Your night, your photos.

ROLL provides a shared, event-based disposable camera. An event is created and controlled by a host; people who scan the host’s link to take photos are guests. This policy applies to both, and to visitors of this website.

Hosts. When you create an account we collect your sign-in identifier (Sign in with Apple, Google, or an email magic link) and the events you create, including their title, cover image, timing, and reveal settings.

Guests. We practice data minimization: to join an event you provide only a display name, and we generate a username scoped to that single event. Guests do not create an account and are not asked for an email or phone number.

Photos. The full-size photos taken in an event, plus technical metadata needed to process them (dimensions, capture time, and the film look applied).

Device & usage. Basic device information and aggregate, privacy-respecting analytics (for example, install-intent, QR scans, and gallery views) used to operate and improve the service.

Purchases. Events are purchased in-app through the App Store or Google Play. We receive a verification record of the purchase; we never receive or store your full payment-card details.

No photo in an event is visible to anyone — not even the person who took it — until the host develops the roll at reveal time. After reveal, the host may optionally open a web gallery so guests can view and download photos in a browser. The host can turn that web access off at any time, after which photos remain available only in the app.

To operate the service (create events, process and store photos, enforce capacity and reveal rules), to verify purchases, to send event notifications you’ve opted into, to keep the service secure, and to comply with our legal obligations.

We do not sell your personal data. We share data only with service providers who help us run ROLL (such as hosting and push-notification delivery) under contract, and when required by law. Photos are shared only as the host’s reveal and web-access settings allow.

Event photos are retained as part of the host’s developed roll. Hosts can delete an event and request deletion of their account and associated data from within the app. Guest data is minimized by design and tied to the event it was created for.

Depending on where you live, you may have rights to access, export, correct, or delete your personal data. Hosts can export a roll and request account deletion in the app. For any privacy request, contact us at [email protected].

ROLL is not directed to children under the age required by your local law, and we do not knowingly collect their personal data.

We may update this policy and will revise the effective date above. Questions? Email [email protected].