Roll-24
Privacy Policy
Last updated: 29 May 2026
This Privacy Policy explains how the Roll-24 mobile application ("Roll-24", "the App", "we", "us") collects, uses, and protects your personal information. Roll-24 is an analog camera simulator app for iOS that gives you 24 shots per "roll", which develop at midnight.
By using Roll-24 you agree to the practices described in this policy. If you do not agree, please do not use the App.
1. Data Controller
The data controller responsible for your personal data is:
- Maks Rajter (sole developer of Roll-24)
- Country: Poland
- Contact email: rajtermaks1@gmail.com
- App bundle identifier:
com.roll24.app
2. What Data We Collect
We collect the minimum amount of data needed to run the App. Specifically:
| Data | Source | Purpose |
|---|---|---|
| Apple User Identifier | Sign in with Apple | To create and identify your account |
| Email address (may be an Apple "Hide My Email" relay address) | Sign in with Apple | To contact you about your account or critical service notices |
| Photos you capture in the App | Device camera | To save your roll and let you view, manage, and export your photos |
| Purchase history (in-app purchases) | Apple StoreKit via RevenueCat | To unlock paid features and restore purchases across devices |
Data we do NOT collect
- We do not collect your location.
- We do not access your contacts.
- We do not use any analytics or tracking SDKs.
- We do not use advertising identifiers (IDFA) and we show no ads.
- We do not sell or rent your data to anyone, ever.
3. How We Use Your Data
We use the data described above only to:
- Authenticate you and keep your account secure.
- Store the photos you capture so you can access them across sessions and devices.
- Process in-app purchases and grant access to paid content.
- Send essential local notifications (for example, the midnight "your roll has developed" reminder). These notifications are generated on your device and do not require sending data to us.
- Respond to support requests you send us by email.
- Comply with legal obligations.
We do not profile you, run advertising on you, or share your photos with anyone.
4. Camera Access
Roll-24 requires access to your device camera in order to function. The camera is used solely for live preview and capturing photos that are saved to your roll. The camera is never activated in the background.
5. Local Notifications
Roll-24 schedules local notifications on your device to let you know when your roll has developed (at midnight) or when other in-app events occur. These notifications are scheduled locally by iOS and we do not send push notifications from a server.
6. Third-Party Services
Roll-24 relies on a small number of trusted service providers to operate. Each of them processes data only as described below, under their own privacy policies.
Apple
Sign in with Apple is the only sign-in method offered by Roll-24. Apple provides us with an Apple User Identifier and, where you allow it, an email address (which may be a private relay address). Apple also processes in-app purchases via the App Store and StoreKit.
See: Apple Privacy Policy.
Supabase
Supabase is our backend provider. It hosts our authentication records, our database, and the storage where your photos are kept. Photos and account data are transmitted over HTTPS and stored in Supabase's infrastructure.
See: Supabase Privacy Policy.
RevenueCat
RevenueCat manages our in-app purchases and subscription state on top of Apple StoreKit. RevenueCat receives purchase events (which products you purchased, when, and your anonymous app user ID) so that we can grant and restore entitlements. RevenueCat does not receive your photos or your email address.
See: RevenueCat Privacy Policy.
7. In-App Purchases
Roll-24 offers the following paid items, processed by Apple via StoreKit and tracked by RevenueCat:
- Pro Roll — consumable: extends your current roll to 32 shots (+8 extra).
- Premium Filters — non-consumable: unlocks the premium filter pack permanently.
- Archive — consumable: extra archive capacity for your past rolls.
All purchases are one-time — no subscriptions. Payment is charged to your Apple ID account. Apple's standard refund terms apply.
8. Data Retention
We retain your account data and the photos you save for as long as your account exists. Purchase records are kept for as long as needed for accounting, tax, and consumer-rights reasons (typically up to the period required by applicable law).
When you delete your account (see next section), your account record and your stored photos are permanently removed from our systems within 30 days. Backup copies are rotated out within a reasonable additional period.
9. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data (the "right to be forgotten").
- Restrict or object to processing.
- Export your data in a portable format.
- Withdraw consent for any processing that is based on your consent.
- Lodge a complaint with your local data protection authority. In Poland this is the Prezes Urzędu Ochrony Danych Osobowych (UODO).
Open Roll-24, go to Settings → Delete Account. This permanently removes your account, your stored photos, and your associated records. You can also email rajtermaks1@gmail.com and we will action the request manually.
10. GDPR (EU/EEA Users)
If you are located in the European Union or the European Economic Area, the General Data Protection Regulation (Regulation (EU) 2016/679) applies to our processing of your personal data. The legal bases on which we rely are:
- Performance of a contract — to provide the App's core features (account, photo storage, purchases) when you use it.
- Legitimate interests — to keep the App secure, prevent abuse, and respond to support requests.
- Legal obligation — to retain transaction records for tax and consumer-protection purposes.
- Consent — where you explicitly opt in, for example by allowing camera or notification access.
You can exercise any of your GDPR rights by contacting rajtermaks1@gmail.com. We will respond within 30 days.
11. International Data Transfers
Our service providers (Apple, Supabase, RevenueCat) may process data on servers located outside your country of residence, including in the United States. Where such transfers occur, our providers rely on lawful transfer mechanisms such as the EU Standard Contractual Clauses.
12. Security
We use industry-standard safeguards to protect your data. All communication between the App and our backend is encrypted in transit using HTTPS/TLS. Photos and account records are stored on Supabase using access controls that limit who can read them. No system is perfectly secure, but we take reasonable steps to protect your information.
13. Children
Roll-24 is rated 4+ on the App Store. The App is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time, for example to reflect changes in the App, in our service providers, or in applicable law. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you inside the App. Continued use of the App after a change means you accept the updated policy.
15. Contact
If you have any questions about this Privacy Policy or about how Roll-24 handles your personal data, please contact us:
- Email: rajtermaks1@gmail.com
- Data controller: Maks Rajter, Poland