The short version: Your reviews stay on your phone. We don't have accounts, we don't store your data on our servers, and we don't sell anything to anyone. AI processing happens through encrypted connections and is not retained after delivery.
1. Who We Are
Exit Review is operated by Weboth LLC, a Texas limited liability company based in Texas, United States ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use the Exit Review mobile application ("App") and website at exitreview.app ("Website").
2. Information We Collect
2.1 Information You Provide
| Data | Purpose | Stored Where |
|---|---|---|
| Review titles & notes | Sent to AI for review generation | Your device only |
| Star ratings | Sent to AI for tone matching | Your device only |
| Photos | Sent to AI for visual analysis (Roast Mode) | Your device only |
| Notification preferences | Schedule local notifications | Your device only |
2.2 Information Collected Automatically
| Data | Purpose | Collected By |
|---|---|---|
| Device type & OS version | App compatibility | App Store / Play Store |
| Advertising identifier (IDFA/GAID) | Ad serving (free tier only) | Google AdMob |
| Purchase history | Subscription management | RevenueCat |
| Crash reports | Bug fixing | Expo (if enabled) |
2.3 Information We Do NOT Collect
- We do not collect your name, email address, or phone number
- We do not create user accounts
- We do not store your reviews, photos, or AI-generated content on our servers
- We do not track your location
- We do not access your contacts, calendar, or other personal data
3. How We Use Information
3.1 AI Processing
When you generate a review, the following data is sent to our API proxy server (hosted on Vercel) and forwarded to AI providers:
- Review title, star rating, and optional notes
- Photos (if attached, for visual analysis in Roast Mode)
- Selected reviewer voice/style
This data is processed in real-time and is not stored on our servers or by AI providers after the response is delivered. Our proxy server does not log request content.
3.2 AI Providers
| Provider | Purpose | Data Sent | Their Privacy Policy |
|---|---|---|---|
| xAI (Grok) | Primary AI generation, photo analysis | Review text, photos | x.ai/privacy |
| Anthropic (Claude) | Fallback AI generation | Review text only | anthropic.com/privacy |
3.3 Advertising (Free Tier)
If you use the free tier, we display ads through Google AdMob. AdMob may collect:
- Device advertising identifier
- IP address (for geographic ad targeting)
- App usage data (screens viewed, session duration)
You can opt out of personalized ads in your device settings (iOS: Settings > Privacy > Tracking; Android: Settings > Google > Ads). Premium subscribers see no ads and no ad-related data is collected.
3.4 Subscription Management
If you purchase a premium subscription, payment processing is handled entirely by Apple (App Store) or Google (Google Play). We use RevenueCat to verify subscription status. RevenueCat receives:
- Anonymous user identifier
- Purchase receipts
- Subscription status
We do not receive or store your payment information (credit card, billing address, etc.).
4. Data Storage and Security
4.1 Local Storage
All user-generated content (reviews, ratings, photos, preferences) is stored locally on your device using encrypted storage (AsyncStorage). This data is not synced to any cloud service. If you delete the app, this data is permanently deleted.
4.2 Server Infrastructure
Our API proxy runs on Vercel's edge network. It forwards requests to AI providers and returns responses. The proxy does not log, store, or cache request or response content. API keys for AI providers are stored as encrypted environment variables on Vercel and are never exposed to the app.
4.3 Security Measures
- All network communication uses HTTPS/TLS encryption
- API keys are stored server-side, never in the app bundle
- No user databases to breach — we don't store your data
- Photos sent for AI analysis are transmitted over encrypted connections and not retained
5. Data Sharing
We do not sell, rent, or trade your personal information. We share data only as described in this policy:
- AI providers (xAI, Anthropic) — to generate review content
- Google AdMob — to serve ads (free tier only)
- RevenueCat — to manage subscriptions
- Apple/Google — for payment processing
- Law enforcement — if required by law, subpoena, or court order
6. Your Rights
6.1 All Users
- Delete your data: Use the "Clear All Reviews" button in Settings to permanently delete all locally stored data
- Opt out of ads: Upgrade to Premium, or disable ad tracking in device settings
- Uninstall: Deleting the app removes all locally stored data permanently
6.2 California Residents (CCPA)
Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect (see Section 2)
- Request deletion of your personal information
- Opt out of the sale of personal information — we do not sell personal information
- Non-discrimination for exercising your rights
6.3 European Users (GDPR)
If you are in the European Economic Area, you have rights under the GDPR including:
- Right of access, rectification, and erasure
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
Since we store data locally on your device and do not maintain user accounts or server-side databases, you have direct control over your data at all times.
6.4 Texas Residents (TDPSA)
Under the Texas Data Privacy and Security Act, you have the right to access, correct, delete, and obtain a copy of your personal data, and to opt out of the sale of personal data and targeted advertising. Contact us to exercise these rights.
7. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through the Service, contact us and we will take steps to delete it.
8. Data Retention
Since data is stored on your device, retention is in your control:
- Reviews and settings: Stored until you delete them or uninstall the app
- AI processing: Not retained after response delivery
- Ad data: Subject to Google AdMob's retention policies
- Purchase data: Subject to RevenueCat and Apple/Google retention policies
9. International Data Transfers
AI processing requests are routed through our API proxy hosted on Vercel's global edge network and forwarded to AI providers in the United States. If you are outside the US, your review content is transmitted internationally for processing. This transfer is necessary to provide the Service and is covered by the AI providers' own data protection measures.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify users of material changes through the App or Website. The "Last updated" date at the top indicates the most recent revision. Continued use after changes constitutes acceptance.
11. Contact Us
For privacy-related questions, concerns, or requests, contact:
Weboth LLC
Texas, United States
Email: admin@weboth.info