Privacy, without the fog

Privacy Policy

This policy explains what Roll handles, why we need it, who can see it, and the choices you have.

Last updated September 14, 2026

The short version

  • Roll is a shared space. Other participants can see your shared photos, videos, comments, likes, and profile information.
  • We use service providers and advertising measurement tools to run Roll, improve it, and understand how people discover it.
  • A Roll’s save window limits access to full-quality media. It is not a promise that every copy is deleted at that time.

1. About this policy

Nagi Labs LLC, a New York limited liability company (“Nagi Labs,” “Roll,” “we,” “us,” or “our”), is responsible for personal information handled through the Roll app, App Clip, extensions, websites, invitation and marketing links, and related services (the “Service”). This policy describes what we collect, how we use and share it, and your choices.

It does not cover how other participants use copies they obtain from Roll or how independent services handle information under their own privacy policies.

2. Information we collect

We collect information you provide, information generated when you use Roll, and information from other participants, sign-in providers, and partners that help us operate or promote the Service.

  • Account and profile information. Your account identifier, display name, profile photo, preferences, and sign-in details. Apple or Google may provide an identifier, name, email address, or profile image according to your settings. Phone sign-in uses your phone number. Guests receive an app identity even when they have not signed in with a provider.
  • Rolls and participation. Roll names, covers, event times and status, hosts, codes and links, membership, and activity such as creating, joining, leaving, or sharing a Roll. We may keep invitation and access records to operate these features and prevent abuse.
  • Photos and videos. Media you capture or select for upload, video audio, thumbnails and other versions, and related details such as the uploader, capture or upload time, file characteristics, and selected filters. Source files may contain embedded information, including location metadata. Consider that information before sharing a file.
  • Comments and likes. Your comments, likes, their authors and timestamps, the media they relate to, and information needed to display discussions and send activity notifications.
  • Device and usage information. IP address, approximate location inferred from it, device, browser and operating-system information, app version, language, app or installation identifiers, feature interactions, and diagnostic and performance information.
  • Notifications and local storage. Notification tokens and preferences, delivery records, and information stored on your device for sign-in, Roll history, cached media, pending uploads, and saving to your photo library.
  • Support and safety. Contact details, messages, reports, blocked accounts, moderation decisions, privacy requests, and information you provide to help us investigate or respond.
  • Website and campaign information. Pages and links visited, referral or campaign information, cookie or similar identifiers, and advertising interactions. If you request early access or updates, we collect the contact information and preferences you submit.

Other people may upload photos or videos of you, mention you in comments, or provide information about you in a Roll. The same policy applies to information we receive that way.

Device permissions. Roll requests access to the camera, microphone, photo library, or notifications when needed for a feature. You control these permissions in device settings. We do not request access to your contacts or your device’s precise location; approximate network location and location embedded in uploaded files are different.

3. How we use information

We use information to:

  • provide accounts, create and join Rolls, share media, apply filters, display comments and likes, and support saving and invitations;
  • keep the Service working across sessions and devices, cache and deliver media, resume transfers, and apply your preferences;
  • send sign-in messages, activity notifications, reminders, requested updates, and service communications;
  • understand usage, diagnose problems, test and improve features, and measure the effectiveness of advertising for Roll;
  • respond to support and privacy requests, moderate content, prevent fraud and abuse, protect people and the Service, and enforce our Terms; and
  • comply with legal obligations, preserve required records, and establish, exercise, or defend legal claims.

Where a legal basis is required, we process information to perform our agreement with you, pursue legitimate interests in operating, securing, improving, and promoting Roll, comply with law, or obtain your consent where required. You may withdraw consent without affecting processing that was lawful before withdrawal.

4. Sharing within and outside a Roll

Participants. People in the same Roll can see shared media, comments, likes, event information, display names, profile photos, and associated activity. They may save, screenshot, record, or share what they can access. Roll cannot control those copies or how others use them.

Invitations and previews. People with a valid Roll code, QR code, or link may gain access to that Roll. Invitation pages and link previews can show the Roll’s title, cover, host, and event details. Joining screens may also show participant names and profile photos. Link previews may be cached by messaging or social services. Share codes and choose covers with this visibility in mind.

Notifications and extensions. Notifications and Live Activities may show Roll details, participant names, activity, comment previews, or media previews on your device, including its Lock Screen, depending on the feature and your settings. Using Messages or another sharing destination sends the selected invitation or content to that service and its recipients.

Hosts and other participants act independently of Nagi Labs. Sharing a Roll with a limited group does not guarantee that its contents will remain confidential.

5. Other disclosures

In addition to the sharing above, we may disclose information:

  • To service providers that support hosting, storage, content delivery, authentication, notifications, analytics, advertising measurement, security, and support. These include Google Firebase and AppsFlyer. Providers acting on our behalf process information to provide their services, subject to applicable obligations.
  • To advertising partners, as explained in Section 8, to measure and improve campaigns promoting Roll.
  • For safety, law, and our rights, where reasonably necessary to investigate abuse, review reports, enforce our Terms, protect people, comply with legal process, or establish or defend claims. Authorized reviewers may access reported content and related records.
  • In a business transaction, such as financing, a merger, acquisition, reorganization, bankruptcy, or transfer of some or all of our business or assets, subject to applicable protections.
  • At your direction or with your consent.

We may use and disclose aggregated or de-identified information for lawful business purposes, subject to applicable law. Independent services you use, including sign-in providers, app stores, and sharing destinations, handle information under their own policies.

