Privacy Policy

1. Introduction

Curtain Call ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application.

By using Curtain Call, you consent to the data practices described in this policy.

2. Information We Collect

We collect the following types of information:

• Photos: the selfie or group photo you choose to roast. Deleted right after your roast is made (24 hours at most).

• Roasts: the roast text and Santa audio, and a reaction video only if you choose to film one.

• An anonymous account ID created on first launch (no name, email or phone number).

• Usage data: in-app events such as "roast generated", app version and coarse country from your device locale.

• Purchase information: what you bought and your token balance (Apple handles payment details; we never see them).

We do not collect contacts, precise location or advertising identifiers, and we do not use face recognition.

3. How We Use Your Information

We use your information to:

• Generate personalized roast content based on your photos

• Improve and optimize the App experience

• Process transactions and manage your account

• Send important updates about the App (with your consent for marketing)

• Ensure safety and prevent abuse of our services

4. Photo Handling

Your photos are important to us, and we handle them with care:

• Your photo is sent to xAI (Grok) to check it against our safety rules and to write your roast.

• The roast text (not your photo) is sent to ElevenLabs to create Santa's voice.

• If you make a festive photo or video, your photo is sent to xAI (Grok) for images to make the festive photo (xAI is the only image provider), and the festive photo to ByteDance Seedance (via Higgsfield or BytePlus) or to fal (MiniMax) to animate it or make the singing carol video. A face check by xAI estimates whether anyone might be under 18; nobody is identified, and nothing about faces is kept after the check.

• Every generated photo or video is labelled "AI-generated". You confirm that everyone in the photo is 18 or older and agreed to be in a Curtain Call video; we keep that confirmation as a consent record for 1 year, then delete it (longer only while an open report about that content needs it as evidence). The server also estimates each face's apparent age from the AI vision call (no face recognition): a photo in which anyone appears to be under 18 is refused and nothing is made from it; if anyone appears to be under 21, the show stays playful.

• We delete your photo from our servers right after the roast is generated; anything left behind is deleted within 24 hours.

• Roasts never joke about race, religion, sexuality, gender identity, disability, health, body size, skin, age or anything you can't change.

• You can report any roast (it is hidden immediately) and delete all your data in Settings.

5. Data Sharing

We may share your information with:

• xAI (Grok): your photo and roast settings, to write and safety-check the roast

• xAI (Grok) for images: your photo, to make a festive photo (only if you ask for one; xAI is our only image provider)

• ElevenLabs: the roast text, to voice it

• Higgsfield (or BytePlus), running ByteDance Seedance: the festive photo, to make the animated or singing video (only if you ask for one)

• fal, running MiniMax: the festive photo and the song, to make the singing video on the song-first route (only if you ask for one)

• Supabase (hosting) and RevenueCat (in-app purchases): to run the App and deliver purchases

• Legal Requirements: When required by law or to protect our rights

• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do NOT sell your personal information to advertisers or data brokers.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Delete your data yourself: Settings → Delete my data (removes roasts, photos, videos, usage and your anonymous account)

• Object to or restrict certain processing

• Data portability

To exercise these rights, contact us at [email protected]

8. Children's Privacy

The App is for adults 18 and older; anyone under 18 cannot create an account. We do not knowingly collect personal information from anyone under 18. A photo in which anyone appears to be under 18 is refused and nothing is generated from it.

If you believe someone under 18 used the App, or a minor appears in a generated photo or video, report it in the App or contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the App and updating the "Last Updated" date.

Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

Email: [email protected]