about facial data and biometric data
Mindos Mirror may process user-uploaded photos and visible facial characteristics to generate a reflective interpretation.
We do not use facial data to identify you uniquely as a person, authenticate your identity, verify your legal identity, or compare your face against a database of individuals.
However, because facial images and facial-related data can be sensitive, and because biometric data receives special protection under GDPR when used for uniquely identifying a person, we apply a cautious and protective approach. GDPR Article 9 treats biometric data used for uniquely identifying a natural person as a special category of personal data, subject to enhanced restrictions. European guidance also recognizes that facial recognition and biometric technologies can involve heightened risks for individuals and require strict attention to lawfulness, necessity, proportionality, minimization, and security.
For this reason:
- we ask for your active action before uploading a photo;
- we explain the purpose of the facial interpretation;
- we do not use your photo for identity verification;
- we do not sell your photo or facial data;
- we do not use your photo to make legal, employment, financial, medical, or psychological decisions about you;
- we do not claim that our interpretation is scientifically definitive;
- we allow you to request deletion of your data.
5. Legal bases for processing under GDPR
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy laws, we rely on the following legal bases.
5.1 Performance of a contract
We process certain data because it is necessary to provide the service you requested.
This may include:
- creating your account;
- generating your Mindos Mirror interpretation;
- delivering digital content;
- processing your order;
- providing customer support;
- managing access to purchased services.
Legal basis: Article 6(1)(b) GDPR.
5.2 Consent
We may rely on your consent for:
- uploading and processing a photo for facial interpretation;
- non-essential cookies;
- marketing communications, where required;
- certain analytics or tracking technologies;
- optional use of sensitive or facial-related data;
- any future AI training use, if we decide to request this separately.
Legal basis: Article 6(1)(a) GDPR.
Where processing may involve special category data, we may rely on explicit consent under Article 9(2)(a) GDPR, where required.
You may withdraw consent at any time by contacting us at support@mindosmirror.com.
Withdrawal of consent does not affect processing that occurred before withdrawal.
5.3 Legitimate interests
We may process certain data based on our legitimate interests, provided that your rights and freedoms do not override those interests.
This may include:
- website security;
- fraud prevention;
- service improvement;
- analytics based on limited or aggregated data;
- troubleshooting;
- responding to inquiries;
- protecting our legal rights;
- improving user experience;
- preventing abuse of our platform.
Legal basis: Article 6(1)(f) GDPR.
5.4 Legal obligations
We may process data to comply with legal, tax, accounting, consumer protection, payment, anti-fraud, or regulatory obligations.
Legal basis: Article 6(1)(c) GDPR.
6. How we use your personal data
We may use your personal data to:
- provide Mindos Mirror services;
- generate facial reflection or personality insight content;
- deliver purchased digital products;
- create and manage your account;
- process payments and refunds;
- provide customer support;
- respond to your messages;
- improve our website and services;
- maintain security and prevent fraud;
- analyze website performance;
- manage cookie and privacy preferences;
- send service-related communications;
- send marketing communications, where permitted;
- comply with legal obligations;
- defend or exercise legal claims.
7. Facial interpretation: important limitations
Mindos Mirror interpretations are generated for self-reflection and personal insight.
They should not be understood as:
- medical diagnosis;
- psychological diagnosis;
- therapy;
- psychiatric evaluation;
- biometric identification;
- scientific certainty;
- professional advice;
- proof of personality traits;
- evidence of emotional state;
- prediction of future behavior.
Any interpretation generated by Mindos Mirror may be incomplete, inaccurate, subjective, symbolic, or influenced by the quality, lighting, angle, expression, and context of the uploaded photo.
You should not make important decisions about health, relationships, employment, finance, legal matters, or safety based only on Mindos Mirror output.
8. AI, automated processing, and human review
Mindos Mirror may use automated tools, AI-assisted systems, or structured interpretation models to generate content.
The output may be generated automatically based on the information you provide, including photos and text inputs.
We do not use automated processing to make decisions that produce legal effects concerning you or similarly significant effects, such as decisions about employment, credit, medical treatment, insurance, or access to essential services.
Where required, you may request human review, clarification, or deletion by contacting support@mindosmirror.com.
9. AI training and service improvement
We do not use your uploaded photos for AI training unless we clearly ask for your separate consent.
We do not use your uploaded photos, facial data, or private Mindos Mirror reports to train AI models unless we obtain your separate, explicit consent where required by law.
We may use aggregated, anonymized, or de-identified information to understand general usage patterns, improve our services, and enhance product quality. We do not attempt to re-identify anonymized data.
If in the future we introduce optional AI training or product research based on user photos or reports, we will provide a separate notice and consent mechanism.
This is important because your source document includes examples where face/voice recognition models or AI outputs may be retained or used only under specific terms and, in some cases, based on consent.
10. Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Recommended retention approach for Mindos Mirror:
| Data type | Suggested retention |
|---|---|
| Uploaded photo | Deleted automatically within 24–72 hours after generating the interpretation, unless the user saves it in their account or a longer retention is needed for support, legal, or fraud-prevention reasons |
| Generated Mindos Mirror report | Kept in the user account until deleted by the user or for as long as needed to provide the purchased service |
| Account data | Kept while the account is active and for a reasonable period afterward |
| Payment/invoice data | Kept as required by tax, accounting, and legal obligations |
| Customer support messages | Kept as long as needed to respond and maintain records |
| Analytics data | Kept in aggregated or pseudonymized form where possible |
| Marketing data | Kept until consent is withdrawn or the user unsubscribes |
Final policy wording:
Uploaded photos are retained only for the time necessary to provide the requested service, unless you choose to save them, request additional services, or we are legally required to retain them. Where technically possible, we aim to delete uploaded photos automatically within 24–72 hours after the interpretation is generated.
