Privacy Policy

The plain-English version

We collect the minimum needed to place a funny phone call. We never sell your data. Uploaded screenshots are deleted right after the call. Recordings belong to the people on them, and the private link to each one expires after 45 days. Declining a gift pauses it; you choose whether an opt-out is temporary or permanent.

GuiltTrip is operated by RETHINK DESIGN LLC, doing business as GUILT TRIP ("GuiltTrip"), the data controller for the personal information described in this policy. Reach us about anything here at support@guilttrip.io.

From senders: your email, payment token (we never see card numbers — our processor does), and the roast ammo you write. From recipients: first name, phone number, and timezone — supplied by the sender. From self-roasters: your confession text or screenshot, and your verified phone number. And, like any website, our servers and service providers log basic technical data — IP address, browser and device (user-agent), and timestamps — which we use to keep the service secure and working. That's the whole list.

If you upload a bank or card screenshot, we strip out identifiers, extract the charges with AI, and use them for your one call. The uploaded image itself is deleted right after the call ends — never used to train anything, never shared. The extracted charges we keep — account numbers, card numbers and the like already redacted — as part of your roast history in your account, so you can revisit the call; delete them anytime with "Delete my data."

Every call is recorded — with the consent of the person being called, collected before the call. Recordings are stored securely and reachable only through a private link we issue to the sender and the recipient (self-roasts: only you). That link works for 45 days after the call and then stops working — so download anything you want to keep. Either party can delete the recording at any time; deletion removes it from our storage, both the full recording and any shareable clip.

Recipients explicitly opt in before any call, on a consent page the purchaser shares with them. Every consent is logged (timestamp, token, response) and retained for 5 years. Declining pauses gifts from that sender; "Pause all gifts" pauses your number platform-wide; texting STOP does the same instantly. No pause is permanent unless you want it to be — opt back in anytime (to receive or to send) with one tap from any GuiltTrip link or by texting START. Until you do, we stay silent. If you choose "Never gift me again," that removal is permanent: no sender can undo it, and no re-opt-in path is shown.

Message and data rates may apply — that's between you and your mobile carrier. Every text we send is post-consent: for a gift, the purchaser delivers the consent-page link from their own phone, and we text the recipient only after they opt in. Message frequency varies; typically 1–3 messages per gift or call (any scheduling confirmations, and a recording notification when it's ready). This is not a recurring subscription — we text you about a specific call, never a marketing blast. Reply HELP to any of our numbers to reach support, or STOP to opt out at any time (STOP is instant — see §5). And to say it plainly: mobile phone numbers and SMS opt-in consent are never sold or shared with third parties for marketing purposes. The only companies that ever touch your number are the service providers that carry the message and place the call — Twilio and the others listed in §9 — each under contract and only to run the service, never for their own marketing.

The character on the call knows only: the recipient's first name, the ammo the sender wrote, and (for self-roasts) your confession. It has no access to accounts, credit reports, social media, or anything we didn't explicitly show it.

We never sell personal data. We never share it with advertisers. We never call anyone who hasn't consented. We never pull data from brokers. We have no bank connection to anyone — there is nothing to breach.

Only the processors that make the product work — each under contract, each receiving the minimum required: Stripe (payments), Twilio (SMS and phone calls), Anthropic and our voice-call platform (the AI that reads the ammo and voices the call), Cloudflare R2 (recording storage), Supabase (our database and login), Resend (transactional email), PostHog (privacy-conscious product analytics), and Sentry (error monitoring, when enabled). We never sell your data and never share it with advertisers.

Access, correct, download, or delete your data anytime from the dashboard ("Delete my data") or by emailing support@guilttrip.io. Deleting your data removes your orders, recordings, clips, confessions, and screenshots from our systems. Two things we keep even then: the consent records for calls (see §5 — logged and retained for 5 years as our legally required proof that everyone opted in) and any opt-out or "never contact me" entry (so a number that told us to stop is never contacted again). We answer within 30 days. California and EU residents get the full CCPA/GDPR menu of rights.