Short version: we look at the profile you give us and roast it. We don't keep it on our servers, and your history lives on your phone. The third-party AI providers that generate the roast may store what you send them, under their own policies. This policy explains the details. “Roasted”, “we” and “us” mean Aiton Cumbi.
1What you give us
The photos, screenshots and bio text you add for a roast, plus two settings that shape it: whose profile it is (yours or someone else's) and whether uncensored mode is on.
We don't ask for your name, email, phone number, location or contacts, and you don't need an account.
To enforce the free-roast limit, the app sends a device identifier with each roast: a random ID kept on your iPhone, or Android's per-app device ID. Our server stores only a one-way hash of it, with a count of free roasts used. It isn't used for tracking or advertising.
2What happens during a roast
Your photos (resized and compressed on your phone) and bio are sent over an encrypted connection to our server, a Supabase Edge Function. It forwards them to OpenRouter, which routes them to an AI model provider to generate the roast.
Our server does not save your photos, bio or results to a database or file storage. If generating a roast fails, our server logs record only what kind of error happened, never your photos, bio or results. Supabase keeps those logs for a limited time.
3Third-party AI providers may store your data
To generate a roast, your photos and bio are processed by third-party AI services: OpenRouter, and the model provider it routes to. These providers may store what you send, including photos, for their own purposes. That can include logging, abuse monitoring and, for some models (especially free or preview models), improving their AI.
Their storage and retention are governed by their own terms and privacy policies, not this one, and we can't delete data they hold. The “Delete photos after roast” setting controls what stays on your device; it doesn't reach their systems.
Don't upload anything you wouldn't want a third party to see or keep.
4What stays on your phone
Your roast history, your settings and your remaining free roasts are stored on your device. With “Delete photos after roast” on (the default), history keeps the score and the roast but not links to your photos.
“Destroy evidence” in Settings erases your history. Deleting the app erases everything it stored.
5Purchases
Subscriptions are processed by Apple or Google. We never see your payment details. We use RevenueCat to check whether you have Pro. RevenueCat receives an anonymous app ID, your purchase history and basic device information, under its own privacy policy.
6What we don't do
We don't use analytics, advertising or tracking SDKs, and we don't sell or share your personal information for advertising. If that changes, we'll update this policy before it happens.
7Other people's profiles
If you roast someone else's profile, you're sending us their photos and words. Only do it with content you're allowed to share, and never to harass anyone. We don't keep it, but the AI providers may store it, as described above.
8Sharing
Share cards leave the app only when you save or share them. Once they're shared, what happens next is up to you and the app you shared to.
9Age
Roasted is for adults 18 and over. We don't knowingly process content from anyone under 18. If you think a minor has used the app, contact us.
10Your rights
Depending on where you live (including California under the CCPA/CPRA, and the EU/UK under the GDPR), you can ask what we hold about you, and ask us to correct or delete it. Because we don't store roasts on our servers, there's usually nothing on our side to return. Your device holds your history, and you control it. For anything else, email us.
11Changes and contact
If this policy changes in a way that matters, we'll say so in the app. Questions: devaitonc+support-roasted@gmail.com.