Mirror is built so that trusting it requires very little trust.
What Mirror reads. A file you export from ChatGPT yourself and choose to import. Themes from your photos, computed on your phone, if you allow photo access. Your answers to a sixty-second survey. Mirror never connects to any account, and it cannot see your chats unless you hand it the file.
What leaves your phone. Your content never does. Not your words, not your photos, not your insights, not your survey answers. If you leave usage sharing on, the app sends anonymous counts, such as "an import completed," so we can tell whether Mirror works. Counts are numbers and event names only; the app shows you this choice before anything is sent, and there is a visible switch to turn it off. The counts travel with a random install identifier that is not tied to your name, email, or anything about you, and it resets if you reinstall the app. You can turn usage sharing off anytime in VineGraph's settings on the Home screen.
Our rule for what we may ever measure. We hold ourselves to one test: if you could not predict we have a signal just from using the app, we do not have it. "You opened the app from a notification" passes that test. "You are probably at home right now" fails it, and always will, no matter how easy it would be to collect.
What Mirror keeps. Everything Mirror derives about you lives in files on your device. Deleting the app deletes all of it. There is no copy anywhere else.
No lock-in. Your record is yours. VineGraph exports your profile and your confirmed facts in plain, documented formats you can read without us. Nothing you build here is held hostage, ever.
The waitlist. If you join it, we keep your email address and use it only to send beta access. Reply to any email and we remove you.
This website. No tracking pixels, no ad tech. One privacy-respecting analytics tool counts visits.
Children. VineGraph is not directed at children under 13, and we do not knowingly collect information from them.
Your rights. Because everything VineGraph derives about you lives on your device, you already hold the two rights regulators care most about: access (open the app) and deletion (delete the app). If you believe we hold anything else, or you want to exercise rights under GDPR, CCPA, or similar laws, write to us at the address below and we will respond.
Questions. Write to us: privacy@vinegraph.com.
Effective October 12, 2026.