← Back to home

Privacy Policy — ProRoast

Last updated: July 1, 2026
Effective date: July 1, 2026

This Privacy Policy explains how ProRoast LLC, a company organized under the laws of the United Arab Emirates, with its registered office at Company address ("Company", "we", "us", "our"), collects, uses, discloses, and protects your personal data when you use the ProRoast mobile application (the "App") and the website proroast.app (the "Site", together with the App, the "Services").

We are the controller of your personal data in relation to the Services. Please read this Policy carefully. If you do not agree with it, do not use the Services.

1. Who this Policy applies to

The Services are intended only for individuals aged 17 and older. We do not knowingly collect personal data from anyone under this age. See Section 12 (Children).

This Policy applies to all users worldwide, with additional region-specific rights described in Sections 11–12 for users in the European Economic Area (EEA) and the United Kingdom.

2. Summary of how the App works

ProRoast is an AI-assisted dating helper. Its main features are:

• Photo analysis — you upload profile photos and the App returns feedback and suggestions.
• Chat trainer — you provide message text or screenshots and the App suggests replies and improvements.
• Bio generator — you provide inputs and the App generates dating-profile bios.

To deliver these features, some content is processed on your device, and some content is sent to third-party artificial-intelligence ("AI") providers for processing. Before any of your content is sent to an AI provider for the first time, the App tells you what will be sent and to whom and asks for your explicit permission; nothing is sent until you agree, and if you decline, that feature simply does not run. We do not store your content on our own servers, as described in Sections 5 and 9.

3. Categories of personal data we collect

We collect the following categories of data:

a. Account and identity data. Email address and authentication identifiers (for example, when you sign in, including via Sign in with Apple or Google), an internal user ID, and your account settings and preferences.

b. User content you provide. Profile photographs and images you upload; message text, conversation excerpts, and screenshots you submit to the chat trainer; text prompts and answers you provide to the bio generator; and any other content you choose to submit. This content may include sensitive information (for example, an image may reveal data about your appearance, ethnicity, or, by inference, other characteristics). By submitting such content you consent to its processing as described in this Policy (see Section 6).

c. Subscription and transaction data. When you purchase a subscription or paid feature, the payment is processed by Apple (App Store) or Google (Google Play). We do not receive or store your full payment-card details. We receive confirmation of your transaction, subscription status, product purchased, renewal/cancellation status, and a transaction identifier.

d. Usage and analytics data. Events and interactions within the App, feature usage, session information, crash and diagnostic data, and approximate non-precise statistics, collected via analytics tools (see Section 7). This may include advertising/analytics identifiers.

e. Device and technical data. Device model, operating system and version, language and region settings, app version, IP address, and similar technical identifiers and log data.

We do not intentionally collect precise geolocation, and we do not require it to provide the Services.

4. How we use your personal data and legal bases

We use personal data for the purposes below. For users protected by the EU/UK GDPR, the corresponding legal basis is shown in brackets.

• To provide the core Services — photo analysis, chat trainer, bio generation, and account functionality [performance of a contract].
• To process content through AI providers and on-device to generate results [performance of a contract; and, for any content that is sensitive data, your explicit consent — see Section 6].
• To manage subscriptions, purchases, and billing status [performance of a contract].
• To maintain, secure, and improve the Services, debug, prevent fraud and abuse, and ensure technical functionality [legitimate interests; legal obligation where applicable].
• To understand usage through analytics [consent where required; otherwise legitimate interests].
• To communicate with you about service-related matters, support requests, and important changes [performance of a contract; legitimate interests].
• To comply with law and enforce our Terms of Use, and to establish, exercise, or defend legal claims [legal obligation; legitimate interests].

We do not sell your personal data, and we do not use your content to serve third-party behavioral advertising.

5. AI processing of your content

Delivering the Services requires automated processing of your content:

• On-device processing. Certain analysis is performed locally on your device, and that content is not transmitted to us or to third parties for those operations.
• Cloud / third-party AI processing. We ask for your explicit, informed consent before your content is sent to a third-party AI provider for the first time, and we transmit it only after you agree; you can decline, in which case the feature does not run. For features that require it, your content (such as photos, message text, screenshots, and prompts) is transmitted to third-party AI providers (for example, OpenAI) to be processed and to generate results. We do not store your content or the generated results on our own servers. The content is processed transiently only to return a result to your device, after which we do not retain it. Any handling of the content by the AI provider during processing is governed by that provider's terms (see Section 5, last paragraph, and Section 9).

