Privacy policy

Unmirror is made by James Yeang. Questions about this policy can be sent to jamesyeang@gmail.com.

What stays on your device

Unmirror uses the camera only when you choose to start it. Camera previews, camera frames, photos, clips, audio, gallery media, thumbnails, filenames, and media metadata are not uploaded to Unmirror or its analytics provider.

Captured photos remain temporary unless you save, export, or share them. On iOS, saved photos belong to Apple Photos, not a permanent Unmirror photo library. Photos or media saved to your device library are managed by your operating system and its backup settings. Unmirror itself has no account, cloud media backup, facial recognition, or cross-device media history.

When you choose Save to device or Share, your operating system sends the selected media to the destination you choose. Unmirror does not receive a copy from that transfer.

Optional analytics and masked replay

Analytics and masked app replay are off by default. One choice in Help & settings controls both. The camera and every media feature remain available when you do not consent or when you opt out.

If you opt in, Unmirror sends:

• property-free allowlisted events that show which broad app features were used;
• masked layout and control-interaction snapshots from safe non-camera, non-media screens; and
• a random anonymous identifier associated with this app installation so those consented records can be associated within the installation.

The identifier is not your name, email address, account ID, advertising ID, or a cross-app tracking identifier. Unmirror does not create person profiles or use the data for advertising, marketing, personalization, or tracking across apps or websites.

Replay is limited to Help and About. The iOS implementation uses masked screen-image snapshots; fixed interface labels may remain visible. SDK masking of text, inputs, images and system views is enabled. Replay stops before camera, external system capture, captured or saved media, sharing, and gallery screens appear. Camera frames, media, thumbnails, filenames, media metadata, free-form text, input values, network telemetry, and logs are excluded before capture rather than removed afterward.

PostHog processes this optional data for Unmirror product analytics. Unmirror configures PostHog to discard IP addresses and disables geographic enrichment. The data is encrypted in transit using HTTPS.

Retention and deletion

Masked replay retention is configured to 30 days. Expiry and deletion are processed by PostHog; this is not a promise of deletion at an exact hour. Analytics events are retained longer under PostHog's provider-managed retention policy. We do not promise automatic analytics deletion after 30 days or another fixed period. Opting out stops future analytics and replay collection; it does not automatically delete records already collected.

Because Unmirror has no account and does not attach a name or email address to the random app-install identifier, an email address alone may not locate a specific record. Contact jamesyeang@gmail.com with a privacy question or deletion concern. We may need additional information to identify the relevant app-install records, and provider deletion is asynchronous.

Permissions

• Camera: used only for the live camera and capture experience you start.
• Photos or media library add access: used only when you choose to save final media to your device library.

Permission access does not make media analytics data.

Children, sales, and sharing

Unmirror does not sell personal data. It does not share analytics data for advertising or independent third-party use. PostHog acts as a service provider processing the optional analytics data on Unmirror’s behalf.

Changes

This policy will be updated before Unmirror changes what it collects, why it collects it, who processes it, or how long it is kept. The effective date above identifies this version.