Privacy Policy

1. Introduction

Roll ("we", "us", "our") is committed to protecting your privacy and handling your personal information in an open and transparent manner.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Roll mobile application, website, and related services (collectively, the "Services").

We comply with applicable privacy laws including:

• The Privacy Act 1988 (Cth) and Australian Privacy Principles
• The General Data Protection Regulation (GDPR) where applicable
• The California Consumer Privacy Act (CCPA/CPRA) where applicable

2. Information We Collect

We may collect the following categories of personal information:

a. Information you provide

• Name, email address, phone number
• Account login details
• Payment and billing information

b. Automatically collected data

• Device information (IP address, OS, device type)
• Usage data (app interactions, features used)
• Analytics and performance data

c. Sensitive information (if applicable)

We only collect sensitive information (e.g. health-related data) with your consent where required by law.

3. How We Collect Information

We collect information when you:

• Register for an account
• Use the app or upload content
• Subscribe or make a purchase
• Interact with support or community features
• Visit our website or landing pages

4. Why We Collect and Use Your Information

We use your personal information to:

• Provide and operate Roll
• Process payments and subscriptions
• Improve product performance and user experience
• Deliver content recommendations and templates
• Communicate with you (updates, support, marketing)
• Comply with legal obligations

Under Australian law, we only collect data that is reasonably necessary for our functions.

5. Legal Basis (GDPR)

If you are in the EU/UK, we rely on:

• Your consent
• Performance of a contract (providing the app)
• Legitimate interests (product improvement, security)
• Legal obligations

You have rights to access, correct, delete, or restrict your data.

6. Disclosure of Personal Information

We may share your information with:

• Payment processors (e.g. Stripe)
• Analytics providers
• Cloud hosting providers
• Customer support tools
• Legal authorities where required

We do not sell personal data.

7. International Data Transfers

Your information may be transferred and stored outside Australia.

Where this occurs, we take reasonable steps to ensure recipients comply with privacy obligations consistent with Australian law.

8. Data Security

We take reasonable steps to protect your personal information from:

• Misuse
• Interference
• Loss
• Unauthorised access or disclosure

9. Data Retention

We retain personal information only as long as necessary to:

• Provide our Services
• Meet legal obligations
• Resolve disputes

We securely delete or de-identify data when no longer required.

10. Your Rights

Under Australian Law

You may:

• Request access to your data
• Request correction of inaccurate data

Under GDPR (EU/UK)

You may:

• Access, correct, or delete your data
• Request portability
• Object to processing
• Withdraw consent

Under CCPA (California)

You may:

• Request disclosure of collected data
• Request deletion
• Opt out of data selling

11. Cookies and Tracking

We use cookies and similar technologies to:

• Analyse usage
• Improve performance
• Personalise content

Where required (e.g. EU), we obtain consent before using cookies.

12. Children's Privacy

Roll is not intended for users under 16 (or relevant minimum age in your jurisdiction).

We do not knowingly collect personal data from children.

13. Data Breaches

In the event of a data breach likely to cause serious harm, we will:

• Notify affected users
• Notify relevant regulators

As required under Australia's Notifiable Data Breaches scheme.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify users of material changes via the app or email.

15. On-Device Processing & Media Privacy

Roll is designed with a privacy-first architecture.

a. Local Processing

All analysis of your camera roll, including:

• Scene detection
• Clip selection
• Template matching
• Edit structuring

is performed entirely on your device (on-device processing). Your media files are not uploaded to our servers for analysis.

b. No Server Storage of Media

We do not store, process, or retain your photos or videos on our servers, unless:

• You explicitly choose to export or share content
• You upload content to a feature that requires cloud storage (if applicable)

c. AI Processing

Any AI-powered features used by Roll:

• Operate locally on your device, or
• Process only non-identifiable metadata where required

We do not use your personal media to train AI models.

d. Data Minimisation

We only collect data necessary to:

• Provide app functionality
• Improve performance (e.g. anonymised usage analytics)

We do not access or analyse your full camera roll outside of the app's active use.

e. User Control

You maintain full control over your data:

• Media remains on your device
• You can revoke permissions at any time via device settings
• Deleting the app removes locally processed data

f. Permissions

Roll may request access to:

• Photos / camera roll (for editing functionality)

This access is used solely for the purpose of providing the core functionality of the app.

16. Contact Us

If you have questions or complaints: