This Privacy Policy explains how the Roll-24 mobile application ("Roll-24", "the App", "we", "us") collects, uses, and protects your personal information. Roll-24 is an analog camera simulator app for iOS that gives you 24 shots per "roll", which develop at midnight.

By using Roll-24 you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect the minimum amount of data needed to run the App. Specifically:

Data Source Purpose
Apple User Identifier Sign in with Apple To create and identify your account
Email address (may be an Apple "Hide My Email" relay address) Sign in with Apple To contact you about your account or critical service notices
Photos you capture in the App Device camera To save your roll and let you view, manage, and export your photos
Purchase history (in-app purchases) Apple StoreKit via RevenueCat To unlock paid features and restore purchases across devices

Data we do NOT collect

3. How We Use Your Data

We use the data described above only to:

We do not profile you, run advertising on you, or share your photos with anyone.

4. Camera Access

Roll-24 requires access to your device camera in order to function. The camera is used solely for live preview and capturing photos that are saved to your roll. The camera is never activated in the background.

5. Local Notifications

Roll-24 schedules local notifications on your device to let you know when your roll has developed (at midnight) or when other in-app events occur. These notifications are scheduled locally by iOS and we do not send push notifications from a server.

6. Third-Party Services

Roll-24 relies on a small number of trusted service providers to operate. Each of them processes data only as described below, under their own privacy policies.

Apple

Sign in with Apple is the only sign-in method offered by Roll-24. Apple provides us with an Apple User Identifier and, where you allow it, an email address (which may be a private relay address). Apple also processes in-app purchases via the App Store and StoreKit.

See: Apple Privacy Policy.

Supabase

Supabase is our backend provider. It hosts our authentication records, our database, and the storage where your photos are kept. Photos and account data are transmitted over HTTPS and stored in Supabase's infrastructure.

See: Supabase Privacy Policy.

RevenueCat

RevenueCat manages our in-app purchases and subscription state on top of Apple StoreKit. RevenueCat receives purchase events (which products you purchased, when, and your anonymous app user ID) so that we can grant and restore entitlements. RevenueCat does not receive your photos or your email address.

See: RevenueCat Privacy Policy.

7. In-App Purchases

Roll-24 offers the following paid items, processed by Apple via StoreKit and tracked by RevenueCat:

All purchases are one-time — no subscriptions. Payment is charged to your Apple ID account. Apple's standard refund terms apply.

8. Data Retention

We retain your account data and the photos you save for as long as your account exists. Purchase records are kept for as long as needed for accounting, tax, and consumer-rights reasons (typically up to the period required by applicable law).

When you delete your account (see next section), your account record and your stored photos are permanently removed from our systems within 30 days. Backup copies are rotated out within a reasonable additional period.

9. Your Rights

You have the right to:

Delete your account directly from the App.
Open Roll-24, go to Settings → Delete Account. This permanently removes your account, your stored photos, and your associated records. You can also email rajtermaks1@gmail.com and we will action the request manually.

10. GDPR (EU/EEA Users)

If you are located in the European Union or the European Economic Area, the General Data Protection Regulation (Regulation (EU) 2016/679) applies to our processing of your personal data. The legal bases on which we rely are:

You can exercise any of your GDPR rights by contacting rajtermaks1@gmail.com. We will respond within 30 days.

11. International Data Transfers

Our service providers (Apple, Supabase, RevenueCat) may process data on servers located outside your country of residence, including in the United States. Where such transfers occur, our providers rely on lawful transfer mechanisms such as the EU Standard Contractual Clauses.

12. Security

We use industry-standard safeguards to protect your data. All communication between the App and our backend is encrypted in transit using HTTPS/TLS. Photos and account records are stored on Supabase using access controls that limit who can read them. No system is perfectly secure, but we take reasonable steps to protect your information.

13. Children

Roll-24 is rated 4+ on the App Store. The App is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time, for example to reflect changes in the App, in our service providers, or in applicable law. When we make a material change, we will update the "Last updated" date at the top of this page and, where appropriate, notify you inside the App. Continued use of the App after a change means you accept the updated policy.

15. Contact

If you have any questions about this Privacy Policy or about how Roll-24 handles your personal data, please contact us: