Rolls
Privacy Policy
Rolls is made by Octave ehf. (kt. 470723-0680), Reykjavík, Iceland, trading as Octave Studios. We are the data controller. Rolls handles face data, so this policy is deliberately specific about what happens where.
The short version
- Your photo library is never uploaded and never readable by us or by anyone else.
- Face matching runs on your own device.
- The photos you enroll with stay on your device. Only a numeric face signature leaves it.
- A photo of a friend is only sent after the person who took it approves it.
- Delivered photos are deleted automatically. Nothing sits on our servers forever.
What we collect
- Account. When you sign in with Apple we receive a user identifier and, if you allow it, your name and an email address (which may be Apple's private relay address).
- Face signature (biometric data). During enrollment the app converts photos of your face into a numeric vector on your device. That vector is stored on our servers so that people in your groups can match photos against it. It is not an image and cannot be turned back into your photo. The enrollment photos themselves never leave your device.
- Groups. The groups you create or join, the display name you use, and who else is in them.
- Delivered photos. When a friend approves a photo of you, that photo file is uploaded and stored in a private folder that only you can read, until it expires.
- Basic technical data. App version, device type, iOS version, IP address and error logs, used to keep the service running.
What we never collect
- Your photo library. The app reads it only on your device, to match faces. Unapproved photos are never uploaded.
- Your enrollment photos.
- Contacts, location, advertising identifiers. No ads, no ad tracking, no data sales.
Consent for face data
Face signatures are biometric data under Article 9 of the GDPR. We process them only on your explicit consent, which you give during enrollment. You can withdraw that consent at any time by deleting your enrollment in the app or by mailing us. When you withdraw it, the signature is deleted and matching stops. Withdrawing consent does not affect processing that already happened.
The other people in your group receive your face signature on their devices so their phones can match photos to you. That is the whole point of the app and it only happens for groups you chose to join.
Why we are allowed to process the rest
Account, group and delivery data are processed because they are necessary to provide the service you asked for (contract). Technical data is processed on the basis of our legitimate interest in security and reliability.
How long we keep it
- Delivered photos: deleted 30 days after sending, or 7 days after you download them, whichever comes first.
- Delivery records: we keep a minimal record that a photo was sent, after the file itself is deleted, so an expired or deleted photo can never be re-sent to you. It contains no image.
- Face signature: until you delete your enrollment or your account.
- Account and groups: until you delete your account. Deletion removes your profile, your face signature, your group memberships and any photos still stored for you.
- Technical logs: up to 12 months.
Where it is processed
Our backend runs on Supabase infrastructure in the European Union (eu-west-1). Sign in with Apple is operated by Apple. Where any provider processes data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses.
Security
Photos are stored in private per-recipient storage with row level security, so one user cannot read another user's files. Data is encrypted in transit and at rest. Access to production data is limited to the people who need it to operate the service.
Children
Rolls is not directed at children under 13 and we do not knowingly enroll them.
Your rights
You can ask for access, correction, deletion, restriction or portability of your data, withdraw consent for face processing, and object to processing based on legitimate interest. Write to privacy@octavestudios.co and we answer within 30 days. You can also complain to Persónuvernd, the Icelandic Data Protection Authority (personuvernd.is).
Changes
If we change this policy we update the date at the top of this page. Material changes are announced in the app, and any change to how face data is used requires fresh consent.
Contact
Octave ehf., Baldursgata 7a, 101 Reykjavík, Iceland
privacy@octavestudios.co