In this policy, “Roll,” “we,” “our,” and “us” mean the team that operates the Roll iPhone app (the “App”) and the website at rollweekly.com (the “Site”). “You” means anyone who uses either one.
What we collect
Account information
When you create an account, we collect the sign-in details you use, which depends on how you sign up: an email address, a phone number, or the account identifier from Apple or Google. We also collect what you add to your profile:
- Username and display name
- Bio
- Profile photo and cover photo
- Your “now” status
- Your chosen theme, page layout, and the font your name is shown in
- Your Top Friends selection and order
- Your On Repeat song, if you pick one
- The city or neighborhood you’re in, if you turn that on (see “Location” below)
Content you create
- Posts: text, photos, videos, voice recordings, songs, and workouts, including your pinned post, who each post is shared with, and whether you’ve hidden it from your page.
- Nows: photos, videos, and text you share for 24 hours, and which friends viewed them.
- Appreciates: a record of which posts you appreciated, so the author can see who. Roll does not display counts.
- Direct messages: the messages you send and receive, including photos, videos, voice messages, and view-once photos in them, and hearts on messages. Replies to posts and Nows are sent as direct messages.
- Friend groups: the names you give your groups and who’s in them, so you can share a post or Now with just some friends. Only you can see your groups.
Friendships and safety
- Friend requests and friendships (always mutual), and the people you’ve blocked.
- Reports: if you report a person or a post, we store who reported, who or what was reported, the reason, and the content involved, so we can review it. The person you report is not told who reported them.
Workouts from Apple Health
If you choose to post a workout, Roll reads that one workout from Apple Health with your permission: the type, time, duration, distance, pace or speed, elevation, calories, average and maximum heart rate, and a simplified heart rate line. If you leave “Show map” on, Roll also reads the workout’s route, trims the first and last 200 meters so the start and end (often your home) aren’t shown, simplifies it, and saves it with the post. Only the workouts you post are saved, and they’re visible only to the friends who can see that post. Turn “Show map” off to post a workout without its route.
Health data is never used for advertising or marketing, never sold, and never shared with anyone other than the friends you post it to and the providers that store Roll’s data. Roll never writes to Apple Health. You can turn off Roll’s access in the Health app or iOS Settings at any time.
Location
If you tap to show where you are on your page, Roll asks iOS for one rough location fix while you’re using the App, turns it into a neighborhood or city name (such as “Silver Lake, Los Angeles”), and saves only that name. Your coordinates aren’t saved. You can also type a place yourself or remove it. Workout routes are the one place precise locations are saved, as described above, and only when you post a workout with its map.
Device and diagnostics
We use Firebase Crashlytics to receive crash reports and diagnostics: device model, iOS version, app version, what the app was doing when it crashed, and a random installation identifier. We do not use this to build profiles of you.
Permissions you grant on your phone
Roll asks for access only when you use a feature that needs it: your camera and microphone (to take photos, record videos, and send voice messages), your photo library (to post photos and videos you choose, and to save images such as your page card when you ask), Apple Health (to post workouts you choose), Apple Music (to play song previews with your subscription), your location while using the App (to show your city, if you turn that on), and, if you want them, notifications. We only access items from your library that you pick. You can change any of these in iOS Settings at any time.
Notifications
If you allow notifications, we store a device token so we can deliver them, for example when you receive a friend request, a message, or an appreciate. You can turn notifications off in iOS Settings, and we’ll stop sending them.
On this website
The Site doesn’t use cookies, analytics, or advertising trackers, and it has no sign-up form. If you email us to ask for an invite, we use your email address to reply to you and nothing else.
The Site is hosted on Google Firebase Hosting, which sees your IP address when your browser loads a page, like any web host. Fonts and images are served from the Site itself, so loading a page doesn’t contact any other service. Links to TestFlight, the App Store or Instagram take you to those services, which have their own privacy policies.
How we use it
We use your information to:
- Run the App: create your account, store and deliver your posts, messages, and media, and show your page to your friends.
- Enforce the friend rules: mutual friendships, the friend cap, blocks.
- Keep Roll safe: review reports, remove content that breaks our Terms, and stop abuse.
- Send notifications you’ve allowed.
- Find and fix bugs and crashes.
- Comply with the law and respond to valid legal requests.
What we don’t do:
- We don’t show ads or run ad tracking, and we don’t build advertising profiles.
- We don’t sell your personal information or share it with data brokers.
- We don’t use your posts, photos, videos, or messages to train AI or machine-learning models.
- Roll has no AI features, and the feed isn’t ranked by an algorithm. It’s your friends, newest first.
