Privacy

• The photos and text you upload for an audit (screenshots of your profile, photos, bio, prompts).
• The original photos you upload for a paid rebuild, along with your consent for us to lightly edit them.
• Your email, only if you enter it to buy or ask about the paid rebuild.

• Usage analytics, pages viewed, audit run, buttons clicked, plus basic device and approximate location data, through PostHog. We use this to understand what's working and improve the product.
• The audit result, your score and the written verdict the model produced.

• To generate your audit and show you the result.
• To review real audits and improve the quality of the advice and the underlying prompts.
• To create your paid rebuild, including lightly enhanced versions of your photos, only with your explicit consent.
• To contact you about the paid rebuild, only if you gave us your email for that.

Our lawful basis for the audit and quality review is our legitimate interest in running and improving the service. Editing your photos for a rebuild is done on your explicit consent, and for payment-related email it's to take steps you asked for.

• Uploaded photos and bio: stored for up to 90 days, then automatically deleted.
• Rebuild photos and edits: kept while we complete and deliver your rebuild, then removed on request.
• Audit results and usage analytics: kept in our analytics for as long as the product runs, so we can track trends.
• Email: kept until you ask us to remove it.

We don't sell your data. A few providers help us run the web audit, and each only sees what it needs:

• Anthropic receives your photos and bio to generate the audit.
• Google (Gemini) processes your photos to create the enhanced versions, for paid rebuilds only and with your consent.
• Cloudflare R2 stores your photos and bio, in the European Union.
• PostHog gets product analytics and your audit result. It does not receive your photos.
• Vercel hosts the app. Your upload passes through its servers to be processed, but isn't stored there.
• Polar handles payment if you buy the rebuild. It does not receive your photos.

Your uploads are stored in the EU. Some providers above (analytics and AI processing) operate in the United States, so some data is processed there under those providers' standard data-protection terms.

• Lead profiles you create, the names, notes, and details you keep about people you're talking to, plus any screenshots of their dating profiles you add.
• Chat screenshots you upload so the coach can read the conversation and suggest replies.
• Drafts you write and ask the coach to sharpen before you send them.
• Your account, you sign in with Apple, Google, or as an anonymous guest.

• Product analytics through PostHog, which screens you open and which features you use — funnel and usage metadata only. We never send the content of your messages, screenshots, or the people you track to analytics, and session replay is off.
• Your subscription status through RevenueCat, whether you're on the free tier or a paid plan. Apple processes the actual payment; we never see your card.

• To read a chat screenshot or a lead's profile and generate replies and openers.
• To sharpen a draft you wrote.
• To run your pipeline and nudge you before a match goes cold.
• To keep you signed in and remember your leads across your devices.
• To understand which features help and improve the coaching.

We don't sell your data. As with the web tool, a few providers each see only what they need:

• Anthropic receives the message content and images you submit, so it can generate suggestions. Under our agreement with Anthropic, your content is not used to train their models.
• Cloudflare R2 stores the images you upload (profile and chat screenshots).
• Supabase handles sign-in (Apple, Google, or anonymous) and stores your leads, notes, and account.
• RevenueCat records your subscription status. Apple / the App Store processes the payment.
• PostHog receives product analytics only, funnel and usage metadata, never message content, with session replay off.

Some of these providers operate in the United States, so some data is processed there under their standard data-protection terms.

• Leads, notes, and uploaded screenshots: kept until you delete the lead or your account.
• Account data: kept until you delete your account.
• Analytics and subscription status: kept for as long as the product runs.

• Delete any lead, its screenshots and notes are removed with it.
• Delete your account to remove your data. Email [email protected] and we'll handle it.

If you're in the EU/UK, you can ask us to access, correct, or delete your data, or to stop using it. Email [email protected] and we'll handle it. For the web audit there's no account, so it helps to tell us roughly when you ran it; for the app, tell us the account you signed in with.

Gatzby is for adults using dating apps. It's not for anyone under 18, and we don't knowingly collect their data.

If we change this policy, we'll update the date at the top. For anything material, we'll make it obvious.