Privacy Policy

MIRAÉ is operated by M&G Dynamics Corp ("M&G", "we"), which is responsible for the personal data described here. The subprocessor list, the retention periods for each category and the data-residency statement are being finalised and will be published here.

What we collect

Account details (email, name, birth year), your scan data (facial and body landmark measurements, computed scores and the notes written about them), the answers you give at onboarding and in the safety intake, and — only if you choose it — encrypted progress photos.

Biometric data

Facial and body geometry is treated as sensitive biometric information. We process it solely to generate your analysis and progress, with your explicit consent recorded at onboarding. We never sell it and never use it for advertising.

Your four choices

Analysis mode (full or metrics-only), saving progress photos, helping improve MIRAÉ, and usage analytics are four separate choices. None is on by default except the analysis mode you pick. Every change is written to your consent history, which is part of your data export.

Photos

In full mode, frames travel through our servers to the AI processor in memory, for the analysis only, and are not stored by us. If you turn on "save progress photos", each photo is encrypted in your browser with a key only you hold before it is uploaded; we store the encrypted file and cannot open it.

Payments and regional prices

Payments are processed by Stripe. We do not receive or store your full card number. From Stripe we receive what we need to run your purchases: your name and email, your billing country and postal code where given, the type of payment method, the card brand, last four digits and expiry, the country where your card or bank account was issued, and the status of each payment and subscription.

We use the issuing country to apply the price for your region, as the Terms of Service explain (section 13): if it belongs to a different price region from the price charged, your subscription moves to the right price from its next billing period and we email you first (cards issued in the EU or EEA are not used this way). Before checkout, we show an indicative price from the country your connection appears to come from, as reported by our hosting provider, or from your browser's language setting; we do not store that signal. We record, for each purchase, the price region charged and the country used to set it, to keep accurate billing and tax records and to prevent fraud. We use these data because they are necessary to perform our contract with you and to meet our legal obligations. Stripe, as our payment processor, keeps the payment records that tax and accounting law require; our own copy is deleted with your account.

How it is used and shared

To produce your measurements, plans and assistant answers. We use AI processors for the analysis, listed in the subprocessor list. We do not share your data with third parties except processors strictly necessary to run the service, and none of them may use it to train models.

Analytics

Usage analytics are off until you turn them on. When on, events carry a random identifier that is not your account id or email, and never carry scores, photos or free text.

Retention, export and deletion

You can export all of your data, delete individual photos or scans, delete a whole vertical (Facial or Physique), or delete your account from Settings. Deletion is permanent.

Security

Passwords are hashed (bcrypt), saved photos are encrypted with your own key (AES-256-GCM), sessions use signed httpOnly cookies, sensitive actions ask you to confirm your identity, and access is scoped per account and audited. No system is perfectly secure; we follow current best practice and would notify you of a breach as the law requires.

Contact

support@mg-dynamics.com · M&G Dynamics Corp, [to be confirmed: postal address for legal notices]