Service Providers & International Transfers

Last updated: October 27, 2026

Mirror runs on a small number of service providers. Each receives only the data needed for its task and processes it on our behalf.

Providers

• Cloudflare, Inc. (USA; global network): hosting, database, content delivery, security, website analytics, and standard try-on image generation with Workers AI (photo and product images; not stored after processing).
• Pruna AI (European Union): Pro try-on paid with credits, through Cloudflare AI Gateway (photo and product images; only if you choose a Pro try-on).
• Google LLC (USA): Pro try-on with the Gemini API (photo and product images; only when this provider is active); Google sign-in; Android push notifications through Firebase Cloud Messaging (push token and notification text).
• FASHN LTD (United Kingdom): fallback try-on provider (photo and product images; sub-processors Google Cloud, OpenAI and fal; images kept for up to 72 hours).
• Anthropic, PBC (USA): Stylist replies (message text, gender, chosen styles and budget).
• SerpApi, LLC (USA): product search (search words).
• Apple Inc. (USA): Apple sign-in; iOS push notifications through Apple Push Notification service (push token and notification text).
• Resend, Inc. (USA): sign-in codes by e-mail (e-mail address and code).
• Twilio Inc. (USA): sign-in codes by text message, where available (phone number).

Transfers out of the UK

Where UK personal data goes to a country without UK adequacy regulations, we use the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or rely on a provider's certification to the UK Extension of the EU-US Data Privacy Framework. [Safeguard in place for each provider to be confirmed.]

Your photo

Your photo is sent only when you request a try-on, only for that request, and is never stored on Mirror's servers.