Consumer Health Data

• Mirror Within check-ins: the mood words and feelings you choose, how intense tonight feels, and a few words of your own if you add them.
• Your journal: entries you choose to save. Nothing is kept unless you save it, and your journal is never read by the part of Velvet Mirror that chooses stories.
• A few desire words from what you tell Aurora: words such as “slow” or “held”, never your sentences.
• Your Mirror reading: what your Mirror infers about you, such as the archetype it reads, from what you tell it and, if you choose “Learn from everything”, from the stories you finish, return to or leave early.
• Your preferences and limits: the comfort levels and boundaries you set.
• A safety check: what you write to Aurora is checked in the moment for signs that you may be in crisis, so support can be offered straight away. Only an anonymous count is kept, with no name and no words.

What is never stored: your messages to Aurora, the words you say in a guided session, and your journal text as a signal. If you use Desire Weaver, the answers you give it are used only to make your story; the Privacy Policy (sections 5.5 and 5.6) names who helps make it.

Only to make Velvet Mirror yours, in the way you chose: choosing your stories, shaping Aurora’s replies and your Mirror Within, and, if you chose “Learn from everything”, tailoring Aurora’s letters; and to keep you safe with the check above. It is never used for advertising, never sold, and never used to train AI models.

Before the app learns anything, it asks: How well should your Mirror know you?

• Learn from everything: everything you tell us, plus the stories you finish, return to or leave early. Your stories, your Mirror and Aurora’s letters fit you more exactly.
• Only what I tell you: your answers, the stories you heart, your check-ins and what you say to Aurora. Nothing is learned from what you simply play, and your letters stay general.
• Don’t personalize: no check-ins, no Mirror reading, no desire words kept and no tailored letters. Your stories are hand-picked by us, the same for everyone.

Whatever you choose, we keep what the app needs to work: your membership, where you paused, your saved stories and the limits you set. We record your choice and when you made it.

You can change your choice, and so withdraw your consent, at any time in the app: Settings, Privacy, “How well your Mirror knows you”. It takes effect at once. When you choose less, the app offers to erase what was learned before.

From you, in the app, and, if you chose “Learn from everything”, from how you listen. If you took one of our quizzes on this website with the same email address, the app may begin your Mirror from that result, unless you chose “Don’t personalize”.

We never sell consumer health data and never share it for advertising: not with advertisers, data brokers or social networks. Our advertising tags never run inside the app or on any page that says what you read. Only the services that run Velvet Mirror for us receive it, under contract, and only to do that work:

• Supabase: our database, where it is stored securely.
• OpenAI: receives what you write to Aurora or in a guided session, in the moment, to write the reply and run the safety check. It does not train its models on it and keeps it for up to 30 days only to check for misuse.
• Vercel: hosts our website, which writes our letters. If your letters are tailored, it reads only the archetype your Mirror has read, never your check-ins or your journal.
• Resend: delivers our letters. If your letters are tailored, Resend receives the letter, never your check-ins or your journal.

If you use Desire Weaver, the services named in our Privacy Policy (sections 5.5 and 5.6) help make your story from the answers you give it. No other company receives it.

For as long as your account is open, or until you erase it. Deleting your account removes it from our live systems at once. Encrypted backup copies, kept only so we can recover from a disaster, can still contain it until they are replaced; they are never used for anything else.

Wherever you live, you can:

• See it: Settings, Privacy, “What we know about you” shows all of it in plain words. You can also ask us for a copy (access).
• Delete it: clear your check-ins, your listening history, your Mirror or your journal in Settings, erase everything, or delete your account. You can also ask us to delete it, and we pass that on to anyone above who holds it.
• Withdraw your consent: change “How well your Mirror knows you” at any time.
• Know who received it: the list above is complete, and we will confirm it for you on request.
• Appeal: if we turn down a request, reply with “appeal” in the subject and someone who did not make the first decision will review it and answer within 45 days. If you are in Washington and still not satisfied, you can contact the Washington State Attorney General; in Nevada, the Nevada Attorney General.

Write to aurora@myvelvetmirror.com from the address on your account. We answer within 45 days, free of charge, and we never treat you differently for asking. Velvet Mirror is operated by Velvet Mirror LLC, 1209 Mountain Road Pl NE Ste N, Albuquerque, NM 87110.