PRIVACY POLICY

This Privacy Policy describes the privacy practices of Roastd ("we", "us", or "our") and how we collect, use and disclose the personal information about individuals who use our mobile application, website (https://roastd.link/) and any other sites or services (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" means you as the user of the Services.

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use, storage, processing, disclosure and cross-border transfer of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access the Services.

1. INTRODUCTION

Roastd allows users to receive AI-generated roast messages about photos they upload through their social media. This is how it works:

The Roastd app permits a user ("App User") to upload a photo and generate a Roastd link that can be shared on social media platforms and messaging services, such as Instagram Stories, Snapchat, or WhatsApp. When friends click on the Roastd link, they can submit prompts about the photo. The App User receives AI-generated roast messages based on these prompts and can view them in the mobile app.

To protect the safety of our users, we employ content moderation and safety measures.

2. HOW WE PROCESS YOUR PERSONAL INFORMATION

We collect information about you from a variety of sources, and the type of information we collect depends on how you interact with our Services. This section provides more information on the types of information we collect from you and why.

You have the responsibility to ensure that any personal information which you provide to us is accurate and current.

Personal Information You Provide to Us:

Account information:

• Username that you provide when you use the Services
• Email address for account creation and authentication
• We use this information to create an account and provide the Services

User-generated content:

• Photos uploaded to generate roast content
• Prompts submitted by friends through shared links
• We use this information to provide you with AI-generated roast messages

Photos, Face-Containing Images, and AI Processing

Roastd allows users to upload photos, which may include faces, to create roastd links and receive AI transformation results. Roastd does not collect biometric face data, Face ID data, face geometry, faceprints, facial maps, facial recognition identifiers, or biometric templates.

Uploaded photos and prompts may be sent to trusted third-party AI image generation providers, such as Google AI services, only to generate the requested AI transformation results. These providers are not authorized by Roastd to use uploaded photos, prompts, generated images, or face-containing photos to train their models or improve their products.

For Google AI services used by Roastd, request data may be temporarily retained for up to 55 days for limited purposes such as generating the result, abuse prevention, safety, security, debugging, legal compliance, and service reliability. Generated images are stored using trusted and secure cloud storage services and displayed in the user's app inbox.

Uploaded photos, prompts, AI transformation results, and related inbox messages are retained only while the user account is active, unless the user deletes them sooner. This retention is necessary so users can view, manage, delete, and share their results in the app. Users control this retention and can delete individual inbox messages at any time by opening the inbox image, tapping the three-dot menu in the top-left corner, and selecting Delete Message. Users can also delete their account directly in the app from Settings > Delete Account.

Account deletion is processed immediately in the app, and associated uploaded photos, generated images, prompts, inbox messages, and account data are removed from active systems at that time. Roastd does not sell uploaded photos, generated images, prompts, or face-containing photos.

Feedback or correspondence:

• Information you provide when you contact us with questions, feedback, or support requests
• We use this information to provide customer support and improve the Services

Personal Information We Automatically Collect:

Usage information:

• Information about how you use the Services and interact with us
• Information associated with content you upload or submit
• We use this information to provide, troubleshoot, and improve the Services

Device data (This is collected when the user requests support from the mobile app only)

• Mobile device's operating system type and version
• Device type, manufacturer and model
• Unique device identifiers
• We use this information to provide the Services and keep them secure

3. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We may disclose your information to third parties for legitimate purposes subject to this Privacy Policy:

• Service providers: We may disclose your personal information to third party companies that provide services on our behalf (such as cloud hosting, AI processing, content moderation, analytics, and database management).
• Third parties in connection with a business transfer: We may transfer some, or all, of our business or assets, including your personal information, in connection with a business transaction such as a merger, acquisition, or sale of assets.
• Third parties to ensure safety, security and compliance with the law: We may disclose your information as needed to comply with applicable law, cooperate with law enforcement, enforce our terms of service, for fraud prevention and safety purposes, and to defend ourselves against legal claims.

4. HOW YOU DISCLOSE INFORMATION TO OTHERS

• Social media users: You may choose to share Roastd links on your social media accounts. The settings of your social media account will determine which individuals can access these links. We are not responsible for the privacy or security of these social media platforms.

5. PRIVACY OF INDIVIDUALS UNDER 13

Our Services are not intended for use by individuals under 13 years of age, and we do not seek or knowingly collect any personal information about individuals under 13 years of age.

If we learn that we have collected personal information from an individual under 13 without proper consent, we will delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

6. INTERNATIONAL DATA TRANSFERS

Our servers are located in the United States. We may transfer your personal information to service providers and other third parties that support the Services in various jurisdictions.

We will ensure that relevant safeguards are in place to afford adequate protection for your personal information, and we will comply with applicable data protection laws.

7. RETENTION OF PERSONAL INFORMATION

We retain your personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected and processed, in accordance with applicable laws or until you request deletion.

To determine the appropriate retention period, we consider the nature and sensitivity of the personal information, the purposes for which we use it, and applicable legal requirements.

8. SECURITY PRACTICES

We use reasonable organizational, technical, and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration, and destruction of personal information. However, data transmission over the Internet cannot be guaranteed as completely secure.

9. OTHER SITES, MOBILE APPLICATIONS AND SERVICES

Our Services may contain links to other websites, mobile applications, and other online services operated by third parties. We do not control third-party websites or services, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of other websites and services you use.

10. YOUR RIGHTS AND CHOICES

Depending on where you live, you may have rights in relation to information we have collected about you, including:

• Right to be informed about how we have collected and used your personal information
• Right to access a copy of the personal information we have collected about you
• Right to correction of personal information that is inaccurate or out of date
• Right to delete personal information that we maintain about you
• Right to restrict processing in certain circumstances
• Right to lodge a complaint with the relevant supervisory authority

To make a request, please contact us using the information in the "Contact Us" section below.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. We will notify you by updating the date of this Privacy Policy and posting it on our Services. If we make material changes, we will provide additional notification as required by applicable laws.

12. CONTACT US