ROAST AI — Privacy Policy
Last Updated: [DATE TO BE CONFIRMED BY OWNER]
Effective date: [EFFECTIVE DATE TO BE CONFIRMED BY OWNER]
This policy describes the information ROAST AI, operated by [LEGAL BUSINESS NAME], actually processes when you use the app, and why.
1. Information We Collect
Google account information
When you sign up with Sign-in with Google we receive your Google account identifier and, where provided by Google, your email address and basic profile information. We never receive your Google password.
ROAST AI account information
Your ROAST AI username, a salted hash of your 8-digit password, your invitation/referral code and referral relationships, your account status (including whether verification is complete), the device identifier and device label of the device your account is signed in on, and your Pro entitlement.
User-submitted content
The text prompts you submit, images or screenshots you upload for analysis, the AI responses generated for you, and your challenge responses. This is processed so we can generate a response, maintain your roast history and track your progress.
Usage information
Progress data such as XP, level, streaks and usage counts, plus technical error logs generated when something in the app fails. Some lightweight preferences (for example your disclaimer acknowledgement) are stored only on your own device in browser storage. Our hosting and database providers may process standard technical request data, including IP address, as part of delivering and securing the service.
Payment information
Payments for the one-time Pro unlock are processed by our payment provider. ROAST AI does not receive or store full payment-card details; we store only whether your account holds the Pro entitlement and the reference needed to verify that purchase.
2. How Information Is Used
- Providing the ROAST AI service
- Authenticating accounts and keeping accounts on one device at a time
- Generating AI responses and processing image analysis
- Maintaining your roast history, XP, streaks and progress
- Managing invitations and referrals
- Processing and verifying Pro purchases
- Preventing fraud and abuse
- Improving reliability and diagnosing errors
- Responding to support requests
- Meeting legal obligations
3. AI Processing
To generate a roast, reality check, action plan or image analysis, the content you submit is sent to AI infrastructure operated by third parties on our behalf. This processing is required to provide the service. We do not claim that your submissions are never processed by third parties — they are, solely to produce your response and operate the product.
4. Data Retention
Information is retained only for as long as reasonably necessary to provide the service, maintain your account and history, meet legal obligations, prevent fraud, and resolve disputes. No fixed retention period has been defined for every category; where the operator sets specific periods they will be published here.
5. Data Deletion
You can delete your account from within the app in Settings, which removes your account record and the progress stored with it, and clears the data held on your device. You can also request deletion by contacting [ROAST AI SUPPORT EMAIL].
6. Third-Party Services
- Google (Sign-in with Google) — Authentication. We receive your Google account identifier and, where provided, your email address. Privacy information
- Supabase — Database, authentication infrastructure and storage for account and progress data. Privacy information
- Lovable — Hosting, application platform and the AI gateway used to generate roast responses. Privacy information
- Paddle — Payment processing for the one-time ROAST AI Pro purchase, once enabled. Card details are handled by Paddle, never stored by ROAST AI. Privacy information
7. Children / Minors
ROAST AI is intended for users who meet the minimum age set by the operator: [MINIMUM AGE, TO BE SET BY OWNER]. Where applicable law requires a higher age or verifiable parental consent, those requirements apply. If we learn that an account was created below the applicable age, the account and its data may be removed.
8. Security
We use reasonable technical and organisational safeguards, including encrypted transport, salted password hashing, row-level access controls on the database, and server-side verification of entitlements. No system can be guaranteed to be perfectly secure, and we do not claim otherwise.
9. Policy Changes
Changes to this policy are published on this page with an updated "Last Updated" date. Material changes may additionally be communicated in the app.
10. Contact
[LEGAL BUSINESS NAME]
[BUSINESS ADDRESS, WHERE LEGALLY REQUIRED]
[ROAST AI SUPPORT EMAIL]
See also our Terms of Service and Refund Policy.
This document is a product template. It should be reviewed by a qualified legal professional before production use. Items shown in square brackets must be completed by [LEGAL BUSINESS NAME].