Privacy Policy

Effective August 31, 2026

Pet Roaster is made by Allyra LLC. This policy explains what the app does with your information. It is short because the app does very little with it.

The short version

What happens to your photo

When you roast a pet, the app makes a smaller copy of the photo you chose and sends that copy, along with the pet's name if you entered one, to xAI Corp., which operates the Grok AI model that writes the roast.

We do not store your photo on our servers. It is passed through, used to generate the roast, and discarded. The full-resolution original stays on your phone until you start an order. When you tap to buy an item, the app builds a print file from that original — your photo at print resolution, composited with the roast — and uploads it to our storage so the item can be printed. This happens on the tap, at the moment checkout opens, and not when payment completes. If you tap to buy and then abandon checkout without paying, a print file has still been uploaded.

That uploaded file sits at a web address anyone can open. It is not behind a password or a login, because the printing company has to fetch it without one. What protects it is that the address cannot be worked out: it is a long random one, it is not derived from your device, your pet's name or your order, it is not listed or published anywhere, and there is no way to browse our storage to find it. In practice it is known only to us and to the printing company. It is deleted after about 30 days, as described under Merchandise below.

xAI processes the photo under its own privacy policy, available at https://x.ai/legal/privacy-policy. The terms covering the interface we use say xAI does not train on what is sent through it without permission, and we have not given that permission. We have also turned on xAI's zero data retention option for our account, which means the copy we send is never written to disk on their side: it is held only long enough to write the roast, and is not stored afterwards. If either of those things changes, we will update this page.

What we store

On your phone. Your roasts and the photos attached to them. This data stays on your device. Deleting the app deletes all of it. We cannot see it and cannot recover it for you.

On our servers. Four things. The first three do not identify you. The fourth does, and it only exists if you place an order.

Usage events. When a roast is generated or you tap a merchandise button, we record the type of event, the time, a randomly generated device identifier, and technical details about the request such as processing time and token counts. We use this to understand which parts of the app people use. It contains no photos and no pet names. Apart from a roast you choose to report, described below, it contains no roast text either, with one narrow exception: when the AI writes something our own content filters reject, we record which forbidden phrase it used so we can tighten the filter. That is a few words of the model's own output, never your pet's name and never the photo.

Reported roasts. If you use "Report this roast", we receive the text shown on that card (the archetype, the rating notes and the line) together with the same anonymous device identifier, so we can read what you objected to and adjust what the app is allowed to generate. Your photo and your pet's name are not sent. This is the only case in which the text of a roast reaches our servers, and it only happens when you ask for it.

Rate limiting. To prevent abuse of our AI service, we temporarily record a randomly generated device identifier and your IP address alongside a count of recent requests. These records are kept for about two days, then deleted automatically as later requests come in.

Orders. If you buy something, our store sends us a copy of the order and we keep it. That copy includes your name, email address, shipping address, what you bought, and the tracking number once it ships. We need it to have the right item printed and sent to the right place, and to answer a question about an order afterwards. It does not include your payment details, which we never receive. This is the only information we hold that identifies you.

The device identifier is generated by the app and is not an advertising identifier. We do not join it to your name, email address or shipping address: usage events and orders are stored separately and nothing in our records links one to the other.

Where it is held. Our database, our print file storage and our server logs are hosted by Supabase on servers in the United States. The store is Shopify and the printing is Printful. The AI is xAI. Each of these companies handles what we send it under its own privacy policy.

What we don't do

Unless you place an order, we don't collect your name or email address. We never collect your phone number. We don't ask for your location. We don't use advertising identifiers or tracking pixels. We don't show ads. We don't sell, rent, or share your data with advertisers or data brokers. We don't use your photos to train AI models, and we have not given xAI permission to use them for that either.

Merchandise

If you order a mug, shirt, sticker, or other item, the checkout is run by Shopify and the item is printed and posted by Printful. They collect the information needed to take payment and ship your order — your name, address, email address, and payment details — under their own privacy policies. We do not receive or store your payment details.

We do receive and keep the rest of the order, as described above. We hold it as the record of the sale. If you want your order details removed, contact us and we will delete them once the order is complete and any claim window has passed.

To get an item printed we store the print file described above and give the fulfillment provider a link it can fetch. That link is public in the sense described above: it needs no password, and anyone holding the address can open the file. We keep print files for about 30 days — whether or not the order was ever completed — and then delete them automatically as later requests come in. Because that deletion is triggered by later app activity rather than by a timer, a quiet period can leave a file in place somewhat longer. If you want a print file removed sooner, contact us and we will delete it.

Children

Pet Roaster is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has used the app and you want their information removed, contact us at the address below.

Your choices

We hold no account and no contact details, so for most of what we store there is nothing tied to you for us to look up. The exception is a print file: if you have tapped to buy an item, a copy of your photo is on our storage until it ages out. Deleting the app removes everything stored on your device, but it does not remove a print file that has already been uploaded — for that, contact us and we will delete it. If you have questions about the anonymous usage records, contact us and we will help where we can.

Depending on where you live, you may have rights under laws such as the GDPR or CCPA to access, correct, or delete personal information held about you. Write to support@allyra.app and we will respond. The next section says what we can find and what we cannot.

Requesting deletion

To ask us to delete what we hold about you, write to support@allyra.app. This is the address for any data request, including one made under the laws above. We will reply and tell you what we found and what we removed.

Your order record. If you have bought something, we hold the copy of the order described above, including your name, email address and shipping address. We will delete it once the order is complete and any claim window has passed. Until then we need it to have the right item printed and sent to the right place, and to answer a question about the order.

Any print file still in our storage. If you tapped to buy an item, a print file built from your photo may still be there. We will delete it straight away. Print files are deleted automatically after about 30 days in any case, so asking only matters if you want it gone sooner.

What we cannot look up, and why. Pet Roaster has no accounts and no login, so an order is the only thing we hold that is tied to a person. The usage and rate-limiting records described above carry a randomly generated identifier that the app invents when it is installed. It is not your name, it is not an advertising identifier, and it is not joined to your order or to anything else about you, so we cannot tell which of those rows are yours and cannot single them out to delete. That is the same fact that keeps those records anonymous in the first place. Rate-limiting records are deleted after about two days regardless.

So if you have ordered, tell us the order number or the email address you used at checkout and we can find both your order and your print file. If you have never ordered, there is nothing on our side tied to you to delete: your photos and roasts are on your phone, and deleting the app removes them.

Changes

If this policy changes, we will update this page and change the effective date above. Material changes will be noted in the app.

Contact

Allyra LLC
Ohio, USA
pet-roaster@allyra.app
Data and deletion requests: support@allyra.app