ProfileProof privacy policy
Last updated 19 August 2026. Applies to the ProfileProof mobile app for iOS and Android, and to this website. At launch, ProfileProof is offered in the United Kingdom and the United States. It is not yet offered in the European Union; when that changes, this policy will be updated first, including the appointment of an EU representative.
ProfileProof is built so that the sensitive part of your data, the screenshots and photos of your dating profile, has the shortest possible life. This page says exactly what we hold, where it lives, how long it lasts, and how you erase it.
Who we are
ProfileProof is operated by OSHY LABS LTD, a company registered in England and Wales under number 16883720, with its registered office at 100 St Pier Court, 549 Green Street, London E13 9GU, United Kingdom. OSHY LABS LTD is the data controller for the information described here.
For any privacy question or request, contact arnold.oshenye@oshylabs.eu.
What we collect and why
| What | Why | How long |
|---|---|---|
| Your email address | To create your account and sign you in with a link | Until you delete your account |
| Your age confirmation | ProfileProof is for adults 18 and over, and we must be able to show we asked | Until you delete your account |
| Your goal and platform choice | To tune the feedback to what you are actually trying to do | Until you delete your account |
| Screenshots and photos you upload | To produce your review, and nothing else | Deleted once the review is done, and in any case within 24 hours |
| Bio and prompt text you type | To produce your review and the rewrites | Until you delete that review or your account |
| Your review results | So you can come back and read them | Until you delete that review or your account |
| Text you paste into the opener helper | To draft openers for that one request | Deleted within 24 hours |
| Purchase records | To unlock what you paid for and restore it on a new phone | Until you delete your account |
| Usage statistics | To see which parts of the app work and which do not | Up to 12 months |
The 24 hour limit is enforced by our servers, not by your phone. A scheduled job runs every fifteen minutes and permanently deletes raw uploads whose time is up. It does not depend on the app being open, on you being online, or on anything you remember to do.
One honest caveat about backups. Deletion removes your data from the systems the app actually reads and writes. Like any service, our database provider takes routine backup snapshots, and a snapshot taken shortly before a deletion can still contain that data until the snapshot itself is overwritten on its normal cycle. Those snapshots are not readable by the app and are never used to bring deleted content back. We would rather tell you this than claim a zero we cannot honestly promise.
Our legal basis for using your data
Different parts of the service rest on different grounds, so here they are separately rather than in one vague list.
- Running your account and producing the review you asked for: our contract with you. Creating the account, generating the Snapshot and the Overhaul, and delivering what you purchased are all necessary to provide the service you signed up for.
- The sensitive content inside an upload: your explicit consent. See the next section. This is a separate and higher standard of consent, asked for on its own screen, and you can withdraw it at any time.
- Keeping the service secure and understanding aggregate usage: our legitimate interests. Preventing abuse and seeing which features work, in a way that carries no content.
- Records of purchases and consents: our legal obligations. We are required to keep these.
Sensitive information, and why we ask separately
A dating profile can reveal things the law treats as especially sensitive. Most obviously, it can reveal your sexual orientation. It might also touch on religion, health or ethnicity. Data protection law calls this special category data and does not allow it to be handled on the basis of a contract alone.
So before your first upload, ProfileProof asks for your explicit consent on a screen of its own. That screen is not bundled with the terms of service, it names sexual orientation as an example of what a profile can reveal, and it gives you an equally clear way to decline. We record the fact and the time that you agreed.
You can withdraw that consent at any time in Settings. Withdrawing it stops any further uploads being processed. It does not by itself delete reviews you already have, which you can remove whenever you like, and it has no effect on anything you have already paid for.
Where your data lives, and who else touches it
Every company below handles your data only on our written instructions, and each is under a contract requiring it to protect your data to the same standard set out in this policy. None of them may use your data for their own purposes.
| Who | What for | Where |
|---|---|---|
| Supabase | Your account, your review results, and briefly your uploads | European Union (Ireland) |
| Anthropic PBC | The AI model that reads your profile and writes your review | United States |
| PostHog | Usage statistics, carrying no content | European Union |
| Sentry | Crash reports, carrying no content | European Union |
| RevenueCat | Managing what your purchase unlocks | United States |
| Apple and Google | Taking the payment itself | Under their own privacy policies |
To produce a review, the images and text you provide are sent to Anthropic PBC in the United States for that single request. Anthropic's business terms state that content sent to their commercial interface is not used to train their models. Because the United States is outside the UK and the EU, that transfer is covered by the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, which are the safeguards the law requires for sending personal data abroad. The same safeguards cover our use of RevenueCat.
