Privacy Policy

LUX Mirror is a product of Lux Mirror LLC, a Pennsylvania limited liability company. We are the controller of the personal information described in this policy, except where we act as a processor for a salon (see Our two roles).

Lux Mirror LLC
96 Commerce Drive PMB 200
Wyomissing, PA 19610, United States
privacy@theluxmirror.com

This policy applies to:

• theluxmirror.com — this website, including reservations, deposits, and booking pages.
• LUX Mirror — the business app used by salon owners and their staff to run bookings, clients, team, devices, and billing.
• LUX Booking — the client app used to find a shop, book an appointment, and view photos taken at the chair.
• The LUX Smart Mirror and the LUX cloud services it connects to.

It does not cover a salon’s own privacy practices, or any third-party site we link to.

For our own customers, we are the controller. When a salon owner signs up, reserves a mirror, or pays a subscription, we decide how that information is used, and this policy governs it.

For the records a salon keeps about its clients, we are a processor. Appointment histories, client contact details, notes, and photos taken at the chair belong to the salon. We store and process them on the salon’s instructions and do not use them for our own purposes. If you are a client of a LUX-equipped shop and want your records changed or removed, ask the shop first — they control it. We will help them act on your request.

Information you give us. Your name, email address, phone number, and password (stored only as a salted hash — never in readable form). If you sign in with Google, we receive your name, email address, and profile picture from Google, and nothing else. If you sign in with Apple, we receive your name and email address (or Apple's private relay address if you choose Hide My Email), and nothing else. Salon accounts also include business name, locations, services, hours, team members and their roles, and the client and appointment records you create. Anything you send us through the contact form or by email.

Payment information. Card details go directly to Stripe and never touch our servers. We keep what Stripe returns: the card brand, last four digits, expiry, and the Stripe customer, subscription, and payment identifiers needed to bill you and show your history.

Payouts. If your salon pays team members through LUX, we collect the taxpayer information Stripe needs to make and report those payments (name, address, taxpayer identification number, bank account). Stripe collects it directly; we see the status, not the numbers.

Information we collect automatically. App version, operating system, device model, language, crash and error reports, and basic usage events. On this website, aggregate traffic measurement through Google Analytics. Server logs including IP address.

Location. Only if you ask for it. Searching for shops “near me” in the LUX Booking app uses your device’s approximate location, with your permission, to sort results. We use it for that search and do not build a location history.

Information from a paired mirror. Device serial and public key, firmware version, online status, last-seen time, and basic health metrics — the fleet telemetry a salon owner sees in the app. Plus any photos a stylist deliberately captures (see The mirror’s camera).

This is the part people ask about, so we will be exact.

The live camera feed is processed on the mirror itself and is never streamed to us. Style previews, colour try-ons, and gesture control all run on the device’s own hardware. The feed is not recorded, not uploaded, and not retained — it exists only in the mirror’s memory for as long as it takes to draw the next frame.

An image leaves the mirror only when a member of the salon’s team deliberately takes a photo — and only of a client who has agreed to mirror photos at that salon.

Photos need your consent. You agree per salon: with the checkbox when you book in LUX Booking, under Settings › Mirror photos, or in person to the salon’s staff, who record it in their app. A salon cannot photograph you before then, and cannot photograph anyone at all until its owner has accepted our mirror-photo terms. Every photo records which consent it was taken under, who took it, and when. You can withdraw your consent for a salon at any time, and you can delete any photo of yourself.

A photo is stored in the salon’s private library and in your own LUX photos. The salon’s managers, the person who took it, and the staff who serve you can see it; nobody else can. Each salon sets how long it keeps client photos (30 days to 10 years; one year by default) and they are deleted automatically after that. Deleting your LUX account deletes your photos with it. We do not use these photos to train models, and we do not sell or license them.

We do not run facial recognition and we do not build faceprints or any other biometric identifier.

Face and hand tracking is not identification. To draw a style on your reflection, the mirror finds the shape of your face and hands in each frame — a set of points that moves with you. Those points are computed and discarded frame by frame on the mirror itself. They are never saved, never sent to us, never linked to a client record, and cannot be used to tell one person from another. We do not create, store or compare faceprints, face templates or any other biometric identifier, and we never will without a new, separate consent from you. Some states regulate this data specifically; our Face data & the camera page explains what we do in Illinois, Texas, Washington, Colorado and New York City.

Microphone. The mirror has a microphone for optional voice prompts. It is off unless the salon turns it on, and when it is on the mirror listens only for short commands after a wake gesture, processes them on the device, and keeps nothing. We do not record conversations and we do not stream audio anywhere. Pennsylvania and several other states require everyone’s consent before audio is recorded; because nothing is recorded, none is taken — and if that ever changes, the mirror will say so on screen first.

AI style previews. When you ask for an AI preview, the relevant photo is sent to Replicate over an encrypted connection with location data and other file metadata stripped, processed, and deleted from Replicate’s systems within one hour. Replicate does not use it to train models. Every preview is marked “AI-generated preview” in the image and in its metadata. A preview is an illustration of a possible result, not a promise, and a salon may not present it as a photo of real work.

