Back to Home

Data Collection & Processing Policy

Last updated: 5 April 2026

1. Overview

This Data Collection & Processing Policy explains:

  • What data Roll collects
  • How data is processed
  • What data is not collected
  • The legal basis for processing

Roll is designed with a privacy-first architecture, where core media processing occurs locally on your device and not on our servers.

2. Data We Collect

We collect only the information necessary to operate and improve the Service.

2.1 Account Data

Collected when you create an account:

  • Name
  • Email address
  • Login credentials

Purpose:

  • Account creation
  • Authentication
  • Service access

Legal Basis: Contract (GDPR Art. 6(1)(b))

2.2 Billing & Payment Data

Collected when you subscribe:

  • Payment details (processed via third-party providers such as Stripe)
  • Transaction history

Note: Roll does not store full payment card details.

Purpose:

  • Subscription billing
  • Financial compliance

Legal Basis: Contract, Legal obligation

2.3 Device & Technical Data

Automatically collected:

  • Device type and operating system
  • IP address
  • App version
  • Performance and crash data

Purpose:

  • App functionality
  • Debugging and performance optimisation

Legal Basis: Legitimate interest

2.4 Usage & Analytics Data

We may collect:

  • Feature usage
  • Interaction data
  • Session behaviour

Purpose:

  • Improve product experience
  • Optimise performance

Legal Basis: Legitimate interest, Consent (where required)

3. Data We Do NOT Collect

Roll is intentionally designed to avoid collecting highly sensitive user data.

3.1 Media Content (Photos & Videos)

Roll:

  • Does not upload your photos or videos to our servers
  • Does not store your media
  • Does not analyse media in the cloud

All processing is performed locally on your device.

3.2 AI Training Data

Roll:

  • Does not use your content to train AI models
  • Does not retain media for machine learning purposes

3.3 Background Camera Roll Access

Roll:

  • Does not scan your camera roll in the background
  • Only accesses media when the app is actively used

4. How Data is Processed

4.1 On-Device Processing (Core Architecture)

Roll performs:

  • Scene detection
  • Clip selection
  • Template matching
  • Edit structuring

entirely on your device, without transmitting media externally.

4.2 Server-Side Processing

Limited to:

  • Account management
  • Billing systems
  • Analytics (non-media data)

No personal media is processed on servers unless explicitly uploaded by the user.

4.3 Third-Party Processing

We may use third-party providers for:

  • Payments
  • Analytics
  • Hosting

These providers process only the data necessary for their function and are contractually bound to protect it.

5. Legal Basis for Processing (GDPR)

We process data under the following bases:

  • Contract - providing the Service
  • Legitimate interest - improving performance and security
  • Consent - marketing and optional tracking
  • Legal obligation - financial and regulatory compliance

6. Data Minimisation

We follow strict data minimisation principles:

  • Collect only necessary data
  • Avoid collection of sensitive media
  • Limit retention duration
  • Prefer on-device processing over server storage

7. Data Retention

We retain data only as long as necessary:

  • Account data - until account deletion
  • Billing data - as required by law
  • Analytics data - anonymised or deleted after a defined period

Users may request deletion at any time.

8. User Rights

Depending on your jurisdiction, you may:

  • Access your personal data
  • Request correction
  • Request deletion
  • Request data portability
  • Withdraw consent

Requests can be made via: hello@amplifymyaudience.com

9. Data Security

We implement appropriate safeguards:

  • Encryption in transit
  • Secure authentication systems
  • Restricted access controls

On-device processing significantly reduces exposure risk.

10. International Data Transfers

Data may be processed outside your country of residence.

Where applicable, we ensure safeguards such as:

  • Standard Contractual Clauses
  • Equivalent legal protections

11. Changes to This Policy

We may update this policy periodically.

Material changes will be communicated via:

  • App notification
  • Email

12. Contact

Company: Content Creator Engine Pty Ltd

Email: hello@amplifymyaudience.com

Address: 31 Hall Street, Bondi Beach NSW 2026