Data policy

RateAI is a product about how people are perceived, which means it holds photographs of faces and other people's opinions of them. That is sensitive by nature, so the design starts from what we can avoid holding rather than what we can justify collecting.

• Other users see six things about you and nothing else: first name, age, country, avatar, level and whether you are verified.
• Your email, birth date, preferences and rating history are never shown to another user.
• Linked social accounts store the handle only — never an access token, so a breach here cannot reach your Instagram.
• You can read everything the AI coach remembers about you and delete any of it.
• Deleting your account genuinely erases it, on a seven-day timer you control.

We do not buy data about you, we do not run third-party advertising trackers, and we do not sell anything to data brokers.

There is exactly one shape in which one user sees another, and it contains six fields: first name, age, country, avatar, level and a verified flag. Premium subscribers may additionally display an Instagram handle if they choose to add one.

Everything else is invisible to other users, enforced at the database level rather than by the app hiding it: your email, your birth date, who you rated and how, what you were rated, your preferences, your coach conversations and your analyses.

Ratings are anonymous in one direction only. You can see the scores you received; free accounts can read the three most recent individually and premium accounts can read all of them. Raters are shown as the profile they rate from.

We use a small number of processors. Each receives only what its job requires.

AI features are opt-in per use: nothing is sent to a model unless you start a coach action yourself.

Your data is kept for as long as your account exists. When you delete your account it is marked immediately and erased permanently after seven days, unattended and in full.

Individual items can be removed sooner and at any time: delete a photo and the file is removed from storage, not merely hidden; delete a coach memory and it is gone.

Ratings you gave other people are kept after your account is erased, with your identity stripped from them, because deleting them would silently change other people's averages and ranks. Encrypted backups may hold residual copies briefly as part of normal disaster-recovery rotation.

• Access. Your score, history, analyses and coach memories are visible in the app. For a full export, email us.
• Correction. Profile fields are editable in Settings.
• Deletion. Settings → Account → Delete account, or see the deletion page.
• AI memory. Everything the coach remembers is listed and individually deletable.
• Notifications. A master switch, per-category controls and quiet hours.
• Objection and portability. Email [email protected] and we will action it.

RateAI is strictly 18+. The minimum is enforced by a database constraint rather than a form check, so an under-age date cannot be stored even if a client tries. If we learn that an account belongs to someone under 18 we delete it. If you believe a minor is using the service, email [email protected].

• Every table is protected by row-level security, so access is decided by the database rather than by the app remembering to ask.
• Photographs live in access-controlled storage and are served through short-lived signed URLs.
• Logs strip credentials — passwords, tokens, API keys and email addresses — before they are ever written.
• Uploaded content passes through automated moderation.

No system is perfect. If you find a security problem, please report it to [email protected] rather than disclosing it publicly, and we will work with you on it.

If this policy changes materially we will say so in the app before the change takes effect. The date at the top of this page always reflects the current version.

Questions, requests or complaints: [email protected].