Privacy notice
Rate My Awesomeness (RMA) is operated by Runbook. Contact deskrunbook@gmail.com about your information, access, correction, deletion or a privacy concern. This notice covers the RMA website and its Android app.
Information used by the app
- Your account identifier, email address, verification status and display name are used to sign you in and associate your creations with your account. Google/Firebase manages authentication; RMA does not store your password in its application database.
- Photos, captions, generated verdicts and creation settings are processed to create and save your content. AI generation sends your selected photo and caption to OpenAI. Safety checks can also send uploaded content, messages or generated text to OpenAI, including a sample photo and caption when first saving it to your account or saving it to send in RMA.
- Friend connections, group membership, shared creations, messages, comments, reactions and read markers support social features. Private means access is restricted within RMA; chats are not end-to-end encrypted.
- Awards entries, ratings, comments and likes support the public competition. Entering an Award publishes your selected photo, caption, verdict and display name to visitors, including people without accounts.
- Feedback, safety reports, rule-acceptance records and deletion requests are kept to operate and protect the service. Include only information necessary to explain a report.
- If you enable notifications, a device subscription and your notification preferences are stored so notifications can be delivered. Your browser/device controls camera, photo and notification permissions.
Profile icons
You can choose an illustrated avatar or upload a profile photo. Positioning and cropping happen on your device. When you save a photo icon, only its small cropped JPEG is sent to OpenAI for safety checks and stored with your account; the original upload is not sent by this feature. Photo metadata is removed. Accepted friends and members of groups you can access can see your icon. It is not added to public Awards. Authorised safety moderators can review reported icons. You can replace your icon or return to initials; this replaces the current stored icon. Provider backups and copies another person has already saved are not an instant-erasure guarantee. Profile-photo check attempts use the existing account quota records.
Service providers and transfers
Google/Firebase provides sign-in. Hosting, database and photo storage are provided through ChatGPT Sites and Cloudflare. OpenAI processes content for AI generation and safety checks. If support-email delivery is enabled, Resend delivers feedback to Runbook. These providers may process information outside Australia. Their own privacy and security terms apply to their services.
Network providers may process technical request information, such as IP addresses and device/browser details, to deliver and protect the service. The app uses a session cookie, browser storage for preferences and service-worker storage for installation/offline assets.
Sharing and advertising
Saved creations are private unless you choose to share them with friends or groups, enter the public Awards, or download/share them outside the app. Recipients and public visitors can make copies that RMA cannot recall.
Revenue advertising is not currently enabled. Before enabling Google advertising, we will update this notice to explain the actual advertising providers, information collected, consent choices and protections for younger users. Age-check information must not be used for advertising.
Retention and deletion
Account and content records remain while needed to provide your account and chosen features. You can delete individual creations and withdraw Awards entries in the app. Deleting a creation removes its in-app image and associated shares and Awards entries; withdrawal alone does not delete the original private creation.
You can request deletion of your account and associated data through Settings or the account-deletion page. A request is reviewed and ownership verified before removal. Your account is not deleted merely by signing out, uninstalling or submitting a request. We will confirm completion and explain any information that must be retained for a specific legal, security or dispute-handling reason, including its retention period. Copies held by other users outside RMA cannot be recalled.
Age and your choices
RMA is intended for people aged 16 and over. Users aged 16 and 17 are still minors and are covered by our child-safety standards. Do not send identity documents or selfies for age checking to the support inbox. A dedicated age-assurance service is not currently connected; RMA is not yet cleared for wider testing or public launch.
You can refuse optional notifications, change device permissions, choose not to publish to Awards, and contact the RMA team to access or correct information or make a complaint. If a privacy concern is not resolved, you can contact the Office of the Australian Information Commissioner.