• To create and secure your account, and to keep you signed in.
• To run the service: bookings, availability, client records, team access, device pairing and fleet status.
• To take payment, manage subscriptions and deposits, and send receipts.
• To send transactional messages you asked for — booking confirmations and reminders, team invitations, password resets, billing notices, and device alerts.
• To provide support, and to investigate faults, abuse, and fraud.
• To improve the product, using aggregate and diagnostic data rather than the contents of your client records.
• To meet legal, tax, and accounting obligations.

Marketing email, if you have opted in, always carries a one-click unsubscribe. Turning it off never affects the transactional messages above.

If you are in the European Economic Area or the United Kingdom, we rely on: contract, to deliver the service you signed up for; legitimate interests, to secure the service, prevent fraud, and improve the product; consent, for marketing email, push notifications, and location — each withdrawable at any time; and legal obligation, for tax and accounting records.

We use a small number of service providers to run LUX. They may only process information on our instructions, for the purpose listed, and are bound by contract to protect it.

Stripe. Payment processing for LUX and for salons is provided by Stripe. When you provide personal data in connection with LUX, Stripe receives that personal data and processes it in accordance with Stripe’s Privacy Policy. Stripe’s acquirers and their contact details are listed in Stripe’s acquirer disclosure, which is also shown to salons during Stripe onboarding.

Beyond that, we share information only: with a salon, where you are its client and the records are its own; when the law requires it, or to protect someone’s safety or our legal rights; and with an acquirer, if LUX is ever bought or merged — in which case this policy continues to apply until you are told otherwise.

If you add a mobile number and turn on text messages in the LUX Booking app, LUX Mirror sends you transactional texts about your own appointments on behalf of the salons you book with: a booking request received, an appointment confirmed, reminders before it, and changes or cancellations the salon makes. We never text marketing, and we never text you without that opt-in. Texting is optional and is not a condition of booking. Message frequency may vary. Standard Message and Data Rates may apply. How the opt-in works, with the exact wording you agree to, is on our Text messages page.

You can stop at any time: reply STOP (or any clear message that you want the texts to end), turn text messages off in Settings, or email privacy@theluxmirror.com. We honour a request to stop within ten business days — usually immediately — and send one final confirmation text. Stopping ends every automated text from LUX Mirror to that number, for every salon, until you opt back in. Reply HELP for help. We keep a record of when you opted in or out, from which screen, and the wording you agreed to, for at least four years, so we can honour and prove it.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages. We will not share mobile information with third parties for promotional or marketing purposes.

We have never sold personal information and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We do not run advertising networks or third-party trackers in our apps, and we do not sell or rent your client lists, appointment history, or photos to anyone.

All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Account and business records are kept while your account is active. When an account is deleted we remove it and the records we hold for it within 30 days, except where we must keep something longer — payment and tax records for seven years, and security logs for up to 12 months.

Backups are retained on a rolling 30-day cycle, so deleted data may persist in an encrypted backup for up to 30 days after removal from live systems.

Photos and client records belonging to a salon are kept for as long as the salon keeps them, and are deleted when the salon deletes them or closes its account.

In short: face-tracking data — not retained at all. Photos — the salon’s retention period (30 days to 10 years; one year by default). AI preview inputs — deleted by our provider within one hour. Audio — not retained at all. Text-message consent records — at least four years. Payout and tax records — seven years.

You can ask us to:

• Give you a copy of the personal information we hold about you.
• Correct anything inaccurate.
• Delete your account and the information attached to it.
• Export your data in a portable format.
• Stop marketing email, push notifications, or location access.
• Restrict or object to processing based on legitimate interests (EEA/UK).

Most of this you can do yourself in the app under Account. You can delete your account from inside either app (Settings → Danger zone → Delete account) — see Delete your account for what is removed and what we must keep. For anything else on that list, or to request deletion without the app, email privacy@theluxmirror.com from the address on the account. We respond within 30 days, and we do not charge for it or treat you differently for asking.

If you are in the EEA or UK you may also complain to your local data protection authority. We would rather you came to us first.

Data is encrypted in transit with TLS and at rest by our hosting provider. Access to your records is enforced in the database itself through row-level security, so one salon can never read another’s — it is not a rule the app is trusted to follow, it is a rule the database enforces on every query. Staff access to production is restricted, logged, and requires multi-factor authentication.

We test our security at least yearly, review every provider that handles your information before we use it and each year after, and keep a written plan for how we respond to an incident, including who we tell and how fast.

No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant regulators as the law requires.

LUX is built for salon professionals and their adult clients. Our apps are not directed at children and we do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA/UK). If you believe a child has given us information, email privacy@theluxmirror.com and we will delete it.

LUX is operated from the United States and our providers are listed above. If you use LUX from outside the US, your information will be transferred to and processed in the US. Where required, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum with our providers.

We will update this page when our practices change, and the effective date at the top always tells you which version you are reading. For material changes we will email account holders and give notice in the app before the change takes effect.

Privacy questions, requests, and complaints: privacy@theluxmirror.com. Anything else — get in touch or write to Lux Mirror LLC, 96 Commerce Drive PMB 200, Wyomissing, PA 19610.

Our Terms of Service govern your use of LUX.