Privacy Policy

Roll is a digital disposable camera for events. A host creates a film and shares a QR code; guests scan it and take a limited number of photos — and, if the host asks, a short voice note — that stay hidden until the reveal. This policy explains what we collect, why, and how to get rid of it.

Who we are

Roll is operated by Roll, Inc. Questions, requests or complaints: support@rollphotos.app.

What we collect

If you host an event

• Account details. When you sign in with Apple, Google or email we receive your user identifier and, if you allow it, your email address and name. We never receive your social-login password. If you use Apple's private relay email, that is the address we store.
• Your events. Event name, date, reveal time, camera style, photo and guest limits, photo challenges, and whether Voice Roll is on.
• The photos and voice notes your guests take at your events, and who took each one.

If you are a guest

• An anonymous session. Scanning a QR code creates an anonymous account tied to that event. We do not ask for your name, email or phone number. You may type a display name; that is optional and visible to the host.
• The photos you take inside the event, plus the time each was taken and the challenge it answers. If the host turned on Voice Roll, the voice note you send (10–30 seconds) and how long it lasted.

What we do not collect

• No advertising identifiers, no tracking across other apps or websites, no ad networks.
• No location data. Photos are stripped of camera metadata during capture.
• No access to your existing camera roll. Roll only sees what you shoot inside the app.

Why we use it

• To run the event: hand out frames, enforce limits, hold the photos and voice notes until the reveal.
• To show the developed film to the host, and to guests if the host allows it.
• To handle reports of objectionable content and keep the service safe.

Our legal basis is the contract between us (running the event you asked for) and our legitimate interest in keeping Roll safe and working.

Who can see the photos

Photos and voice notes in a film are private to that event. Guests cannot hear or see them back — not even their own. Before the reveal, nobody hears or sees them, including the host. After the reveal the host sees the film and hears the notes, and guests see the film too if the host chose to let them. We do not sell photos or recordings, license them, or use them for marketing or to train anything.

Where the data lives

Roll runs on Supabase (database, authentication and encrypted object storage), which hosts on Amazon Web Services. Photos sit in a private bucket that is only reachable through short-lived signed links issued to people entitled to see them. Creating a film is free during this launch; we do not take payment in the app.

How long we keep it

• Photos and voice notes: 12 months after the event, then permanently deleted.
• Event and account data: until you delete your account.
• Reports of objectionable content: up to 24 months, so repeat abuse can be acted on.

Deleting your data

In the app: You → Account → Delete account. That permanently removes your account, every film you created and every photo and voice note in them. It cannot be undone.

Guests: ask the host to hide or delete a photo, or write to support@rollphotos.app from the event and we will remove it.

Your rights

Depending on where you live you may have the right to access, correct, export or erase your data, to object to processing, and to complain to your data protection authority. Write to support@rollphotos.app and we will answer within 30 days.

Children

Roll is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has used Roll, contact us and we will delete the account.

Changes

If we change this policy we will update the date above and, for material changes, tell you in the app before they take effect.