6. Retention, media availability, and deletion

We retain information for as long as reasonably needed to provide the Service and fulfill the purposes in this policy. Retention depends on the information, features you use, account activity, operational needs, safety and security, and legal obligations.

Media availability. A timed Roll generally has a live period of about 24 hours and a save window of about 24 hours after it ends. Where available, an unlimited Roll stays open until the host ends it, which starts its save window. The app shows the applicable timing; hosts may start or end Rolls early.

Availability and retention are different. When a save window closes, full-quality viewing, downloading, and sharing may no longer be available. This does not mean that every copy has been deleted from our systems or service providers. We may retain media, thumbnails, covers, and related records after they stop being available in the app for the purposes described in this policy, including providing Roll history, operating the Service, and meeting safety or legal requirements. Availability and retention practices may change as the Service evolves, subject to applicable notice, consent, and legal requirements.

Device copies and pending uploads. Roll stores media and other information on your device to speed up viewing, reduce repeat downloads, and recover interrupted transfers. These copies can outlast an individual session or a Roll’s save window. Pending media may remain for retry, including after sign-out, until it is completed, discarded, or otherwise cleared. Storage management and account actions affect these copies. Caching does not guarantee continued access or recovery. Content saved to your photo library is managed separately by you and your device or cloud-photo provider.

Account and content deletion. You can request deletion through available in-app controls or by contacting us. Deleting your account initiates removal of your profile, your contributions, and the Rolls you host, including other participants’ contributions to those hosted Rolls. Leaving a Roll initiates removal of your membership and contributions to that Roll. Uninstalling the app or signing out does not delete your account or server-held information.

Removal from the Service and cleanup of stored copies may take time. We may retain limited information for backups, security, abuse prevention, dispute resolution, legal compliance, or other purposes permitted by law. We cannot retrieve copies others have saved or shared. Deleting your account does not automatically remove content independently uploaded by others, even if it depicts you; contact us to request review of that content. Your applicable deletion rights continue to apply.

7. Your choices and rights

You can update available profile settings, manage permissions and notifications, change media-transfer and saving preferences, remove your own content where controls are available, leave a Roll, or report and block people. In the full app, open Account > Advanced Settings for Delete account or Clear guest data. Contact us if you cannot access a control or need help with a request.

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of personal information; restrict or object to processing; withdraw consent; opt out of sale, sharing, or targeted advertising; appeal a denied request; and complain to a data-protection authority. You may exercise applicable rights without unlawful discrimination.

Email contact@tryroll.photos with your request and enough information to locate the relevant account or content. We may verify your identity or an authorized agent’s authority where appropriate and will respond as required by applicable law. To stop requested promotional messages, use any opt-out instructions provided or contact us. Service or legal notices may still be necessary.

8. Analytics, advertising, and similar technologies

App analytics and attribution. We use Google Analytics for Firebase to understand feature use and reliability, and AppsFlyer to measure how advertising leads to installs and actions such as registration, creating or joining a Roll, sharing an invitation, and publishing media. These providers may receive app or installation identifiers, Apple’s vendor identifier, device and network information, approximate location, usage events, and performance information. Advertising platforms may provide campaign and conversion reports.

Our app measurement uses Apple’s privacy-preserving attribution reports and restricted partner-sharing settings. Roll does not currently request Apple’s App Tracking Transparency permission or access its advertising identifier (IDFA). Our custom analytics and attribution events exclude photos, videos, comment text, names, phone numbers, and Roll invite codes. Roll invitation URLs are not sent to AppsFlyer; its marketing links are separate.

Website advertising. The public landing page uses the Meta Pixel to measure page visits and successful early-access requests and to improve advertising delivery. Meta may receive visited URLs and campaign or click information, cookies or similar identifiers, IP address, approximate location, browser and device details, and event timing. We do not send early-access phone numbers or other form entries to Meta. We may retain limited campaign labels with an early-access request.

Advertising choices. We do not sell personal information for money. Website advertising disclosures may nevertheless count as a “sale,” “sharing,” or “targeted advertising” under certain privacy laws. You may use browser cookie controls, content blockers, and Meta’s privacy and advertising controls to limit some collection, and contact us to exercise applicable rights. Settings may apply only to a particular browser, device, or service, and disabling cookies can affect functionality. We do not currently respond to legacy browser “Do Not Track” signals.

9. Security and international processing

We use safeguards designed to protect information against unauthorized access, loss, and misuse. No system is completely secure. Keep your device, sign-in credentials, and Roll access links secure, and tell us if you suspect misuse.

We are based in the United States, and we and our providers may process information in the United States and other countries with different data-protection laws. Where required, transfers are subject to appropriate safeguards, such as contractual protections. Contact us for information about safeguards relevant to your data.

10. Children

Roll is for people aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child has provided information in violation of this policy, contact contact@tryroll.photos so we can investigate and take appropriate action, including deletion where required.

People uploading content involving children must have the necessary rights and permissions. Content that sexually exploits or endangers a child is prohibited and may be preserved and reported as required by law.

11. Changes and contact

We may update this policy as our services and practices change. We will update the date above and provide notice of material changes through the Service or other appropriate means, obtaining consent where required. A policy update does not override rights or commitments that apply to information already collected.

For privacy questions, requests, complaints, or our current mailing address, contact Nagi Labs LLC at contact@tryroll.photos. You can also visit Help & Support.