Reflect Privacy Policy
Effective date: July 24, 2026
Reflect is the smart-mirror software for ReconIX PRISM devices, made by ReconIX Labs ("we", "us"). This policy covers the Reflect device app and the Reflect web dashboard.
Camera
The device's front camera is used solely to detect motion so the display wakes when someone approaches and sleeps when they leave. Frames are analyzed in memory on the device and immediately discarded. No images or video are ever recorded, stored, or transmitted.
Microphone and voice
The microphone listens on-device for the wake phrase you choose; that detection never sends audio off the device. When you start a conversation by saying the wake phrase, audio streams to our AI voice provider (OpenAI) only for the duration of that conversation and stops when it ends. We record the duration of voice sessions (minutes used) to operate fair-use limits; we do not store recordings or transcripts of your conversations.
Google account data
If you sign in with Google, we receive your basic profile (name, email, profile picture) to create your account. If you connect Google Calendar, we access your calendar events read-only and only to display upcoming events on your own mirror and dashboard. Calendar data is fetched on demand, is not stored on our servers beyond short-lived caching, is never used for advertising, and is never sold or shared with third parties. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you connect Gmail, we request read-only access and read only message headers — the sender name and subject line of recent unread inbox messages. We never read, store, or transmit message bodies, attachments, or contents. Headers are held briefly in memory (a few minutes) to display an unread summary on your mirror and to include a count in your spoken briefing. They are never stored long-term, used for advertising, or shared. You can disconnect at any time from the dashboard or at myaccount.google.com/permissions.
Proactive briefings
To greet you with what changed, our server assembles facts you already have access to — weather, travel time, your next calendar event, reminders you set, and unread mail counts — and sends them to OpenAI to be phrased into a short spoken summary, then to a speech service to be voiced. Briefings are generated by AI and may be imperfect. The current day's briefing text is stored on your account until it is delivered, then replaced.
Reminders, presence and check-in alerts
Reminders and checklist items you create are stored on your account so the mirror can display and speak them. When someone wakes the mirror, we record a timestamp — a count of walk-ups, never an image or recording — so that you can see when the mirror was last used and which reminders were confirmed. If you enable check-in alerts, we send an email from info@reconixlabs.ai to the address you choose when the mirror has not been used for longer than your chosen window. Turning the camera off in the dashboard stops presence detection entirely.
Settings and usage data
We store the preferences you set (addresses, ZIP code, assistant name, display options) and voice-usage totals in our database, associated with your account, solely to operate the product. We do not sell personal data and we do not use advertising or tracking SDKs.
Third-party services
To show dashboard data, our servers contact: OpenWeatherMap (your ZIP code, for weather), Google Routes (your configured addresses, for drive or transit time), Google Calendar (your events, if connected), Gmail (unread message headers only, if connected), OpenAI (voice conversations, briefing text, and speech synthesis), and Resend (to deliver check-in alert emails, if enabled). Each receives only the minimum data needed for its function.
Data retention and deletion
Account settings and usage totals are kept while your account is active. You can delete your data at any time by emailing info@reconixlabs.ai from your account email; we will delete your account records within 30 days. Disconnecting Google Calendar (or revoking access at myaccount.google.com/permissions) immediately ends our access to your calendar.
Children
Reflect is not directed at children under 13 and we do not knowingly collect their data.
Changes
We will update this page when our practices change and revise the effective date above.
Contact
ReconIX Labs · info@reconixlabs.ai