Privacy policy

Your photographs are stored on your device and are never uploaded to us. We do not have a copy of your face and never will. When you ask the coach to look at a photograph, or, as a member, ask for a look to be painted onto your photo in the studio, that one photograph is sent to Google to be read and comes straight back — neither we nor Google keep it. That only happens when you have said it may, and you can turn it off on your profile.

Your quiz answers and your email address are saved to an account, so that clearing your browser does not destroy your profile. Erasing your profile deletes both copies. Nothing is used for analytics or advertising unless you accept cookies in the banner — see “Analytics, cookies and tracking” below.

The controller of the personal data described here is:

Company

Kovo investicijos, MB

Address

Kovo 11-osios g. 25-29, Grigiškės, LT-27109 Vilnius, Lithuania

Company code

305966743

Email

support@mirette.app

Questions about your data, and any request to exercise the rights below, can go to that address or through the contact page.

If you add a selfie, the file is read into memory in your browser and stored as a data URL alongside the rest of your profile, on your device. The same is true of the before and after photographs in your gallery. None of them is ever uploaded to us: we hold no photograph of you on any server, in any database, or in any backup, and the code that assembles everything sent to our database removes every photograph before it does.

There are exactly two things that can send a photograph anywhere, both of which you start yourself:

• Asking the coach to read a gallery entry. If you tick the box on that entry, the before and after you attached are sent to Google's Gemini so that the reply can be about your blending and placement rather than about the look in general. Leave it unticked and the coach writes from the look you attempted and what you typed.
• Painting a look onto your photo in the studio, which is part of the membership. The sentence directly above the “Paint it” button says that pressing it sends that photograph to the same service, once, which returns a version of it wearing the look; the picture is shown in the studio and labelled “AI-generated”. The quiz and the checkout page never send your photograph.

In both cases the photograph is sent as part of a single request and is not stored by us at either end — it is not written to a disk, a database or a bucket. We instruct Google not to retain the request or the response, and Google states that data sent this way is not used to train its models. Nothing about this is automatic: no photograph is sent because a page loaded, and consent is asked for where the photograph is used rather than buried in a setting.

This is consent under Article 6(1)(a), and you can withdraw it at any moment from the profile tab in the studio. Withdrawing it stops anything further being sent; it cannot recall a request already made, which is the ordinary limit on withdrawing consent rather than a carve-out. There is no copy for us to delete, because we never made one.

We do not use these photographs to identify or recognise you, and we do not derive biometric identifiers from them. They are read to describe makeup and handed back.

You can remove the photographs themselves at any time by erasing your profile from the studio, which clears the entire stored record.

Everything below is held because it is needed to provide the service you asked for, except where another basis is named.

• Your quiz answers, the looks you save, the products you tick off, your skills answers and your gallery notes. Needed to perform our contract with you — without them there is no profile to show.
• The name you asked to be called by, if you gave one after checkout. Used to greet you in your studio and nothing else. Needed to perform our contract with you.
• Your email address, once you give it. Used to label your profile, to send sign-in links, and passed to our payment processor so it can send you a receipt. Needed to perform our contract with you.
• Your subscription state: the plan, its status, its renewal date, and the identifiers our payment processor uses for your customer and subscription records. Needed to perform our contract with you.
• Records of payments taken. Kept because accounting law requires it, not because we want them.
• Your IP address, held briefly in memory to limit how often the sign-in and contact forms can be submitted from one place. Our legitimate interest in not having those forms abused.
• Anything you write to us through the contact form. Our legitimate interest in answering you.

We do not hold your card details at any point. We do not collect special category data, and the colour and feature answers you give are used only to produce your own guidance.

Nothing is created while you are reading. You can open any page on this site, including the quiz itself, without an account being made for you and without anything being stored.

An account is created at the moment you answer your first question, because that is the first thing there is to keep. It holds no name, no address and no password — it is an identifier that lets your answers survive closing the tab.

It becomes an account in the ordinary sense only when you subscribe, at which point the email address you gave our payment processor is attached to it and you can set a password.

Your profile is held by Supabase, our database provider, on servers in Frankfurt, Germany.

Each account can read and write only its own record. That is enforced by the database itself rather than by the app asking politely, and the record of what you have paid for sits in a separate table that no browser can write to at all.

We use a small number of providers, each under a contract that limits them to acting on our instructions. Nobody buys this data and nobody is sent it for their own purposes.

• Supabase — the database and the accounts themselves. Hosted in Frankfurt, Germany.
• Stripe — payments, the billing portal and receipts, and the reason you give if you cancel, which is stored with the cancellation. Card details go to Stripe directly and never reach our servers.
• Resend — the delivery of sign-in links and contact-form messages.
• Google — the Gemini models that write your coach's replies, the written part of your colour analysis and the answers in Ask Mia, and that paint a look onto your photograph. It receives your colour profile and whatever you have written to the coach; it receives a photograph only in the two cases described above, and only with your consent. We instruct it not to retain any of it.
• Hostinger — hosting for the site itself.
• PostHog — product analytics, only if you accept cookies: which pages and quiz steps you reach and whether you go on to the checkout. Stored in the EU (Frankfurt, Germany).

Stripe, Resend and Google are established outside the EU. Where data reaches them it is transferred under the European Commission’s standard contractual clauses, or under the EU–US Data Privacy Framework where the provider is certified under it.

