Rolla icon
Rolla

Privacy Policy

Last updated May 24, 2026

Rolla ("we", "our", or "the app") is a shared disposable film camera for iOS published by Culi Studio. This policy explains how event photos, accounts, subscriptions, and optional location data are handled.

Photos you capture during an event are uploaded to our backend so the reveal-lock can be enforced server-side. They are not visible to other members until the host develops the roll.

Photos and event data

  • Photos captured during events are compressed and uploaded to Supabase Storage while the roll is locked.
  • Event metadata (name, date, roll size, filter, member list) is stored in Supabase Postgres.
  • Photos become readable only after the host develops the roll—enforced by row-level security and signed URLs.
  • You can save developed photos to your Camera Roll and share via the iOS share sheet.

Account and identity

  • Hosts sign in with Apple. Guests can join with a display name only in v1—no account required to shoot.
  • Apple may provide a user identifier and optionally email for account functionality.
  • In-app account deletion is available in Settings with server-side cascading delete.

User-generated content

  • Every shared photo includes report and block controls.
  • Flagged content is reviewed within 24 hours as stated in our App Store listing.
  • There is no public feed or discovery surface—events are private to invited members.

Optional location

  • You may add an event location using Apple MapKit autocomplete—location is optional.
  • Location is used to label events, not for advertising or cross-app tracking.

Subscriptions and purchases

  • Subscriptions are processed by Apple StoreKit. RevenueCat validates receipts and entitlements.
  • We receive subscription status needed to unlock hosting features—not your full Apple ID.
  • Restore Purchases is available in Settings.

Analytics and diagnostics

  • Privacy-conscious analytics (PostHog or TelemetryDeck) and crash reporting (Sentry) help us improve reliability.
  • We do not integrate Facebook SDK, Branch, or other cross-app tracking SDKs.
  • Analytics are not used for advertising profiles.

Data we do not sell

  • We do not sell personal information or event photos.
  • We do not use your photos to train AI models.
  • We do not run third-party advertising in Rolla.

Third-party services

  • Supabase — authentication, database, storage, realtime, and edge functions for reveal logic.
  • Apple Sign in with Apple — host authentication.
  • RevenueCat and Apple StoreKit — subscription validation.
  • Apple Push Notification Service — develop countdown and reveal alerts you enable.

Your rights and controls

  • Delete your account and associated event data from Settings.
  • Revoke camera, photos, and location permissions in iOS Settings at any time.
  • Manage or cancel subscriptions in Apple Account settings.
  • Contact support@culi.app for access, correction, or deletion requests.

Children’s privacy

Rolla is rated 4+. Event photo sharing is gated by membership—there is no public feed or chat with strangers. We do not knowingly collect personal information from children under 13.

Changes

We may update this policy as Rolla evolves. Changes will be posted on culi.app and rolla.app with an updated "Last updated" date.

Contact

If you have questions about privacy, data handling, or policy updates, contact:

support@culi.app