Privacy Policy
This is a translation of the Korean original. If the two differ, the Korean version prevails.
Nerdens ("the Company") operates Rolls ("the Service") and treats your personal information with care. This policy explains what we collect and why, how we keep it, and when we destroy it.
1. What we collect
| Item | When | Purpose |
|---|---|---|
| Account identifier (UID), sign-in provider identifier | On sign-up | Identifying the account, confirming roll ownership and participation |
| Email address | On email sign-up | Sign-in, password reset, required notices |
| Display name (optional) | When provided by Apple or Google sign-in | Shown inside a shared roll |
| Photos you take | On capture | Keeping the roll and delivering it to participants after developing |
| Roll data (title, notes, frame count, participants, created and developed times) | On creating and using a roll | Providing the Service |
| Purchase records (product identifier, purchase time) | On in-app purchase | Granting film, handling refunds |
| Support messages (what you write, the kind of message, a satisfaction rating (optional), app version and build, OS version, language setting) | When you send a message from the app | Reading and answering your message, reproducing bugs |
| Reports (account identifiers of the reporter and the author, the roll and frame reported, the reason given) | When you report something | Reviewing inappropriate content and acting on it |
| Crash diagnostics — what failed (exception type and message, per-thread stack traces, the list of code modules loaded at the time), app details (bundle identifier, app version), device and OS details (device model, CPU architecture, OS name and version), device state (whether the device is jailbroken, memory and storage capacity, whether the app was in the background, screen orientation, proximity sensor state), the time of the crash, and diagnostic installation and session identifiers | When the app terminates abnormally | Finding the cause of the error and fixing it |
We do not collect your address, phone number, date of birth, gender or payment card details. Payments are processed through the store you downloaded the app from (the Apple App Store or Google Play); the store operator (Apple Inc. or Google LLC) keeps the payment details and does not pass them to us.
Crash diagnostics do not include your account identifier (UID), name, email address or IP address. The diagnostic installation and session identifiers are created anew if you delete and reinstall the app, and they are not linked to your account. We do not use crash diagnostics for advertising or to track users, and we do not combine them with data from other companies.
2. How photos are handled
- Photos are kept in encrypted storage, and clients cannot read that storage directly.
- Before a roll is developed, nobody can see the photos — including the person who took them.
- After developing, they are served only to that roll's participants, and only through a signed link that expires in five minutes.
- We do not use your photos for advertising, model training, statistical analysis or anything else beyond providing the Service.
3. Retention and destruction
- Account data, rolls, photos and reports are destroyed without delay when you delete your account, with the exceptions below.
- Photos in a roll filled by more than one person are kept until that roll is deleted, so the remaining participants can still use it.
- The purchase ledger (account identifier, product and transaction identifiers, purchase time) is kept for 5 years after you delete your account, as required by Korean e-commerce law, so that refunds can be handled and the same transaction cannot be granted twice.
- Otherwise, under Korean e-commerce law we keep records of contracts and withdrawals for 5 years, and records of consumer complaints and disputes for 3 years.
- Crash diagnostics are kept for 90 days from collection and then deleted automatically. They are not linked to your account, so they are destroyed on that schedule whether or not you delete your account.
4. Processors
We entrust the processing of personal information to the following parties in order to run the Service.
| Processor | Work entrusted | Location |
|---|---|---|
| Google LLC (Firebase) | Authentication, database, file storage, serverless execution | Republic of Korea (asia-northeast3) |
| Google LLC (Firebase Crashlytics) | Collecting and analysing crash diagnostics | United States |
| Resend, Inc. | Sending support and report notification email | United States |
| Google LLC (Gmail) | Receiving and keeping support and report notification email | United States |
| Apple Inc. (App Store) | In-app purchase processing | Per Apple's policy |
| Google LLC (Google Play) | In-app purchase processing | Per Google's policy |
"Republic of Korea (asia-northeast3)" in the table above applies only to Firebase authentication, database, file storage and serverless execution. Crashlytics is operated by the same Google LLC but runs on separate infrastructure, and crash diagnostics are stored in the United States, not in asia-northeast3.
5. Transfers of personal information abroad
We transfer personal information abroad as follows.
| Recipient | Country | Items transferred | When and how | Purpose and retention period |
|---|---|---|---|---|
| Google LLC (Firebase Crashlytics) privacy@google.com | United States | Crash diagnostics — what failed (exception type and message, per-thread stack traces, the list of code modules loaded at the time), app details (bundle identifier, app version), device and OS details (device model, CPU architecture, OS name and version), device state (whether the device is jailbroken, memory and storage capacity, whether the app was in the background, screen orientation, proximity sensor state), the time of the crash, and diagnostic installation and session identifiers (no account identifier, name or email address is included) | Immediately after the app terminates abnormally, sent automatically over the network | Finding the cause of the error and fixing it · 90 days from collection |
| Resend, Inc. support@resend.com | United States | Support message, the kind of message, a satisfaction rating (optional), account identifier (UID), app version and build, OS version, language setting / report records (the account identifiers of the reporter and the author, the roll and frame reported, the reason given) | Immediately after you send a message from the app or report a photo, sent automatically over the network | Sending the support and report notification email to the operator · until delivery is complete (Resend's delivery logs follow its own retention period) |
| Google LLC (Gmail) privacy@google.com | United States | Support message, the kind of message, a satisfaction rating (optional), account identifier (UID), app version and build, OS version, language setting / report records (the account identifiers of the reporter and the author, the roll and frame reported, the reason given) | When that notification email is sent, on receipt and storage of the mail | Reading and answering your message, reviewing and acting on reports · 3 years after it is resolved |
You may refuse these transfers. Tell the data protection officer below that you refuse, and we will stop the transfer in question. The transfers related to support and report notifications do not happen at all unless you send a message from the app or report a photo. Note that if you refuse the transfer of crash diagnostics it becomes harder for us to find the cause of an error, and where a transfer is essential to providing the Service your use of it may be limited or your account may need to be deleted.
6. Your rights
You may view, correct or delete your personal information, or ask us to stop processing it, at any time. You can delete your account from the account screen in the app (Profile → Delete account), and you can also ask us to delete it at the address below without installing the app. Both routes, and what is erased and what is kept, are set out in Deleting your account.
7. Security measures
- TLS encryption across the entire transport path
- Access control enforced by server rules — if you are not a participant, you cannot reach the roll or its photos
- Photos are served only through signed links, which expire after five minutes
8. Children
The Service is not directed at children under 14, and we do not knowingly collect personal information from them.
9. Data protection officer
Myeongseok Seong · nerdens.seong@gmail.com
10. Changes to this policy
If this policy changes we will post the change on this page at least 7 days before it takes effect, and at least 30 days before for changes that are unfavourable to users.