Legal
Privacy Policy
The short version. Your photos are processed on your phone and are never uploaded — not to us, not to anyone. We do not run a server that receives images. Face detection is used only to work out when to take the shot and how many people are in it; it never identifies anyone. The app does use advertising, analytics, crash-reporting, purchase and notification services, and those are listed in full in section 6 — but none of them ever receives a photo, a roast caption, face data, or a name you typed.
1. Who we are
Ghatiya Cam is built and published by Bytecraft, a software studio based in Pakistan. In this policy, “we”, “us” and “our” mean Bytecraft, and “the app” means the Android application Ghatiya Cam: Roast Camera.
We are the data controller for the limited information described here. You can reach us at support@bytecraft.pk about anything in this document.
This policy covers the app and this website. It does not cover Google Play itself, or any other app or website you reach from a link or an advertisement.
2. Your photos and the camera
This is the part most people came here to read, so it is first and it is specific.
- Photos are processed entirely on your device. When you take a picture or choose one from your gallery, the image stays in the app's private storage on your phone. It is never transmitted to us or to any third party.
- We operate no image server. There is no upload step in the app, and no account to upload to. The app has no user accounts and no sign-in at all.
- Face detection is used only for timing, counting and positioning. The app uses on-device face detection to notice when a face is in frame so it can take the shot at the right moment, to count how many people are in a group photo so it can hand out a line each, and to place the roast caption sensibly on the card. That is the whole of it.
- Face detection never identifies anyone. The app does not perform face recognition, does not build a face template or faceprint, does not match faces against any database, and does not compare, rank or describe the people in a photo. No face data is stored after the picture is processed, and none is ever sent anywhere.
- Capture is never hidden. The camera runs only while the camera screen is open and visible, never in the background. Capture is always shown on screen, and you can switch automatic capture off in Settings and press the button yourself instead.
- No photo, roast caption, face data or name you type is ever sent to an advertising, analytics, crash-reporting, purchase or notification service. This is a rule the app is built around, not an intention.
3. Roasts are fiction
Roasts, the Ghatiya Meter score and Roast Battle verdicts are fictional entertainment. They are randomly selected comedy lines from a fixed, hand-checked set of writing. They are not an analysis of any person, photo or face.
The app does not and cannot judge appearance, personality, or any personal trait. The Ghatiya Meter number and the Roast Battle winner are produced from arbitrary internal identifiers — the same throwaway maths as a dice roll. Nothing about your picture affects them. Please use the app for friendly fun.
4. Permissions
What the app asks for
- Camera — requested only when you choose to open the camera, never at launch. Without it you can still use Name Roast and choose photos from your gallery.
- Notifications (Android 13 and above) — requested only after you have finished a roast and then shared or saved it, never during onboarding. Declining costs you nothing in the app.
What the app does not ask for
The app does not request access to your photo library, contacts, microphone, location, phone or SMS. To use a photo you already have, the app opens Android's own system Photo Picker, which hands the app the single picture you chose and nothing else — so it never gets a view of your gallery.
5. Data kept on your device
The following is stored in the app's private storage on your phone, where other apps cannot read it. It is not uploaded, backed up to us, or shared:
- Your saved roasts — the picture, the caption and the rendered card.
- Which packs and frames you have unlocked, and when temporary unlocks expire.
- Your settings: language, intensity, whether auto-capture is on.
- Small counters the app needs to behave — for example which roast lines you have seen recently, so it does not repeat itself, and how many ads you have been shown, so it can stay within its own limits.
- A random installation identifier that is created on your device and is not linked to you.
Uninstalling the app removes all of it. You can also delete it at any time without uninstalling — see section 12.
6. Services the app uses
The app is free and is paid for by advertising, so it includes third-party software from the companies below. Each one collects technical data of its own, described here and governed by its own privacy policy. None of them receives your photos, your roast captions, face data, or a name you typed into the app.
| Service | Provider | What it receives | Why |
|---|---|---|---|
| Google Mobile Ads | Your device's advertising ID, IP address (used to derive an approximate region), device and app information, and which ads were requested, shown, and interacted with. What is collected depends on the consent choices you make — see section 7. | To show ads, and to measure and pay for them. | |
| User Messaging Platform | Your consent choices and the fact that you were asked. | To collect and record your advertising consent where the law requires it, and to pass it to advertising partners. | |
| Firebase Analytics | A randomly generated app instance ID, device model, operating system version, app version, language, approximate region derived from IP address, and records of in-app events — for example that a roast was created, a pack was opened, or an ad was shown, along with the revenue an ad earned. | To understand how the app is used in aggregate and whether changes to it help or hurt. | |
| Firebase Crashlytics | Crash and error reports: the stack trace, the device model and OS version, the app state at the moment of the crash, and a random installation identifier. | To find and fix crashes. | |
| Firebase Performance Monitoring | Timing measurements — how long the app took to start, how long screens took to draw, and how long the app's own network calls took — with device and app version. | To find out what is slow and fix it. | |
| Firebase Remote Config | A configuration request carrying app version and device information. No personal data is sent. | To change settings — such as how often ads appear — without shipping an update. | |
| RevenueCat | RevenueCat, Inc. | An anonymous app user ID generated on your device, your Google Play purchase receipt and token, the product purchased, and device, platform and country information. | To validate your Pro purchase and restore it if you reinstall or change device. |
| OneSignal | OneSignal, Inc. | A push notification token, device model and OS version, language, time zone, and whether you are subscribed to notifications. We do not set any identifying user ID on it. | To deliver the notifications you allowed, such as the Daily Roast being ready. |
| Google Play Billing | Handles the payment itself. We never see your card, bank or payment details — Google does not give them to us. | To take payment for the Pro upgrade. |
Their policies, if you want to read them:
- Google (Ads, Firebase, Play): policies.google.com/privacy and business.safety.google/privacy
- RevenueCat: revenuecat.com/privacy
- OneSignal: onesignal.com/privacy_policy
7. Advertising and consent
Ghatiya Cam is free because it shows ads. Ads come from Google AdMob.
