Privacy Policy

Account and identifiers: email address, display name, and guest/session identifiers used to keep participants connected to a film.

User content: photos you upload and film details such as title, reveal timing, participant settings, and related metadata.

Purchases: purchase receipts, product identifiers, and transaction metadata used to validate paid features.

Usage and diagnostics: analytics events, device and OS details, coarse location (city or region), performance data, and crash logs.

Cookies and web storage: basic technologies used for authentication, session persistence, and analytics on our website.

Camera and photo permissions: camera access is used only when you capture photos, and photo library access is used only when you intentionally choose media.

To provide and operate the Service, including creating films, inviting participants, capturing uploads, and revealing galleries.

To process purchases, prevent fraud, and enforce participant limits or other product rules.

To communicate with you, including support messages, service updates, and event-related notifications.

To improve stability, quality, and product performance through analytics and diagnostics.

To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information and we do not permit cross-app advertising tracking.

Within films, invited participants may see film details, uploaded photos, and participant names according to host settings.

We use service providers to operate OnceRoll, such as infrastructure, storage, analytics, and purchase processing vendors.

Service providers process data on our behalf under contractual safeguards and only for business purposes.

We may disclose information when required by law, regulation, legal process, or to protect rights, safety, and service integrity.

Account information is retained while your account is active.

If you delete your account, we delete or anonymize personal data within a reasonable period, generally within 30 days unless legal obligations require longer retention.

Photos are retained while associated films remain active in the Service. If you uploaded photos to another host's film, those photos may remain in that film after your account is deleted, with attribution removed or minimized when feasible.

Purchase records may be retained for tax, accounting, anti-fraud, and legal compliance purposes.

Aggregated or de-identified analytics may be retained longer for operational analysis.

We use safeguards such as encryption in transit, access controls, and monitoring designed to protect personal data.

No security method is perfect, and we cannot guarantee absolute security.

If a security incident affecting personal information occurs, we will notify affected users and authorities when required by law.

You can request access, correction, export, or deletion of your personal data by contacting us.

You can manage permissions such as camera access and notifications through your device settings.

You may have additional rights under local law, including rights available under CCPA/CPRA and GDPR frameworks where applicable.

OnceRoll is not intended for children under 13.

If you believe a child under 13 has provided personal information, contact us so we can review and remove the data where appropriate.

OnceRoll operates primarily in the United States.

Your information may be processed in the U.S. or other countries where our providers operate, subject to applicable safeguards.

We may update this Privacy Policy from time to time.

If changes are material, we will provide notice in the app, on the website, or by email where appropriate.

Continued use of the Service after updates take effect means you accept the revised policy.

For privacy requests and questions, email support@onceroll.com.

For faster handling, include a clear subject line such as "Privacy Request."