We instruct our AI processors to process your content only to provide the service to us and not to use it to train their own general models, to the extent such controls are offered under the applicable provider terms (for example, data submitted via the OpenAI API is not used to train OpenAI models by default). We cannot, however, guarantee the internal practices of third parties beyond their contractual commitments. We share your content with these AI providers only under agreements that require them to protect it to a standard that is the same as, or equivalent to, the protections described in this Policy.

These features involve automated processing. They are decision-support tools and do not produce legal or similarly significant effects about you within the meaning of Article 22 GDPR. The outputs are suggestions only; see the Terms of Use for disclaimers.

6. Sensitive data and consent

Photographs and certain content you submit may constitute special categories of personal data (for example, data that could reveal racial or ethnic origin) under the GDPR, or otherwise sensitive data under other laws. We process such data only where you have given your explicit consent by choosing to submit it for analysis, or where processing is otherwise permitted by law.

You may withdraw your consent at any time by ceasing to submit such content and by deleting your content and/or account (see Section 11). Withdrawal does not affect processing carried out before withdrawal.

7. Analytics and similar technologies

We use Firebase Analytics (Google) and similar tools to understand how the Services are used, to diagnose problems, and to improve features. These tools may collect device identifiers, event data, and technical information. Where required by law, we request your consent before using non-essential analytics, and you can manage your choices in the App settings or your device settings.

The Site may use cookies and similar technologies. Where required, a cookie banner allows you to accept or reject non-essential cookies.

8. How we share personal data

We share personal data only as described below:

• AI and infrastructure providers (processors / sub-processors) that host our backend and perform AI processing on our behalf, including OpenAI (AI processing) and cloud-hosting providers located in the United States. We engage these providers only under contracts that require them to safeguard your data to a standard that is the same as, or equivalent to, the protections in this Policy and to process it solely on our instructions.
• Analytics providers, including Google / Firebase.
• App stores and payment processors — Apple and Google — which handle purchases and subscriptions.
• Professional advisers, authorities, and other parties where necessary to comply with law, respond to lawful requests, enforce our Terms, or protect our rights, users, or the public.
• In a corporate transaction (merger, acquisition, reorganization, or asset sale), in which case data may be transferred subject to this Policy.

A current list of key sub-processors is available on request at email@proroast.ai.

9. Data retention

We do not store your personal data on our own servers. In particular:

• User content and AI-generated results (photos, message text, screenshots, prompts, and outputs) are processed transiently to return a result to your device and are not retained by us afterwards.
• Subscription and transaction data are handled by Apple and Google and are not stored by us; those providers retain such records under their own policies and applicable law.
• Analytics data is collected and stored by Google / Firebase as our processor and is retained according to Firebase's data-retention settings and policies, not on our own servers.

Because we do not maintain our own user database, requests to access or delete data we hold about you will, in most cases, confirm that we do not retain such data; for data held by third parties (such as Apple, Google, or the AI provider), please also refer to their respective policies. If this changes in the future and we begin to store personal data, we will update this Policy and specify the applicable retention periods before doing so.

10. International data transfers

We are based in the UAE, and our servers and certain processors are located in the United States; your data may also be processed in other countries where our providers operate.

For transfers of personal data out of the EEA or the UK, we rely on appropriate safeguards, primarily the European Commission's Standard Contractual Clauses (and the UK Addendum / IDTA, where applicable), or another lawful transfer mechanism. You may request a copy of the relevant safeguards by contacting us at email@proroast.ai.

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Access — obtain confirmation of, and a copy of, the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction and objection — restrict or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent (see Section 6).
• Lodge a complaint — with your local data-protection authority.

To exercise any right, contact us at email@proroast.ai. We will respond within the period required by applicable law (generally within one month under the GDPR). We may need to verify your identity before acting on a request.

EEA/UK users: you may lodge a complaint with your national supervisory authority.

12. Children

The Services are not intended for, and may not be used by, anyone under 17 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at email@proroast.ai and we will delete it.

13. California and other U.S. state residents

Although our headquarters are outside the United States, if you are a resident of California or another U.S. state with privacy legislation, you may have rights to know, access, correct, and delete personal information, and to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise applicable rights, contact email@proroast.ai.

14. Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and limited staff access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where required by law or for material changes, provide additional notice (for example, in-app). Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

16. Contact us

For any questions, requests, or complaints regarding this Policy or your personal data:

ProRoast LLC
Email: email@proroast.ai
Address: Company address
Website: proroast.app