RollRoom is an iOS film camera and AI image creation app provided by PixelPunk Inc. (“we” or “us”). This policy explains how we handle personal information when providing RollRoom and the choices available to you.
Local film effects and cloud AI development work differently. When you use a cloud AI roll, the photos involved in development are uploaded to our Alibaba Cloud storage and provided to the applicable third-party AI model providers for processing. People, faces, and other identifiable content in those photos are processed as part of the image. Do not submit content you are not entitled to process or do not want sent to the cloud.
1. Information We Process and Why
- Camera and photos: Camera previews, photos you take or choose to import, roll selections, and effect settings enable capture, previews, local processing, and saving. Cloud AI development also processes submitted photos, generated results, roll effect instructions, task identifiers, processing status, and timestamps to develop images, retry tasks, deliver downloads, and troubleshoot failures. Granting photo access does not cause us to upload your entire photo library.
- Faces in photos: Some local effects detect face positions, contours, or expressions to place effects or adjust an image. Cloud AI may analyze and transform the appearance of people in submitted photos. These features support image creation, not verification of your real-world identity. Obtain any consent required from the people depicted, particularly where children or other sensitive content are involved.
- Location: If you enable location saving and grant permission, the capture location can be added to photo information. Location may be sensitive personal information. Disabling it does not prevent photography without location tags. Check photo information before sharing location-tagged photos with other services.
- Account: Depending on your sign-in method, we process a phone number and verification records, or the user identifier, authorized name, and email supplied by Apple (including a relay address if you use Hide My Email). We also process your RollRoom user identifier, sessions, and account status for sign-in, security checks, account linking, and entitlements. We do not obtain your Apple Account password.
- Purchases and entitlements: Apple transaction identifiers, product identifiers, transaction verification data, purchase and expiry times, renewal or refund status, account association identifiers, and roll allowance records enable purchase verification, entitlement delivery and restoration, refund status handling, and prevention of duplicate claims. Apple processes payments; we do not receive your full payment card details.
- Device, usage, and diagnostics: Device and installation identifiers, device model, operating system and app versions, language, network status, IP address, feature events, request and task identifiers, timestamps, errors, and diagnostic logs support usage analysis, troubleshooting, security, and product improvements.
- Notifications: When you enable notifications, push tokens, installation identifiers, user aliases, language, and task events support notifications such as development completion.
- Support: Email addresses, issue descriptions, order or task details, screenshots, and attachments you voluntarily send help us respond and resolve issues. Do not send passwords or unnecessary sensitive information.
2. iOS Permissions and Your Choices
- Camera: For previews and taking photos. Without permission, camera capture is unavailable.
- Photo access: For importing photos you choose. You can limit access using the options provided by iOS.
- Add photos: For saving photos and developed results to your system photo library.
- Location while using the app: For photo location recording that you enable, not continuous background tracking.
- Notifications: For development updates and similar alerts. Declining does not prevent checking task results in the app.
You can change RollRoom permissions in iOS Settings or disable the corresponding in-app feature. Withdrawal may affect that feature, but does not affect earlier lawful processing or automatically delete data already uploaded. See Section 6 to request deletion.
3. Cloud AI and Third-Party Services
Cloud AI requires providing photos to third parties. Before this processing begins, we must explain the recipients, data, and purpose and obtain the required explicit permission. You can choose not to use cloud AI rolls and continue using available local features. Camera or photo library permission is not permission for third-party AI processing.
We use the services below for the corresponding functions. We do not sell or rent your personal information. Submitting photos to receive a requested feature does not grant us permission to use them in public promotional material.
- Third-party AI model providers: Provide cloud AI development, processing the photos, effect instructions, technical settings, and results needed for the selected effect. Different rolls or effects may use different model providers, and processing is not limited to RollRoom's own servers. Before providing photos to a particular provider, we will identify the recipient, purpose, data involved, and applicable privacy practices in the feature's permission disclosure and obtain the required authorization. When providers change, we will update the disclosure and obtain fresh consent where required by law. This policy is not blanket authorization to provide photos to any newly added provider.
- Alibaba Cloud: Provides servers, databases, OSS storage for photos and results, logging, and SMS verification. These services respectively process necessary account and task data, photos, diagnostic logs, and phone numbers and delivery records for verification messages. See the Alibaba Cloud Privacy Policy.
