The short version
- People in the same Roll can see shared media and participant information.
- We do not sell personal information or use it for targeted advertising or cross-app tracking.
- Originals and videos are temporary; small thumbnails and limited records can remain in past Rolls.
1. Who this policy covers
Nagi Labs LLC, a New York limited liability company (“Nagi Labs,” “Roll,” “we,” “us,” or “our”), controls personal information handled through the Roll app, App Clip, extensions, websites, invite links, and support services (together, the “Service”).
This policy applies when you host, join, or view a Roll; upload or save media; visit our website; sign in; enable notifications; or contact us. It does not govern information another person copies from Roll and handles independently, or third-party services governed by their own policies.
2. Information we collect
We collect information from you, your device, other Roll participants, sign-in providers you choose, and service providers that help us operate Roll.
Account and profile information
- An app account identifier. Guests may receive an anonymous identifier without creating a traditional login.
- Your display name, profile photo, and host-access status.
- If you choose Apple or Google sign-in, the provider account identifier and any name, email address, or phone number the provider makes available under your settings.
Roll, invite, and membership information
- Event title, emoji, host, access code or link, lifecycle dates and status, member list, counts, and related activity.
- Host invitations, redemptions, eligibility, limits, timestamps, and anti-abuse records when invitation-only hosting is enabled.
- Names, profile images, and other information that hosts or participants provide about the Roll or its members.
Photos, videos, and related information
- Photos and videos you capture or upload, including audio in videos.
- Uploader name and identifier, upload and capture timing, dimensions, file type, duration, selected visual filter, thumbnails, and technical information needed to display, save, moderate, and delete media.
- Full-quality files may retain metadata embedded in the source file. Do not upload a file if it contains location or other metadata you do not want shared with Roll and its participants.
- Pending upload files and retry information stored on your device so an interrupted upload can resume after the app reopens.
Device, usage, and notification information
- App version, device and operating-system characteristics, language, network information, IP address, approximate location derived from network information, app-instance identifiers, and interaction events.
- Grouped upload, reliability, and error outcomes designed to avoid names, account or event codes, media, notification tokens, and free-form error text.
- A device notification token and notification settings when you allow server-delivered notifications. Some reminders may instead stay only on your device.
Support, safety, and legal information
We collect messages, contact details, Roll and media identifiers, report reasons, evidence you choose to provide, privacy requests, appeals, and related records when you contact support, report content, or make a legal request. Please do not email us illegal or intimate images; send only the information needed to locate them in Roll.
Device permissions
Roll may request camera access, microphone access for video, photo-library access to save or select media, and notifications. Apple controls these permissions. You can change them in iOS Settings, though a feature may not work without the permission it needs. Roll does not request access to your contacts or the iOS Location permission. As noted above, a full-quality file can still contain location metadata embedded by its source.
3. How and why we use information
We use information to:
- create accounts, authenticate hosts, create and join Rolls, manage invitations, upload and display media, save content when requested, and provide past-Roll history;
- send service notifications and event-ending reminders you allow;
- operate upload recovery, troubleshoot problems, respond to support and privacy requests, and communicate about the Service;
- measure which features work, improve reliability and usability, and plan product changes;
- protect accounts, prevent code guessing, fraud, abuse, and security incidents, enforce our Terms, moderate reports, and protect people; and
- comply with law, valid legal process, and obligations concerning safety, content removal, and record preservation.
Where data-protection law requires a legal basis, we rely on performance of our contract with you to provide Roll; our legitimate interests in operating, improving, and securing the Service; your consent for permissions, notifications, and processing where consent is required; and compliance with legal obligations. You may withdraw consent through the relevant device setting or by contacting us, without affecting earlier lawful processing.
4. What other people can see
Other Roll members. People who join the same Roll can see event details, member display names and profile photos, and media shared to that Roll, including the uploader’s name. They may be able to save or share media outside Roll. We cannot control copies they keep.
People with an invite. Anyone with a working event code or link may be able to join until access closes. A web invite can show the event title, emoji, host display name, and lifecycle status before someone joins; it does not display the album media.
Hosts. Hosts can see and manage their Rolls and participant information available through the Service. Hosts are independent people, not Nagi Labs employees, and are responsible for how they use information they obtain outside Roll.