Generated reports may be stored in your account or delivered to you by email, depending on the service purchased.
We may retain certain records for longer where necessary to comply with legal obligations, resolve disputes, prevent fraud, process refunds, enforce our terms, or defend legal claims.
In your uploaded research also emphasize limited retention periods for photo processing and deletion after the service is completed, which is a good model for Mindos Mirror.
11. How we share personal data
We do not sell your personal data.
We may share personal data with trusted third parties only when necessary for the purposes described in this Privacy Policy.
These may include:
- hosting providers;
- cloud infrastructure providers;
- AI or image-processing service providers;
- payment processors, including Stripe;
- analytics providers;
- email service providers;
- customer support tools;
- security and fraud-prevention providers;
- legal, tax, or accounting advisors;
- public authorities, where legally required.
Service providers are expected to process personal data only according to our instructions and for the purposes necessary to provide services to Mindos Mirror.
We do not allow service providers to use your uploaded photos or generated reports for their own independent marketing purposes.
12. Payments and Stripe
We may use Stripe to process payments securely.
When you make a payment, Stripe may collect and process certain personal data, including payment method information, transaction information, fraud-prevention data, and verification information. Stripe explains that it processes personal data for payment services, verification, and fraud prevention.
Stripe’s processing of your personal data is governed by Stripe’s own privacy policy and terms.
Mindos Mirror does not store your full card number.
13. International data transfers
Some of our service providers may process personal data outside Romania, the European Economic Area, or your country of residence.
Where personal data is transferred internationally, we will take steps required by applicable law to protect your data. These may include:
- using providers located in countries with adequate data protection safeguards;
- entering into Standard Contractual Clauses approved by the European Commission;
- applying technical and organizational safeguards;
- limiting the data transferred;
- using encryption, pseudonymization, or access controls where appropriate.
Your uploaded research also includes international transfer provisions and the use of safeguards such as Standard Contractual Clauses for non-EEA processing, which is a relevant structure for Mindos Mirror.
14. Your GDPR rights
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar rights, you may have the right to:
- access your personal data;
- request a copy of your data;
- correct inaccurate or incomplete data;
- request deletion of your data;
- restrict processing;
- object to processing based on legitimate interests;
- withdraw consent at any time;
- request data portability;
- object to direct marketing;
- lodge a complaint with a supervisory authority.
To exercise your rights, contact us at:
We may need to verify your identity before responding to your request.
If you are located in Romania, you may also contact the Romanian data protection authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Website: dataprotection.ro
15. Marketing communications
We may send you marketing communications only where permitted by law.
You can unsubscribe at any time by:
- clicking the unsubscribe link in our emails;
- contacting us at support@mindosmirror.com.
Even if you unsubscribe from marketing emails, we may still send service-related messages, such as purchase confirmations, security notices, legal updates, or support responses.
16. Children and minors
Mindos Mirror is intended for adults.
Our services are not directed to children under the age of 18.
Users under 18 should not use Mindos Mirror or upload photos without the consent and supervision of a parent or legal guardian.
We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without appropriate consent, please contact us at support@mindosmirror.com, and we will take appropriate steps to delete the data.
For Stripe and EU safety, I recommend keeping Mindos Mirror as 18+, especially because facial interpretation and emotional/personality insights can be sensitive.
17. Photos of other people
You should only upload photos of yourself or of another person if you have the legal right and permission to do so.
You must not upload:
- photos of minors without parental/legal guardian consent;
- private photos without permission;
- intimate or explicit images;
- images obtained unlawfully;
- images used to harass, shame, manipulate, or harm another person;
- images of people who have not consented, where consent is legally required.
If you upload a photo of another person, you are responsible for ensuring you have the right to provide that image to Mindos Mirror.
18. Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
- encryption where appropriate;
- access controls;
- secure hosting;
- limited access to personal data;
- confidentiality obligations;
- monitoring and logging;
- deletion procedures;
- data minimization.
However, no online service can guarantee absolute security. You are responsible for keeping your account credentials confidential and for using secure devices and networks.
19. Data minimization
We aim to collect only the data necessary to provide and improve Mindos Mirror.
For facial interpretation, we recommend using only the image and context necessary to generate the requested report.
We do not need your national ID, passport, medical records, bank card image, or precise location to generate a Mindos Mirror interpretation.
Please do not upload unnecessary sensitive information.
20. Sensitive information
Please do not submit sensitive information unless it is necessary for the service you request.
Sensitive information may include:
- health information;
- religious beliefs;
- political opinions;
- sexual orientation;
- genetic data;
- biometric data used for identification;
- criminal history;
- financial vulnerability;
- highly private emotional or trauma-related details.
If you voluntarily provide sensitive information, we will process it only as necessary for the service you requested, based on your consent or another valid legal basis where applicable.
21. Third-party websites and services
Our website may include links to third-party websites, platforms, payment pages, or social media services.
We are not responsible for the privacy practices of third parties. Their processing of personal data is governed by their own privacy policies.
22. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data practices.
When we update this Privacy Policy, we will change the “Last updated” date (22.05.2026) at the top of this page.
If changes are significant, we may provide additional notice where required by law.
23. Contact us
If you have questions about this Privacy Policy, your personal data, or your privacy rights, you can contact us at:
ACTIVE KARE CONSULTANCY SRL
Operating brand: Mindos Mirror
Website: mindosmirror.com
Registered address: Șos. Mihai Bravu 475, Et. 1, Ap. 5, Sector 3, Bucharest, 030314, Romania
Trade Registry number: J2022007733404
Tax identification number / CUI: 46009148
EUID: ROONRC.J2022007733404
Email: support@mindosmirror.com