- Umeng+ (友盟同欣（北京）科技有限公司): Mobile analytics processes necessary device identifiers, device and app information, network information, and usage events to analyze feature usage and operation. U-Push works with Apple's push service and processes push tokens, installation identifiers, user aliases, language, and notification events to deliver enabled notifications. See the Umeng+ Privacy Policy.
- Apple: Provides Sign in with Apple, App Store purchases and purchase restoration, transaction verification, and system push services, processing the corresponding identity, transaction, and push information. See the Apple Privacy Policy.
We may also disclose necessary information to competent authorities as required by law, or process it to address security incidents, disputes, and legal obligations. For a merger or business transfer affecting personal information, we will provide legally required notice and require the recipient to continue protecting it. We will seek additional consent when required for a new purpose or recipient.
4. Storage, Retention, and International Processing
Local photos and in-app roll records are stored on your device. Cloud AI originals, results, and related service data are processed and stored using Alibaba Cloud infrastructure. Cloud processing is not a permanent photo backup service. Save important photos to your system library and maintain your own backups.
Retention is determined by the needs of task processing, result delivery, troubleshooting, account and entitlement services, together with the data type, service status, deletion requests, and statutory obligations. Data no longer needed should be deleted or anonymized; records that must be retained by law are limited to the corresponding purpose. An expired download link does not mean the server copy has been deleted. Deleting a local photo or uninstalling the app does not delete cloud data. To request deletion of cloud photos, contact us with verifiable account or task details rather than resending the original image.
After account deletion, necessary transaction records and access-controlled historical account associations may remain for transaction, security, audit, or dispute obligations. Backup copies may be removed through the backup rotation cycle and are not used for ordinary business processing during that period.
Our cloud and AI services may process information outside your country or region. The processing locations depend on the cloud services and model providers used. Legal protections may differ between jurisdictions. Where separate notice, specific consent, or other international transfer safeguards are required, we will explain the relevant recipients and processing locations before processing and proceed only after the applicable conditions are met. Contact us for storage and recipient information relevant to your request.
5. Security
We use measures including HTTPS, account verification, access controls, private object storage, and time-limited access links to restrict unauthorized access. No system is absolutely secure. Protect your device and account, and do not forward photo links containing access credentials. If a personal information security incident occurs, we will take appropriate action and provide notices or reports as required by law.
6. Your Rights and Account Deletion
You can manage your account and permissions in the app and contact feedback@pixelpunk.cn to request access, correction, a copy, deletion, or withdrawal of consent. Where applicable law provides them, you may also request restriction, object to processing, or exercise data portability rights. We may request proportionate identity verification and will respond within applicable legal time limits, explaining any refusal. You can also complain to a competent supervisory authority in your jurisdiction.
Account deletion is available in the app's settings and account management interface. It ends ordinary use of the account and invalidates related sessions, but does not automatically cancel an Apple subscription. Cancel separately through Apple's subscription management. Registering again or restoring purchases does not restore the deleted account's photos, creations, or profile; eligible Apple-paid entitlements may be recovered subject to purchase verification and ownership rules.
If you decline data necessary for a feature, that feature may be unavailable. Withdrawing consent does not affect earlier lawful processing based on consent or records we must continue processing under applicable law.
7. Grounds for Processing
Where permitted by applicable law, we process information based on consent, performance of the service contract you request, legal obligations, and legitimate interests such as service security and reliability. You may withdraw consent for optional processing that relies on it. Sensitive information, third-party disclosures, and international transfers requiring specific authorization are handled under the applicable rules; blanket acceptance of this policy does not replace that authorization.
8. Children and Minors
RollRoom is not directed to children under 14. Other minors should use it under a guardian's guidance and with consent where legally required, subject to applicable age restrictions. Do not upload children's photos without the necessary authorization. Contact us if you believe we have improperly processed a child's personal information; we will investigate and take appropriate action, including deletion where appropriate.
9. Updates and Contact
We may update this policy as features or services change. Material changes will be communicated through appropriate means such as in-app notices, and fresh consent will be requested where required. The latest revision date appears at the top of this page.
Personal information controller: PixelPunk Inc. Privacy and support: feedback@pixelpunk.cn. Please use “RollRoom Privacy” in your request.
For product and purchase rules, see our Terms of Use.