6. How long we keep information
We keep information only as long as reasonably needed for the purposes above, taking account of the type and sensitivity of the information, product needs, security and abuse risks, and legal obligations.
Roll media and history
The live period normally runs for about 24 hours from the first accepted photo, followed by a save window of about another 24 hours. A host may end a Roll early. After the save window, periodic cleanup is designed to remove original-size photos, videos, and display-size versions used to view, save, or share media. Exact timing can vary, including while a save is already in progress.
Small photo thumbnails and limited event, media, and membership records may remain after that cleanup so existing participants can revisit a read-only past-Roll grid. Their retention depends on whether they remain reasonably needed for that experience, safety, security, or legal purposes, subject to applicable law.
Accounts, invites, and local uploads
We generally keep account and profile information while the account is active. Account-deletion requests are processed as required by applicable law, subject to the exceptions below. We may retain limited invitation, security, and deletion records to prevent code reuse, quota abuse, fraud, or unintended restoration of a deleted account’s hosting access.
Unfinished uploads can remain on your device so Roll can retry them. Their availability depends on upload status and actions such as discard, account deletion, or app removal. We cannot guarantee that a pending file will finish before the Roll’s upload window closes.
Other records and deletion limits
Support messages, content reports, legal notices, security logs, and privacy-request records may be kept longer where needed to respond, enforce our Terms, protect people, establish legal claims, meet recordkeeping duties, or comply with preservation law. Retention of analytics and operational logs and residual backup copies depends on operational needs, configured service-provider periods, and applicable law.
Deletion from Roll cannot delete media or profile information that another person already saved, exported, screenshotted, or shared elsewhere.
7. Your choices and privacy rights
You can decline or revoke device permissions, turn notifications off, leave a Roll before it expires, delete media you uploaded while the feature is available, and change certain profile or account settings. Eligible signed-in accounts can start account deletion from Account settings. Guests can contact us for deletion help.
Depending on where you live, you may have the right to request access to or a portable copy of personal information, correction, deletion, restriction, or an explanation of processing; to object to certain processing; to withdraw consent; and to appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising privacy rights and to complain to your local data-protection authority.
Send a request to contact@tryroll.photos. Tell us the right you want to exercise and enough information to locate your account or Roll. We may need to verify your identity and authority before acting. An authorized agent may submit a request where law allows, but we may ask for proof of authorization. Requests are processed as required by applicable law.
8. Analytics, advertising, and online tracking
Roll uses Google Analytics in release versions of the app to understand feature use and grouped reliability outcomes. Analytics may receive an app-instance identifier, general app and device information, interaction events, and approximate location derived from network information. Our custom analytics events are designed to avoid names, account or Roll codes, media, notification tokens, and free-form error text.
We do not sell personal information, share it for cross-context behavioral advertising, show targeted ads, or track you across other companies’ apps or websites. Our website does not use cross-site advertising trackers. Because we do not perform that kind of browser tracking, legacy “Do Not Track” and Global Privacy Control signals do not change the website’s behavior. Third-party sign-in and App Store services may collect information under their own policies when you choose to use them.
9. Security and international processing
We use administrative, technical, and physical safeguards designed to protect information, limit access, and reduce unauthorized use. No service, transmission, or storage system is completely secure, so we cannot guarantee absolute security. Keep Roll codes, devices, and sign-in credentials secure, and contact us if you suspect misuse.
Nagi Labs is based in the United States. We and our service providers may process information in the United States and other countries whose laws may differ from yours. Where required, we use contractual or other recognized safeguards for international transfers. You can contact us for more information about safeguards relevant to your data.
10. Children
Roll is not directed to children under 16, and they may not use the Service. We do not currently use an age-verification system. If we learn that we collected personal information from a child who cannot lawfully use Roll, we will take reasonable steps to delete it. A parent or guardian can contact contact@tryroll.photos.
Adults must have appropriate permission before uploading media of a child. Sexual exploitation or sexualized imagery of anyone under 18 is strictly prohibited and may be preserved and reported when required by law.
11. Changes and contact
We may update this policy as Roll or the law changes. Material changes and their effective date will be disclosed through this page or another method as required by applicable law.
For privacy questions, requests, complaints, or our current mailing address, email contact@tryroll.photos. You may also use our Help & Support page.