In this policy, “Roll,” “we,” “our,” and “us” mean the team that operates the Roll iPhone app (the “App”) and the website at rollweekly.com (the “Site”). “You” means anyone who uses either one.
What we collect
Account information
When you create an account, we collect the sign-in details you use, which depends on how you sign up: an email address, a phone number, or the account identifier from Apple or Google. We also collect what you add to your profile:
- Username and display name
- Bio
- Profile photo and cover photo
- Your “now” status
- Your chosen theme
- Your Top Friends selection and order
Content you create
- Posts: text, photos, and videos, including your pinned post.
- Appreciates: a record of which posts you appreciated, so the author can see who. Roll does not display counts.
- Direct messages: the messages you send and receive, including photos and videos in them. Replies to posts are sent as direct messages.
Friendships and safety
- Friend requests and friendships (always mutual), and the people you’ve blocked.
- Reports: if you report a person or a post, we store who reported, who or what was reported, the reason, and the content involved, so we can review it. The person you report is not told who reported them.
Device and diagnostics
We use Firebase Crashlytics to receive crash reports and diagnostics: device model, iOS version, app version, what the app was doing when it crashed, and a random installation identifier. We do not use this to build profiles of you.
Permissions you grant on your phone
Roll asks for access to your camera and microphone (to take photos and record videos in the App), your photo library (to post photos and videos you choose), and, if you want them, notifications. We only access items from your library that you pick. You can change any of these in iOS Settings at any time.
Notifications
If you allow notifications, we store a device token so we can deliver them, for example when you receive a friend request, a message, or an appreciate. You can turn notifications off in iOS Settings, and we’ll stop sending them.
On this website
The Site doesn’t use cookies, analytics, or advertising trackers, and it has no sign-up form. If you email us to ask for an invite, we use your email address to reply to you and nothing else.
The Site is hosted on Google Firebase Hosting, which sees your IP address when your browser loads a page, like any web host. Fonts and images are served from the Site itself, so loading a page doesn’t contact any other service. Links to TestFlight, the App Store or Instagram take you to those services, which have their own privacy policies.
How we use it
We use your information to:
- Run the App: create your account, store and deliver your posts, messages, and media, and show your page to your friends.
- Enforce the friend rules: mutual friendships, the friend cap, blocks.
- Keep Roll safe: review reports, remove content that breaks our Terms, and stop abuse.
- Send notifications you’ve allowed.
- Find and fix bugs and crashes.
- Comply with the law and respond to valid legal requests.
What we don’t do:
- We don’t show ads or run ad tracking, and we don’t build advertising profiles.
- We don’t sell your personal information or share it with data brokers.
- We don’t use your posts, photos, videos, or messages to train AI or machine-learning models.
- Roll has no AI features, and the feed isn’t ranked by an algorithm. It’s your friends, newest first.
Who can see what
| Thing | Who can see it |
|---|---|
| Posts | Only the author’s mutual friends. There are no followers and no public profiles. |
| Your page | Your cover photo, “now” line, theme, Top Friends, and pinned post are for your friends. When you send or receive a friend request, the other person can see enough of your profile, such as your username, name, and photo, to know who you are. |
| Appreciates | Only the author of the post you appreciated. Nobody sees a count. |
| Messages | Only the people in the conversation. |
| Blocks | Only you. The blocked person isn’t notified. |
| Reports | Roll’s review team. Never the person reported. |
Our access. The people who run Roll can technically access data stored in our systems. We look at content only to investigate a report, fix a technical problem, keep Roll safe, or comply with the law. Messages are encrypted in transit and at rest by our infrastructure provider, but they are not end-to-end encrypted.
About screenshot protection
Roll blocks screenshots and screen recordings inside the App, so they come out blank. That is a real protection, and it is not a guarantee. iOS cannot stop someone from pointing another phone or camera at their screen, and no app can. A friend can also simply tell other people what they saw. Only share things with friends you trust, and please don’t try to get around the protection: our Terms prohibit it.
Who we share data with
We don’t sell your data. We share it only with the service providers that help us run Roll, who process it on our behalf:
- Google Firebase (Google LLC): Authentication (sign-in, including SMS verification codes for phone sign-in), Cloud Firestore (profiles, posts, friendships, messages), Cloud Storage (photos and videos), and Crashlytics (crash reports).
- Sign in with Apple (Apple Inc.): if you choose it to sign in.
- Google Sign-In (Google LLC): if you choose it to sign in.
These providers have their own privacy policies: Firebase, Apple, and Google.
We may also disclose information if we believe it’s required by law or a valid legal process, or necessary to protect someone’s safety or the integrity of Roll. If Roll is ever acquired or merged, your information could transfer to the new owner, and this policy would continue to apply until you were told otherwise.
Where it’s stored and how it’s protected
Your data is stored on Google Firebase servers in the United States. If you use Roll from outside the United States, your information is transferred to and processed in the United States.
We protect it with encryption in transit (TLS), access rules that limit each piece of data to the people who are meant to see it, and authentication on all user data. No system is perfectly secure, and we can’t promise otherwise.
How long we keep it, and deleting it
- Your account and content: kept while your account is active. You can delete individual posts at any time.
- Deleting your account: go to Settings > Delete account. This removes your profile, posts, media, appreciates, and friendships. It can’t be undone.
- Messages: be aware of this limit. Messages you’ve sent can remain in the recipient’s conversation after you delete your account unless you unsend them first. We’re working on removing them automatically on deletion. Until that ships, unsend anything you want gone before you delete.
- Reports and safety records: we may keep records of reports and enforcement actions where we need them to protect other people or comply with the law.
- Backups and caches: deleted data may linger in backups and caches for a short period before it’s overwritten.
- Crash reports: kept by Crashlytics for up to 90 days.
- Waitlist emails: kept until we’ve emailed you about launch. Write to us and we’ll remove yours sooner.
Your choices and rights
- Access and correct: you can see and edit your profile and posts in the App.
- Delete: delete posts, or your whole account, in the App (see above).
- Export: email support@rollweekly.com to request a copy of your data.
- Notifications and permissions: change them in iOS Settings whenever you like.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request that we delete it, and to correct it. We do not sell or share personal information for cross-context behavioral advertising, and we do not discriminate against people who use these rights.
People in the EU, EEA, and UK (GDPR): you can also request access, portability, restriction, or objection, and you can complain to your local data protection authority. Our legal bases are performing our contract with you (running the App), our legitimate interests (keeping Roll safe and working), and your consent where we ask for it (such as notifications).
To use any of these rights, email support@rollweekly.com.
Children
Roll is for people 13 and older. We don’t knowingly collect personal information from anyone under 13. If we learn that we have, we’ll delete it. If you think a child under 13 has an account, please tell us at support@rollweekly.com.
Changes to this policy
We may update this policy as Roll changes. When we make a material change, we’ll post the new version here, update the effective date above, and tell you in the App or by email where appropriate. If you keep using Roll after a change, you accept the updated policy.
Contact
Questions about this policy or your data? Email support@rollweekly.com. A person will read it.