Effective date: May 25, 2026. This Policy explains what RoastSong collects, how we use it, when it may be shared, and how to contact us about privacy requests.
This Privacy Policy applies to RoastSong for iOS, roastsong.pages.dev, public share pages, support communications, and related backend services. It does not apply to third-party websites, social platforms, or App Store pages that we do not control.
RoastSong does not require a traditional account with an email and password. The app uses device-based authentication and an install identifier so the service can generate songs, sync history, enforce quotas, and verify subscriptions.
When you create a roast song, you may provide an uploaded photo, an optional friend name, optional inside joke or context, selected roast level, selected music style, selected vocal gender, and selected singer persona.
When you contact us, you may provide your email address, device model, iOS version, app version, share link, screenshots, support description, or other information needed to investigate the issue.
RoastSong may create and store generated song titles, summaries, image captions, lyrics, music prompts, audio files, lyric timestamps, generation group IDs, candidate versions, share slugs, and related metadata.
Completed songs can include a public share page that displays the uploaded photo, title, summary, audio, lyrics, and style. Anyone with the share link may be able to view or forward that page unless it is removed.
We may collect or create technical data needed to operate the app, including an install ID, App Attest key ID, authentication tokens, customer token, app version, build number, platform, locale, subscription status, generation status, rate-limit counters, and basic server logs.
If you allow notifications, Apple Push Notification service provides a device token that lets RoastSong send generation-ready notifications. Notification permissions can be managed in iOS Settings.
RoastSong uses product analytics to understand app quality and feature performance. Events may include app opened, scene selected, generate tapped, generation succeeded or failed, play tapped, share tapped, paywall shown, candidate switched, subscription started, history opened, notification permission granted, and copy link tapped.
Analytics may include event properties such as song ID, selected scene, message length, duration, plan ID, app version, app build, platform, locale, experiment variant, and an install-based identifier. We do not use analytics to sell personal information or to track you across unrelated apps for third-party advertising.
In-app purchases and subscriptions are processed by Apple. We may receive and store transaction-related information needed to unlock paid features, such as original transaction ID, product ID, status, expiration date, auto-renew status, environment, and an app account token or customer token.
We do not receive your full payment card number or Apple account password. Apple controls App Store billing, subscription management, cancellation, and refund workflows.
We use service providers to run RoastSong, including cloud hosting, object storage, database, AI photo and text analysis, music generation, analytics, push notifications, App Store billing, support, security, and monitoring providers.
These providers may process photos, prompts, generated lyrics, audio, metadata, identifiers, transaction status, diagnostics, or support messages only as needed to provide services to us, comply with law, or protect their platforms.
To generate a roast song, your uploaded photo and prompt details may be sent to AI services for image analysis, safety handling, lyric drafting, and music generation. The generated song may then be downloaded, trimmed, stored, and served back to the app.
We instruct generation systems to avoid identifying people, protected traits, minors, body shaming, sexual content, threats, doxing, slurs, living-artist imitation, and copyrighted lyric copying, but automated systems can still make mistakes.
Share pages are intended to be easy to open from a link. They are not password-protected. If you send or post a share link, other people may view the photo, audio, lyrics, and summary, and they may copy or forward the link.
Public share pages, images, and audio may be cached for performance. If a share page should be removed, contact us with the link and the reason for the request.
The marketing website is a static site and does not require cookies to display pages. Hosting and security providers may process standard request data such as IP address, user agent, requested URL, date and time, error logs, cache data, and security signals.
If we add forms, analytics, advertising, or other web tools later, we will update this Policy as appropriate.
We keep information for as long as needed to provide RoastSong, maintain app history and share links, verify subscriptions, enforce quotas, prevent abuse, resolve disputes, comply with legal obligations, and improve service reliability.
Generated songs, photos, audio, lyrics, and share metadata may remain available until deleted, removed, expired, or no longer needed. Transaction, security, rate-limit, and diagnostic records may be retained longer when needed for billing, fraud prevention, audit, or legal purposes.
You can choose not to upload a photo, name, or optional context. You can avoid creating or sending share links. You can disable notifications in iOS Settings. You can manage or cancel subscriptions through Apple.
You can contact us to request access, correction, deletion, or removal where applicable law gives you those rights. For share-page removal, include the share link and enough context for us to evaluate the request.
RoastSong may store app state, pending generation state, generated song metadata, and cached audio on your device. Authentication-related values such as install ID, key ID, JWT, and customer token may be stored using iOS Keychain or local device storage.
Removing local files, clearing app data, or deleting the app may remove local copies, but it may not remove server-side share pages, subscription records, or generated content already stored by the service.
RoastSong is not intended for children under 13. RoastSong also instructs its generation systems not to create roasts about people who appear to be minors.
If you believe a child's personal information or image has been submitted to RoastSong, contact us with enough information to locate and review the content.
We use safeguards intended to protect information, including device authentication, signed tokens, rate limits, access controls, provider security controls, and storage isolation. No system is perfectly secure, and we cannot guarantee absolute security.
If you believe your content, share link, or subscription status has been accessed or used improperly, contact us promptly.
RoastSong and its providers may process information in the United States and other countries where we or our providers operate. Privacy laws in those locations may differ from the laws where you live.
We may update this Policy as RoastSong changes. If we make material changes, we may update the effective date, post the revised Policy, or provide notice in the app or website.
Privacy questions or deletion requests can be sent to roastsong@giftsong.net.