• Your profile: for as long as your account exists. Erasing it from the studio deletes the stored record immediately, and that cannot be undone. The empty account identifier itself is removed separately, on the schedule below.
• An account that was abandoned part-way through the quiz and never returned to: deleted after 30 days, along with anything left behind by an erasure.
• Records of payments: ten years from the end of the financial year they fall in, because accounting law requires it. These are billing records, not your profile.
• Contact-form messages: two years, so that we can pick up a thread you started.
• Rate-limiting records: minutes. They are held in memory and are gone when the server restarts.

Your undertone, contrast, season, palette and the order of the look library are derived automatically from the answers you gave. It is arithmetic on your own answers rather than a judgement about you, it has no legal or similarly significant effect, and changing an answer changes the result immediately. No model is involved in working any of it out.

What a model does write is the explanation underneath that result, the coach’s replies in your gallery, and the answers in Ask Mia. Those are generated by Google’s Gemini from the profile above and from what you have written. They are advice about makeup, written by a machine, and they can be wrong.

Under the GDPR you can ask us to do any of the following, free of charge, and we will answer within one month.

• See what we hold about you, and get a copy of it.
• Correct anything that is wrong.
• Delete it. The studio does this in one gesture, but you can also ask us.
• Restrict or object to how we use it, where we rely on our legitimate interests.
• Receive it in a portable, machine-readable form, or have it sent to another provider.
• Withdraw consent, where anything we do rests on consent, without affecting what was done before you withdrew it.

If you think we have handled your data badly, please tell us first so that we can put it right. You are also entitled to complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) at vdai.lrv.lt, or to the supervisory authority in the country you live in.

If you live in Slovakia, you can also complain to Úrad na ochranu osobných údajov Slovenskej republiky, at dataprotection.gov.sk.

If you live in Poland, you can also complain to the Prezes Urzędu Ochrony Danych Osobowych (UODO), at uodo.gov.pl.

If you live in Ukraine, you can also complain to the Уповноважений Верховної Ради України з прав людини (the Ukrainian Parliament Commissioner for Human Rights), at ombudsman.gov.ua.

Payments are handled by Stripe. Card details are entered into fields hosted by Stripe and go straight to them — they are never sent to, processed by, or stored on our servers, and we never see them. What we keep is what we need to know whether your subscription is live: the plan, its status, its renewal date, and the identifiers Stripe uses for your customer and subscription records.

With your consent, we use the Meta Pixel and Meta’s Conversions API (Meta Platforms Ireland Limited) to measure which of our ads bring people to Mirette and lead to a purchase. Nothing is loaded from Meta and nothing is sent to Meta until you press “Accept” in the cookie banner. If you press “Reject”, or do not answer, the site works exactly the same.

If you accept, Meta’s script sets two cookies in your browser (_fbp, and _fbc when you arrived from an ad), which are kept for up to 90 days, and Meta receives: the pages you view; that you started the quiz, submitted your email address, opened the checkout and completed a purchase, with the plan and the amount; and your IP address and browser details. When you give your email address at the end of the quiz, Meta receives it hashed (turned into a code that cannot be reversed): from Meta’s script in your browser, with that step and the ones after it, and from our server together with your account id, also hashed. Our server sends the same hashed account id when you open the checkout, and your hashed email address and account id when you complete a purchase, so that Meta can match these steps to an ad. We also keep which campaign brought you here — the utm parameters of the link you clicked — alongside your payment.

The legal basis is your consent (Article 6(1)(a) GDPR, and the rules on storing information on your device). For collecting this data and passing it to Meta, we and Meta Platforms Ireland Limited are joint controllers; what Meta does with it afterwards is governed by Meta’s own privacy policy. Meta may transfer data to the United States, where Meta Platforms, Inc. is certified under the EU–US Data Privacy Framework.

With your consent, we use PostHog (PostHog Inc.) to understand how people move through the site, so that we can see where the quiz loses people and fix it. Nothing is loaded from PostHog and nothing is sent to it until you press “Accept” in the cookie banner.

If you accept, PostHog stores a random identifier in a cookie and in your browser’s local storage, and receives: the pages you view; which step of the quiz you have reached (the question, never your answer); that you submitted your email address (not the address itself); the plan you looked at; that you opened the checkout, tapped a payment button, closed the checkout or had a payment declined (with the payment provider’s error code, never your card details); the reason you gave for leaving the checkout, if you chose to answer that question; that you completed a purchase, with the amount; and your IP address and browser details. It does not record your screen, and it never receives your photographs, your quiz answers or your email address. The data is held on PostHog’s servers in the EU.

The legal basis is your consent (Article 6(1)(a) GDPR, and the rules on storing information on your device). PostHog processes this data for us under a contract, as our processor.

You can withdraw your consent at any time with “Cookie settings” at the bottom of every page. Withdrawing stops anything further being sent; it does not undo what was sent before.

Everything else we store in your browser is strictly necessary: your profile and your sign-in session are kept in local storage so that the site works offline and you stay signed in, and your cookie choice is remembered so that we do not ask again.

Mirette is not directed at children, and you must be at least 18 to subscribe. If you believe a child has given us personal data, write to us and we will delete it.

If we change how we handle your data we will update this page, and where the change is material and you hold a subscription we will email you about it. The date at the top of this page is the current version.