Where the law requires it — in the European Economic Area, the United Kingdom, Switzerland, and certain US states — the app shows you a consent form the first time you open it, before any ad is requested. That form is Google's User Messaging Platform, and your answer decides whether you see personalised ads, non-personalised ads, or how your data may be used and shared. You can change your answer at any time: open Settings → Manage Privacy Choices in the app.
Whatever you choose, you can still use every part of the app. Choosing non-personalised ads means you see less relevant ads, not fewer features.
You can also reset or delete your advertising ID for every app on the phone at once, in Android's Settings → Privacy → Ads.
Where you have bought Pro, ads are switched off and the advertising SDK stops requesting them.
8. Purchases
Ghatiya Cam offers one optional purchase: a one-time Lifetime Pro upgrade that removes ads and unlocks all content. There is no subscription.
The payment is taken by Google Play. We never receive or store your card, bank or payment details. RevenueCat receives the resulting receipt so the app can confirm you own Pro and restore it if you reinstall the app or move to a new phone. Refunds are handled by Google Play under its own policy; write to us and we will help you through it.
9. Notifications
If you allow notifications, we send at most one a day, and usually far fewer. They cover things like the Daily Roast being ready, a new pack or frame, an unlock about to expire, or a nudge if you have not opened the app for a few days.
Notifications are delivered through OneSignal. They never contain your photo, your roast caption, or anything drawn from your saved roasts — we could not include those even if we wanted to, because they never leave your phone. You can turn notifications off at any time in Android's own app settings, and doing so changes nothing else about the app.
10. Children
Ghatiya Cam is not directed at children. It is not part of Google Play's Designed for Families programme, and it is not marked as child-directed to our advertising partners. The humour is written for a general teen and adult audience, and the Play listing carries a content rating that reflects that.
We do not knowingly collect personal information from children. If you believe a child has provided us with information, write to support@bytecraft.pk and we will deal with it.
11. How long data is kept
- On your device — your roasts, unlocks and settings stay until you delete them or uninstall the app. We never expire them for you.
- Analytics — user-level analytics data is retained by Google for 14 months, after which it is deleted. Aggregated, non-identifying reporting totals may be kept longer.
- Crash reports — retained by Google Crashlytics under its own schedule, currently up to 90 days for detailed reports.
- Purchase records — kept for as long as you may need your purchase restored, and for as long as tax and accounting law requires.
- Notification records — kept by OneSignal while you remain subscribed, and deleted when you unsubscribe or uninstall.
12. Deleting your data
In the app
Open Settings → Clear My Roasts. This permanently deletes, from your device:
- the record of every roast you saved;
- the source pictures the app kept in its own private storage;
- the rendered roast cards it made from them;
- temporary working files left over from creating them.
It cannot be undone, and it does not need our involvement — nothing has to be requested from a server, because nothing was ever on one.
Clear My Roasts does not cancel your Pro purchase. You paid for it, so we deliberately leave it alone. Pictures you have already exported to your gallery or sent to someone are yours and are outside the app, so the app does not touch those either — delete them the usual way.
Uninstalling
Uninstalling removes everything the app stored on your phone. Your Pro purchase survives, because it belongs to your Google account — reinstall and use “Restore purchases”.
Asking us
For anything held by the services in section 6, write to support@bytecraft.pk. Tell us what you want deleted and we will pass the request on to the provider concerned and confirm when it is done. Because the app has no accounts, we may need you to send an identifier from the app — we will tell you where to find it — as it is the only way to locate the right records.
13. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to its processing, withdraw consent you previously gave, or ask that it not be sold or shared for cross-context behavioural advertising. We honour these rights wherever they apply, and we will not treat you differently for using them.
The quickest route for advertising choices is the app itself — Settings → Manage Privacy Choices. For everything else, email support@bytecraft.pk. We aim to reply within 30 days.
Where we rely on a legal basis under the GDPR: advertising and analytics run on your consent where consent is required; processing your purchase is necessary to perform our contract with you; and crash reporting and security run on our legitimate interest in keeping the app working. If you are in the EEA or the UK and think we have got something wrong, you may complain to your local data protection authority.
14. Where data is processed
We are based in Pakistan. The service providers in section 6 are based in the United States and operate globally, so the limited technical data they collect is processed outside your country, including in the United States. Those providers use their own approved transfer mechanisms, such as the European Commission's Standard Contractual Clauses, for data leaving the EEA or the UK.
Your photos are not part of any of this. They stay on your phone.
15. This website
This site sets no cookies, runs no analytics, and loads no fonts, scripts or images from anyone else's server. Every file it serves comes from this domain. Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting.
16. Changes to this policy
If we change how the app handles data, we will update this page and move the “last updated” date at the top. For a change that materially affects you, we will also tell you in the app before it takes effect. This page stays at the same address, so a link to it will not break.
17. Contact us
Questions, requests, complaints, or a roast line that should not have shipped — all to the same place:
support@bytecraft.pk
Bytecraft · bytecraft.pk