Privacy Policy

Effective June 10, 2026 · Working draft for the alpha period — this policy will receive formal legal review before public launch. The commitments in it are real and in force now.

The short version

Map & Mirror exists so you can reflect honestly. That only works if your words are safe. We collect only what the product needs, we never sell your data or use it for advertising, raw transcripts delete themselves on a schedule you control, and you can export or permanently delete everything at any time.

Who we are

Map & Mirror is operated by Let's Dinner, LLC, a Delaware limited liability company, with operations based in Colorado, USA (“we,” “us”). Contact: k.s.seagraves@gmail.com.

What we collect

Account information. Your email address and a password (stored as a salted hash by our authentication provider — we never see it).
Profile information. Display name, handle, and the preferences you set (timezone, transcript retention period, region, input defaults).
Your reflections. The text and voice recordings you share in guided conversations. Voice recordings are transcribed and the audio is not retained after transcription.
Your map. The entities, insights, stories, and snapshots generated from your reflections.
Operational records. An audit log of significant account events (e.g., data exports, deletions, friend connections) and per-request AI processing costs, both visible to you in the app.
Session cookies. Strictly to keep you signed in. We run no third-party analytics, trackers, or advertising pixels.

How we use it

To run the product: build and update your map, generate your story, surface daily reflections, and operate the features you use.
To keep the service safe and functioning: authentication, abuse prevention, debugging.
For nothing else. We do not sell your data, share it with advertisers, use it to train models, or build profiles for any purpose outside the product itself.

AI processing

Your reflections are processed by third-party AI providers solely to operate the product: Anthropic (conversation and synthesis) and OpenAI (voice transcription). These providers process your content under their commercial API terms, which prohibit them from training their models on it. We send the minimum context each feature requires.

Where your data lives

Data is stored with Supabase (database, authentication, and storage) and the application is hosted on Vercel. Data is encrypted in transit and at rest. Access controls ensure your data is readable only by you — and, where you have explicitly connected with a friend, the specific data described below.

Sharing between users

If you accept a friend connection, that person can see your map (entities and insights), your story, and content generated about the two of you together. They cannot see your raw conversation transcripts. Unfriending revokes their access immediately and deletes the content generated about the pair.

Retention

Raw transcripts auto-delete on the schedule you set (7, 30, or 90 days, or kept until you delete them). The default is 30 days.
Your map, insights, and stories are kept until you edit, archive, or delete them, or delete your account.
Map history snapshots are capped at the most recent 100 per account; older snapshots are deleted automatically.

Your rights and controls

Export— download everything as JSON from Settings → Privacy & Data, any time, instantly.
Correction — every card on your map can be edited or archived in your own words.
Deletion — deleting your account removes all of your data immediately and permanently. There is no recovery window, which is why we ask you to type the confirmation.

If you are in a jurisdiction with statutory data rights (e.g., GDPR or CCPA), the controls above are how we honor access, portability, rectification, and erasure. For anything they don't cover, email us.

Children

Map & Mirror is not directed at anyone under 18, and we do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

Changes

If this policy changes in a way that matters, we will tell you in the app before the change takes effect — not bury it. The effective date at the top always reflects the current version.