Privacy Policy
Last updated: 1 June 2026
This policy describes how Appinara s. r. o. processes your personal data when you use Mira. A face photo is sensitive data, so we treat it with particular care.
Controller and contact
Appinara s. r. o., Juskova Voľa 66, 094 12 Juskova Voľa, company ID (IČO) 57623252, registered: Commercial Register of the District Court Prešov, section: Sro, insert no. 52598/P.
Data protection contact: appinarasolutions@gmail.com.
No Data Protection Officer (DPO) is appointed — our processing does not require one under GDPR Art. 37.
What data we process
Face photo (biometric / special-category data under GDPR Art. 9).
Email address and basic profile data (sign-in via email or Google, and access delivery).
Analysis results, score and plan.
Payment data — processed directly by Stripe; we never see card details.
Technical data: session and language cookies, basic logs.
Legal basis
Face photo: your explicit consent (GDPR Art. 9(2)(a)). You can withdraw it at any time.
Paid service: performance of a contract (Art. 6(1)(b)).
Operation and security: legitimate interest (Art. 6(1)(f)).
Recipients and processors
Analysis and image generation use AI providers: Anthropic (analysis) and OpenAI (AI "after" image).
Payments: Stripe. Email: Resend. Photo storage: Cloudflare R2 (EU). Database: Turso.
Sign in with Google (optional): if you sign in with a Google account, Google shares your email and basic profile data with us and itself processes data as a controller.
Some providers (Anthropic, OpenAI, Stripe, Resend, Google) also process data in the USA. Transfers rely on Standard Contractual Clauses (SCC), or the EU-US Data Privacy Framework where the provider is certified.
Retention
Free mode: the photo is kept only during analysis and then deleted; only the text analysis is stored if you save it.
Paid mode: the photo is stored encrypted in the EU (Cloudflare R2, AES256) until you delete the scan or your account.
Unfinished payment: an unpaid scan and its uploaded photo are deleted automatically within 48 hours.
Text analysis, score and plan: for as long as your account exists; deleted promptly when you close it.
Your rights
You have the right of access, rectification, erasure (Art. 17), restriction, portability, objection, and to withdraw consent.
You can delete a scan or your whole account at any time from the Account page, or ask us at appinarasolutions@gmail.com.
You may also lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27 (dataprotection.gov.sk).
Cookies
We use only strictly necessary cookies (login session, language choice). We use no analytics or marketing cookies, so we show no consent banner.
Changes to this policy
We may update this policy. We will announce material changes on this page and, where needed, by email.