Privacy

Darpan is a mirror, not an account. There is no sign-up and no profile on a server. This page says plainly what stays on your device, what is sent, to whom, and when.

What stays on your device

Your settings, your scan scores, your ritual history and the products you track are saved in this browser (local storage) so the mirror remembers you next time. A scan is saved as its seven numbers and how sure the mirror was. Photos are never saved, and neither is any reading of your skin colour. In the mirror's settings, “Forget me” erases all of it at once, and clearing this site's data in your browser does the same.

What is sent, and only after you allow it

• A photo for a skin scan or a makeup preview goes to YouCam (Perfect Corp.), through this site's server, only after you tap Allow on the consent card or switch it on in Settings. Darpan does not store it. YouCam processes it under its own terms and privacy policy.
• A frame of a bottle, when you ask the mirror to read a label, goes to a vision model (by default Groq, or xAI if the host chose it), again only after you allow it. Hold the bottle close and keep your face out of the frame.
• What you say or type may be sent to the same language model so the mirror can understand phrases its built-in rules don't know. Only the sentence, a few recent lines and a small summary of the ritual are sent: never scores, photos or your name.

If the host has set no keys, the mirror runs in Demo Mode: skin numbers are labelled sample numbers made on your device, and nothing is sent anywhere.

Your voice

The mirror listens through your browser's speech recognition. In Chrome and Edge, that sends your audio to the browser maker's speech service (Google for Chrome, Microsoft for Edge) to turn it into text. Darpan never receives the audio, only the text. If you would rather not, turn off listening with the microphone button and type or tap instead; everything works that way. The mirror's own voice is produced on your device.

The camera

The camera is used only while the mirror is awake. Video is never recorded or uploaded: frames are checked on your device to see whether your face is in the frame and the light is good. The face check runs in your browser with MediaPipe.

What the server keeps

To protect the host from running up costs, the server keeps a daily counter per visitor, keyed by a one-way hash of your network address (not the address itself), which expires within a day. It also keeps short-lived rate-limit counters. It does not keep photos, scores, text you said or any profile. Ordinary hosting logs may record that a request happened, as at any website.

What the mirror is not

Darpan gives cosmetic readings and routine coaching. It does not diagnose, treat or promise results, and it says when it is unsure. If something worries you about your skin, a dermatologist is the right person to ask.

Your choices

• Say no on a consent card: the mirror carries on with sample numbers or recipes only.
• Switch each permission off any time in Settings.
• Turn off listening, or block the microphone or camera in your browser.
• Choose “Forget me” to erase everything on this device.