About & Privacy

MediMirror is a privacy-first mirror and guided routine tool for personal rehabilitation support.

What MediMirror Is

MediMirror is a browser-based mirror tool designed to support guided facial movement practice, reflection, and simple recovery routines. It is intended to be easy to access, simple to use, and privacy-focused by design.

MediMirror is not a diagnostic tool, not a clinical decision system, and not a replacement for professional medical advice. Users should follow guidance from their clinician, therapist, or healthcare professional where applicable.

MediMirror is an evolving software project. Features may change over time as usability, accessibility, safety, and privacy improvements are made.

Privacy-First Design

Local-first

No automatic uploads

Camera video is processed in the browser. MediMirror does not automatically upload video, photos, or recordings.

User controlled

Local downloads only

Photos and recordings are only saved when the user chooses to create them, and they are downloaded locally to the device.

Privacy default

Privacy Mode starts ON

Privacy Mode blocks photos and recordings until the user deliberately turns it off.

No tracking

No analytics by default

The core app is designed without analytics, advertising trackers, or behavioural profiling scripts.

What MediMirror Does Not Do

MediMirror does not use facial recognition, identity verification, behavioural profiling, advertising analytics, or automatic cloud synchronisation in the core app experience.

GDPR-Friendly Positioning

MediMirror has been designed to minimise personal data processing. The core mirror tool does not require an account, does not require a login, and does not require users to submit personal information.

If an external feedback form, contact form, or donation service is used, that external provider may process information entered by the user. Users should review the privacy information provided by those external services.

Contact and Support Messages

If a user chooses to contact MediMirror, the information they provide is used only to respond to their enquiry. Users should avoid sending sensitive medical details, clinical records, photos, videos, or urgent health information through contact forms.

MediMirror support messages are for general support, feedback, accessibility issues, and project enquiries only. They should not be used for clinical advice, urgent health concerns, or emergency support.

Accessibility & Inclusive Design

Accessible

Flexible layouts

MediMirror is designed to work across desktop, tablet, and mobile devices, including portrait and landscape orientations.

User comfort

Adjustable interface

Features such as fullscreen mode, overlay positioning, zoom controls, and floating controls are designed to support different comfort and visibility needs.

Low complexity

Simple interaction model

The interface is intentionally designed to minimise unnecessary complexity and reduce cognitive load during routines.

Private use

Home-friendly

MediMirror is designed to support private use at home without requiring accounts or mandatory cloud connectivity.

NHS / Public Sector Governance Notes

MediMirror is being designed with NHS-style governance expectations in mind, including clear privacy controls, transparency, low data collection, and a strong preference for local-only processing.

CAF-friendly

Secure-by-design approach

Uses standard browser security controls, HTTPS, local processing, and minimal data exposure.

DSPT-friendly

Minimal data handling

The core app does not require patient records, clinical system access, or backend storage of user media.

DTAC-aware

Clear intended use

Positioned as a supportive wellness and exercise aid, not a diagnostic medical device.

DPIA-friendly

Low-risk architecture

Local-first design can support a simpler data protection assessment compared with cloud-recording tools.

Security Principles

HTTPS

Encrypted Connection

MediMirror is designed to use HTTPS encrypted browser connections to help protect communication between the website and the user’s device.

Minimal Exposure

Low Data Collection

The core mirror experience is intentionally designed to minimise unnecessary personal data collection and reduce exposure risk.

Permission Controlled

User Device Control

Camera and microphone permissions remain under browser and device-level user control.

Important Disclaimers

Browser Permissions

MediMirror uses the browser’s built-in permission system. The camera can only start after the user grants permission. Users can revoke camera access at any time in their browser or device settings.

Web applications cannot fully prevent operating-system-level screenshots, screen recordings, or external recordings made using another device. MediMirror’s privacy controls are designed to reduce accidental exposure, not to override device-level behaviour.

External Links

MediMirror may link to external services such as feedback forms, contact forms, donation pages, or support tools. These services are separate from MediMirror and may have their own privacy terms, cookies, analytics, payment processing, and data handling arrangements.

Summary

MediMirror is designed to be simple, transparent, privacy-first, and easy to review. The core app keeps camera use local to the browser, gives users control over photos and recordings, avoids unnecessary data collection, and uses clear disclaimers about its non-diagnostic and non-clinical role.

Version Information

Current Build

MediMirror MVP v0.9.4

Current public demonstration build focused on privacy-first local processing, guided rehabilitation support, accessibility, and usability testing.

Project Status

Prototype / MVP Stage

MediMirror is currently an evolving MVP intended for demonstration, feedback, usability review, and governance assessment purposes.

Architecture

Browser-Based Local Processing

The core mirror experience is designed around local browser processing without automatic upload of camera media to the server.

Last updated: May 2026