Roll runs entirely on your iPhone. It makes zero network calls. We don't collect, send, store, or have access to your photos or any data about you.
None. Roll has no servers, no analytics, no crash reporting, no advertising IDs, and no usage telemetry. There is no Roll account because Roll has no concept of "user."
None. The only signal that ever leaves your device is the anonymous MetricKit summary Apple aggregates from every iOS app — we never receive it.
All of the above can be wiped at any time via Settings → Reset Roll.
Roll uses Apple's PhotoKit with the permissions you grant on first launch. Limited Access is the recommended choice — Roll only ever sees photos you've explicitly picked. You can change this anytime in iPhone Settings → Roll → Photos.
Roll offers two purchase options: a one-time Lifetime purchase and a weekly subscription. Both are handled entirely by Apple's StoreKit — we receive no billing or identity data. The subscription auto-renews until cancelled in iPhone Settings → Apple ID → Subscriptions.
Roll does not target children and does not collect any data — including children's data.
Turn on Airplane Mode and use Roll as normal. Every feature works. This is the cheapest, most reliable proof that Roll never communicates over the network.
Roll does not process personal data because it never receives any. You have all the GDPR-defined rights (access, deletion, portability) by definition — the data lives on your device and you control it directly.
Roll does not sell or share personal information. There is no opt-out because there is no data to sell.
If Roll ever changes what it collects or transmits, this policy will be updated and a notification will surface inside the app before the change takes effect.
Privacy questions: ahoi@sent.com