RollCal
Privacy Policy
Last updated October 20, 2026
This policy explains what information RollCal collects, why, and what you can do about it. RollCal is responsible for your information.
What we collect
Account details: your name, email address, username, profile photo, preferred currency, and, if you sign in with Apple or Google, the details they share with us.
What you add: events, RSVPs, invitations, friend connections, chat messages, photos and videos, bills and their items, and the payment handles you choose to add (such as an email or phone number for Interac e-Transfer, or a Venmo, PayPal or Cash App username).
Locations you choose: an event’s address or map pin. If you use “current location” when picking a place, your device’s location is used once for that and is not stored separately.
When you contact support or report something: what you write, your account email (so we can reply), your phone type and app version, and for reports, what you reported. The person you report is not told who reported them.
If you allow notifications: a notification token for your phone and your notification settings.
Your age: we ask when you were born when you join, to check you are 13 or older. We keep only the fact that you passed, never the date.
We do not use advertising or analytics tracking, and we do not sell your information.
How we use it
Only to run RollCal: to show your events, photos and bills to the people they are shared with, to keep the app secure, to answer you when you contact us, and to meet legal obligations.
Who can see it
People in an event can see that event’s details, members, chat, photos and bills, including a converted receipt’s original currency and the rate used. Payment handles you attach to a bill are visible to the people in that event. Friends and people you share events with can see your name, username and profile photo.
Services that handle it for us
Supabase hosts our database, file storage and sign-in. Your information is stored on servers in the United States, so it may be accessed by authorities there under US law.
When you scan a receipt, the photo is sent to Google’s Gemini service to read it, under Google’s terms for that service. We do not keep the photo after it has been read.
Apple and Google handle sign-in when you use them, and will handle payment for Pro; we never see your card details.
Resend sends our emails, such as replies to support messages, from our servers.
When you drop a pin on the map, your phone sends its coordinates to OpenStreetMap’s Nominatim service to find the place’s name, under the OpenStreetMap Foundation’s privacy policy. Nothing else about you is sent.
Notifications: if you allow them, we keep a token for your phone and send each notification’s text (for example a friend’s name or a preview of a chat message) through Expo’s push service and Apple’s or Google’s notification service, which deliver it to your phone. You can turn notifications off in the app or in your phone’s settings.
Exchange rates come from ExchangeRate-API’s public feed. Our servers fetch the day’s rates; nothing about you is sent.
How long we keep it
We keep your information while you have an account. Event photos and videos may be deleted sooner under the storage rules shown in the app. When you delete your account, we delete your profile and the content linked to it, including events you created; copies may remain in backups for a short time before they are overwritten. Copies other people have already saved stay with them.
Your choices and rights
You can view and edit your profile, delete your content, and delete your account in the app. Depending on where you live, you may also have the right to ask for a copy of your information, to correct it, or to have it deleted; contact us to do this.
You can withdraw permission for photos, camera, location or notifications at any time in your device settings.
Our privacy officer handles privacy questions and requests at support@rollcal.app. We reply within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the privacy regulator where you live.
Children
RollCal is not for children under 13, and we do not knowingly collect their information. If you believe a child under 13 has an account, contact us and we will delete it.
Security
We use reasonable safeguards, such as encryption in transit and access rules that limit who can see each piece of information, but no system is perfectly secure.
Changes
If we change this policy in a significant way, we will tell you in the app before the change takes effect.
Contact
Privacy questions or requests: support@rollcal.app.