One thing we cannot promise on Anthropic's behalf: once a request reaches them, how long they hold it is set by their own retention policy, not by our 24 hour rule. Our rule governs our systems. We have told you who they are and where they are so you can read their policy yourself.
Payments are handled entirely by Apple or Google. We never see or store your card details.
The opener helper, and other people's data
The opener helper works on text that you paste in from someone else's public dating profile. That text is about a real person who has no idea we exist, so it is worth being straight about how we handle it.
- It is used for one thing only, drafting your three openers, and then it is deleted within 24 hours.
- It is never used to build a profile of that person, never linked to them, and never used to train anything.
- We have no way to identify or contact the person from pasted text alone, which is why we cannot notify them individually. The law allows this where notifying people would be impossible or disproportionate, provided we protect them in other ways, which is what the limits above are for.
- Before you can use the feature the first time, you confirm that you will only paste text you have legitimate access to. Do not paste private messages, and do not use it for anyone who has asked you not to.
If you are that other person and you believe your profile text has been put through ProfileProof, email arnold.oshenye@oshylabs.eu and we will delete anything we still hold and stop any further processing we can identify.
What we never do
- We never train AI on your uploads. Not our own models, not anyone else's.
- We never sell your data, or share it for advertising.
- We never send your content to analytics. Usage events carry identifiers, counts, timings and prices only. No image, no profile text and no AI output can leave the app through PostHog, Sentry or any other third party tool. This is enforced in the app's code and covered by an automated test that fails the build if it is ever breached.
- We never connect to your dating accounts. ProfileProof has no access to Hinge, Bumble, Tinder or any other service. It only ever sees what you hand it.
- We never publish anything. There is no feed, no other users, and nothing you upload is visible to anyone but you.
Deleting your data
You do not need to email anyone to erase your data, and you do not need to explain yourself.
- Delete a single review in the app, which removes its results along with anything still stored for it.
- Delete your account in Settings, which removes every review, every remaining upload, your typed text, your consents and your purchase records on our side.
- Already uninstalled the app? You can still ask us to delete everything from the web. See how to delete your ProfileProof account.
Content is removed immediately. The account record itself is fully erased after a seven day window, which exists only so that an accidental deletion can be reported and caught. An active subscription must be cancelled separately in your Apple or Google account, and the store keeps its own receipts under its own policy.
Your rights
Under UK and EU data protection law you have the right to access your data, correct it, erase it, restrict or object to how we use it, withdraw consent you have given, and receive a copy in a portable form. You can exercise the main ones yourself in the app. For anything else, email arnold.oshenye@oshylabs.eu and we will respond within one month.
If you believe we have handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority in your own country.
If you are in the United States
A good share of our users are in the United States. Several US states give you rights over your personal information, including the right to know what is collected, to get a copy, to correct it, and to have it deleted. You can do the main ones yourself in the app, and for anything else email us.
Two points that matter under those laws. We do not sell your personal information, and we do not share it for cross context behavioural advertising. Not for money, not for anything else. And we do not use your information to profile you for decisions about credit, housing, employment, insurance or anything similar. If you are a California resident and want to exercise a right, email arnold.oshenye@oshylabs.eu and we will not treat you differently for asking.
Children
ProfileProof is for adults aged 18 and over. We ask you to confirm your age before you can upload anything, and we do not knowingly collect data from anyone under 18. If you believe a minor has used the app, email us and we will delete the account and its data.
Automated processing
Your review is generated by an AI model. It produces written suggestions about how your profile reads. It does not make any automated decision that produces a legal effect for you, or that similarly significantly affects you. Nothing about your account, your access to the service or your money is decided by the model.
Every response is checked by a separate safety filter on our servers before you see it. That filter blocks commentary on appearance, body, ethnicity, religion, health, sexuality and mental health, blocks manipulative advice, and blocks any claim about your likely results. If a response cannot be made to comply, the review stops and you are not charged for it.
A note on what the app is. ProfileProof gives general profile writing and presentation suggestions. It is not professional, psychological or relationship advice, and it does not guarantee any outcome.
Changes to this policy
If we change how we handle your data we will update this page and change the date at the top. If a change is significant we will tell you in the app before it takes effect.