Last updated 1 September 2026

Privacy Policy

Crowdroll is a shared camera for events. This page explains what we collect, why, and what you can do about it. It is written to be read rather than to be survived.

The service is operated by Roden Labs (“we”, “us”). If you have a question about anything here, email hello@crowdroll.cam.

What we collect

Your account. When you sign in with Apple we receive a stable identifier for you and, if you allow it, your name and email address. If you choose Apple’s Hide My Email option we only ever see the relay address, which is fine — we use it to contact you about your account and nothing else. You can set a display name, which is shown to other people on the same roll.

Your event activity. Which rolls you have joined, when you joined, and how many of your shots you have used. Hosts additionally have the details of the events they created: the title, the venue name if they entered one, the date, and the limits they set.

Photos, voice notes and video messages. Whatever you capture in the app is uploaded and stored so it can be shown to the others on that roll when it develops. Photos are visible to everyone on the roll. Voice notes and video messages are visible only to the hosts of that event — this is deliberate and is not something a guest can change.

Reactions and comments you leave on photos, along with who left them.

Notification tokens. If you allow notifications, we store the token Apple gives us so we can tell you when a roll develops or when an event needs your attention. Turning notifications off in iOS Settings stops this.

Purchases. Paid event tiers are bought through Apple. We never see your card details. We receive a record from Apple that a purchase was made so the app knows which tier your event is on.

What we do not collect

We do not use third-party advertising or analytics SDKs. We do not build an advertising profile of you, we do not sell or rent your personal information, and we do not share your photos with anyone outside the event you put them in. There are no trackers on this website.

Photos are not scanned for faces or objects, and location is not read from your camera or attached to your uploads.

Who can see your photos

Only people who have joined the same roll. Access is enforced on the server, not just hidden in the app — someone who is not a member of an event cannot read its photos even if they go looking.

Before a roll develops, nobody can see the photos at all, including you and including the host. This is the product working as intended rather than a security promise, but the effect is the same.

Anyone holding an event code can see a small public preview of that event on this website: the title, the venue, the date, and how many people and photos are on it. No photograph is ever shown on that page and no photograph is ever included in a link preview.

Why we are allowed to do this

If you are in the UK or the EEA, our lawful bases under the UK GDPR and the EU GDPR are: performing our contract with you, for everything needed to run an event you joined; our legitimate interests, for keeping the service secure and dealing with abuse; your consent, for push notifications, which you can withdraw at any time; and legal obligation, where we have to keep records of purchases.

How long we keep it

Photos, voice notes and video messages stay for as long as the event exists, so that people can come back to them. Delete your account and your uploads go with it.

When you delete your account we remove your profile, your photos, your voice notes and video messages, your reactions and your comments, and your notification tokens. Backups roll off on their own schedule and are fully replaced within 30 days.

Records we have to keep for tax or accounting reasons — that a purchase happened, and for how much — are kept for as long as the law requires, and are not linked to your photos.

Deleting your account

You can delete your account from inside the app, in Profile → Settings. It does not require emailing us and it is not reversible.

One thing to be aware of: if you hosted an event, deleting your account deletes that event and everyone else’s photos on it. The app warns you before it does this.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and object to processing based on legitimate interests. Email hello@crowdroll.cam and we will respond within one month.

If you are in the UK or the EEA and think we have got something wrong, you can complain to your local data protection authority. We would rather you told us first, but you do not have to.

Who we use to run the service

We keep this list short on purpose. Supabase hosts our database and stores uploaded media. Vercel hosts this website. Apple handles sign-in, push notifications and payments. RevenueCat reconciles purchase receipts.

Some of these are based in the United States. Where data leaves the UK or the EEA it is transferred under the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism.

Children

Crowdroll is not for children under 13, and we do not knowingly collect anything from them. If you believe a child has an account, email us and we will remove it.

Changes

If we change this policy we will update the date at the top, and for anything significant we will tell you in the app before it takes effect.

Contact

Roden Labs — hello@crowdroll.cam