Privacy Policy
This is a translation of the Korean original. If the two differ, the Korean version prevails.
Nerdens ("the Company") operates Rolls ("the Service") and treats your personal information with care. This policy explains what we collect and why, how we keep it, and when we destroy it.
1. What we collect
| Item | When | Purpose |
|---|---|---|
| Account identifier (UID), sign-in provider identifier | On sign-up | Identifying the account, confirming roll ownership and participation |
| Email address | On email sign-up | Sign-in, password reset, required notices |
| Display name (optional) | When provided by Apple or Google sign-in | Shown inside a shared roll |
| Photos you take | On capture | Keeping the roll and delivering it to participants after developing |
| Roll data (title, notes, frame count, participants, created and developed times) | On creating and using a roll | Providing the Service |
| Purchase records (product identifier, purchase time) | On in-app purchase | Granting film, handling refunds |
We do not collect your address, phone number, date of birth, gender or payment card details. Payments are processed through the Apple App Store; Apple keeps the payment details and does not pass them to us.
2. How photos are handled
- Photos are kept in encrypted storage, and clients cannot read that storage directly.
- Before a roll is developed, nobody can see the photos — including the person who took them.
- After developing, they are served only to that roll's participants, and only through a signed link that expires in five minutes.
- We do not use your photos for advertising, model training, statistical analysis or anything else beyond providing the Service.
3. Retention and destruction
- Account data, rolls and photos are destroyed without delay when you delete your account.
- Photos in a roll filled by more than one person are kept until that roll is deleted, so the remaining participants can still use it.
- Under Korean e-commerce law we keep records of contracts and withdrawals for 5 years, and records of consumer complaints and disputes for 3 years.
4. Processors
We entrust the processing of personal information to the following parties in order to run the Service.
| Processor | Work entrusted | Location |
|---|---|---|
| Google LLC (Firebase) | Authentication, database, file storage, serverless execution | Republic of Korea (asia-northeast3) |
| Apple Inc. | In-app purchase processing | Per Apple's policy |
5. Your rights
You may view, correct or delete your personal information, or ask us to stop processing it, at any time. You can delete your account from the account screen in the app, or write to the address below.
6. Security measures
- TLS encryption across the entire transport path
- Access control enforced by server rules — if you are not a participant, you cannot reach the roll or its photos
- Photos are served only through signed links, which expire after five minutes
7. Children
The Service is not directed at children under 14, and we do not knowingly collect personal information from them.
8. Data protection officer
Myeongseok Seong · nerdens.seong@gmail.com
9. Changes to this policy
If this policy changes we will post the change on this page at least 7 days before it takes effect, and at least 30 days before for changes that are unfavourable to users.