Who can see what
| Thing | Who can see it |
|---|---|
| Posts and Nows | Only the author’s mutual friends, or only the friends the author picked. There are no followers and no public profiles. A post hidden from your page still appears in your friends’ feeds. |
| Friend groups | Only you. Friends never see a group’s name or who’s in it, only a small “Just some friends” label on posts shared with a group. |
| Workouts | The same friends who can see the post, including the route if you left the map on. |
| Your page | Your cover photo, “now” line, theme, Top Friends, and pinned post are for your friends. When you send or receive a friend request, the other person can see enough of your profile, such as your username, name, and photo, to know who you are. |
| Appreciates | Only the author of the post you appreciated. Nobody sees a count. |
| Messages | Only the people in the conversation. |
| Blocks | Only you. The blocked person isn’t notified. |
| Reports | Roll’s review team. Never the person reported. |
Our access. The people who run Roll can technically access data stored in our systems. We look at content only to investigate a report, fix a technical problem, keep Roll safe, or comply with the law. Messages are encrypted in transit and at rest by our infrastructure provider, but they are not end-to-end encrypted.
About screenshot protection
Roll blocks screenshots and screen recordings inside the App, so they come out blank. That is a real protection, and it is not a guarantee. iOS cannot stop someone from pointing another phone or camera at their screen, and no app can. A friend can also simply tell other people what they saw. Only share things with friends you trust, and please don’t try to get around the protection: our Terms prohibit it.
Who we share data with
We don’t sell your data. We share it only with the service providers that help us run Roll, who process it on our behalf:
- Google Firebase (Google LLC): Authentication (sign-in, including SMS verification codes for phone sign-in), Cloud Firestore (profiles, posts, friendships, messages), Cloud Storage (photos and videos), and Crashlytics (crash reports).
- Sign in with Apple (Apple Inc.): if you choose it to sign in.
- Google Sign-In (Google LLC): if you choose it to sign in.
- Apple (Apple Inc.): when you search for a song, your search words go to Apple’s iTunes Search service; song previews play through Apple Music; workout maps are drawn with Apple Maps, which receives the map area being drawn; and your city name comes from Apple’s geocoding service. None of these receive your Roll account details.
These providers have their own privacy policies: Firebase, Apple, and Google.
We may also disclose information if we believe it’s required by law or a valid legal process, or necessary to protect someone’s safety or the integrity of Roll. If Roll is ever acquired or merged, your information could transfer to the new owner, and this policy would continue to apply until you were told otherwise.
Where it’s stored and how it’s protected
Your data is stored on Google Firebase servers in the United States. If you use Roll from outside the United States, your information is transferred to and processed in the United States.
We protect it with encryption in transit (TLS), access rules that limit each piece of data to the people who are meant to see it, and authentication on all user data. No system is perfectly secure, and we can’t promise otherwise.
How long we keep it, and deleting it
- Your account and content: kept while your account is active. You can delete individual posts at any time.
- Deleting your account: go to Settings > Delete account. This removes your profile, posts (including workouts and their routes), media, appreciates, friend groups, and friendships. It can’t be undone.
- Nows: disappear from Roll after 24 hours.
- Messages: be aware of this limit. Messages you’ve sent can remain in the recipient’s conversation after you delete your account unless you unsend them first. We’re working on removing them automatically on deletion. Until that ships, unsend anything you want gone before you delete.
- Reports and safety records: we may keep records of reports and enforcement actions where we need them to protect other people or comply with the law.
- Backups and caches: deleted data may linger in backups and caches for a short period before it’s overwritten.
- Crash reports: kept by Crashlytics for up to 90 days.
- Waitlist emails: kept until we’ve emailed you about launch. Write to us and we’ll remove yours sooner.
Your choices and rights
- Access and correct: you can see and edit your profile and posts in the App.
- Delete: delete posts, or your whole account, in the App (see above).
- Export: email support@rollweekly.com to request a copy of your data.
- Notifications and permissions: change them in iOS Settings whenever you like.
California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request that we delete it, and to correct it. We do not sell or share personal information for cross-context behavioral advertising, and we do not discriminate against people who use these rights.
People in the EU, EEA, and UK (GDPR): you can also request access, portability, restriction, or objection, and you can complain to your local data protection authority. Our legal bases are performing our contract with you (running the App), our legitimate interests (keeping Roll safe and working), and your consent where we ask for it (such as notifications).
To use any of these rights, email support@rollweekly.com.
Children
Roll is for people 13 and older. We don’t knowingly collect personal information from anyone under 13. If we learn that we have, we’ll delete it. If you think a child under 13 has an account, please tell us at support@rollweekly.com.
Changes to this policy
We may update this policy as Roll changes. When we make a material change, we’ll post the new version here, update the effective date above, and tell you in the App or by email where appropriate. If you keep using Roll after a change, you accept the updated policy.
Contact
Questions about this policy or your data? Email support@rollweekly.com. A person will read it.