rollcall!
privacy policy!
last updated · october 1, 2026rollcall! ("the app", "we") is made by David Myat. this policy explains what the app collects, why, who else handles it, and how to delete it. questions: thombie326@gmail.com.
the short version
no location. no ads. no analytics. we don't sell your data.
who sees your pics
only people in the same trip, through links that expire.
what we collect
- account: your email address, and a password (stored only as a secure hash) if you sign up with email. if you use Google sign-in, Google shares your Google account ID, email, name and profile picture link. if you use Apple sign-in, Apple shares your Apple account ID, your email (which may be a private relay address) and, the first time only, your name.
- profile: the display name you choose and a profile photo, if you add one.
- game content: the trips you create or join, prompts you write, photos you post, your votes, pics you flag, people you block, and finished trips you toss.
- terms: the date and time you agreed to the terms and house rules.
- trip timezone: when a trip admin starts a trip, the app reads the phone's timezone setting so daily rounds run on local time. it is not your location.
- technical data: when you sign in, our backend provider records your IP address and device/app type (user agent) with your login session, and keeps request logs that include IP addresses.
- notifications: if you allow them, your phone's push token, so we can send trip pings to this phone. turn pings off anytime on the you tab.
what we don't collect
- no location. photos are re-encoded before upload, which removes the hidden photo data (EXIF), including GPS location and camera details.
- no analytics, advertising or crash-reporting tools, and no tracking across other apps or websites.
- we don't sell your data.
how we use it
only to run the game: signing you in, showing your trips, photos and results to the people in the same trip, sending sign-up and password reset codes, and handling reports so we can remove content that breaks our terms.
who can see your content
photos, prompts, votes and results are visible only to members of the same trip. photos are stored privately and shown through links that expire. anyone with a trip's room code can join that trip, so share codes only with people you trust. if you flag a pic, only we see that you flagged it.
services that handle your data
these providers process data on our behalf to run the app.
on your phone
the app keeps your login and a cache of photos you've viewed (up to about 250 MB) on your device. the cache is cleared when you log out.
deleting your data
this permanently removes your account, your sign-in details, your trip memberships and display names, your photos and their files, your votes, flags and blocks, other people's votes and flags on your photos, and any trips you created that nobody else joined.
some things remain
- prompts you wrote stay in their trips, with your name removed.
- trips you created that others joined stay for them, and another member becomes admin.
- report emails already sent to us (they expire from our inbox when we delete them; the photo link stops working after 7 days).
- our providers' logs, which include IP addresses, until they expire under the providers' retention periods.
- other members' phones may keep a cached copy of your photos until their app clears it.
tossing a finished trip
tossing a finished trip hides it from your shoebox and passport only: you stay in it, and the crew keeps its photos, names and results. once every member has tossed a trip, it's deleted for good, with its photos and their files.
to ask about or request deletion of anything else, email us.
kids
rollcall! is not meant for children under 13. we don't knowingly collect data from them. if you think a child has an account, email us and we'll delete it.
changes
if this policy changes, we'll update the date above and, for significant changes, tell you in the app.