MultiRoll Privacy Policy

Effective date: October 4, 2026

This Privacy Policy explains how OV, LLC ("OV", "we", "us") handles information when you use MultiRoll: the iPhone app, the website at multirollapp.com, and related services (together, the "Service"). MultiRoll is for people 18 and older.

The short version

• MultiRoll is a shared camera. What you shoot in an album is shared with everyone in that album. That's the point of the app.
• You don't give us an email, phone number or password. Your account is a random ID plus the display name you choose.
• We never read your photo library. We only get shots you take in MultiRoll and items you pick to upload.
• We remove location data from your photos and videos before upload.
• We collect usage data about how the app is used, never the content of your shots or comments. You can turn it off.

1. Information we collect

Information you give us

• Display name. The name you choose, shown to people in your albums.
• Your content. Photos and videos you take in MultiRoll or pick to upload, and the time they were taken, their size and length, and the look (filter) used.
• Likes and comments you add to shots.
• Album details, if you host an album: its name, tagline, cover design and cover photos.
• People you star. Starring someone is private to you; we use it to sort your "People" view.
• Blocks and reports. Who you block, and what you report and why. If you report a comment, we keep a copy of its text for review.
• Messages to us, when you contact us through our contact form, which is run by Tally.

Information collected automatically

• Account ID. A random ID created the first time you use MultiRoll, and the albums you're in, your role in them (host or member), and when you joined or left.
• Usage data. Which screens and features are used, for example "album opened" or "photo taken", with counts and on/off settings, a session ID, the app or website version, your operating system version and whether you're using the iPhone app or the website. Usage data is linked to your account ID, but it never includes the content of your shots, names, album names, comments or invite codes. You can turn it off (see section 6).
• Logs and IP addresses. Like most online services, our servers and service providers record technical information such as IP addresses, request times and errors. We also use IP addresses to limit abuse, for example by limiting how many invite codes can be tried.
• Security checks on the website. The website may use Cloudflare Turnstile, an invisible check that helps confirm you're a person and not a bot. Cloudflare processes information about your browser and device to do this.

Photo analysis on iPhone

To power sorting views like People, Moments, Highlights and "Things & scenes", an iPhone in the album analyses a small thumbnail of each shot on the device using Apple's Vision framework. Usually this is the phone that took the shot. For shots that don't have results yet, such as photos taken on the website, another album member's iPhone may fill them in. The results stored with the shot, and visible to album members, are:

• up to nine general scene categories (people, food, night, sky, outdoors, water, pets, city, text);
• up to five general labels (for example "beach");
• an overall aesthetics score, and whether the shot looks like a screenshot or document;
• the number of faces in the shot. This is a count only. We don't store where faces are, their features, or anything that could identify or tell people apart, and we don't recognise or match faces;
• the shot's average colour; and
• a visual fingerprint of the whole image, used to spot near-duplicate shots.

We don't create, collect or store biometric identifiers or biometric information.

What we don't collect

• Your photo library. MultiRoll never asks for permission to read your photo library. When you upload from your library, Apple's picker gives us only the items you select.
• Location. We don't ask for your location, and we remove location data (and camera maker information) from photos and videos before they're uploaded.
• Contacts, advertising identifiers or data from other apps and websites.

2. How we use information

We use information to:

• provide the Service: upload, store and deliver shots to the members of your albums, show likes and comments, and keep albums in sync;
• run features you use, such as invites, looks, covers and the sorting views;
• keep MultiRoll safe: review reports, enforce our Terms, prevent abuse and spam, and protect people and the Service;
• understand how MultiRoll is used and improve it, using usage data;
• communicate with you when you contact us; and
• comply with the law.

3. Who can see your information

• People in your albums. Everyone in an album can see the shots, likes and comments in it, the display names of its members, who took each shot, and the photo analysis results described above. This includes people who join later. Members can save shots to their own devices, and we can't recall those copies.
• Anyone with an album's invite. Before joining, anyone with an album's invite code or link can see the album's name, tagline, cover, the display names of its members and how many shots it has. Link previews in other apps show the album's name, tagline and cover design, and the cover photo only if the host turns that on.
• Service providers who help us run MultiRoll, only to provide their services to us:

- Supabase (database, accounts, file storage and real-time updates), hosted in the United States;
- Vercel (website hosting and link previews);
- PostHog (usage analytics), hosted in the United States;
- Cloudflare (website security checks);
- Tally (our contact form); and
- Apple (App Store distribution and the on-device frameworks MultiRoll uses).

• Legal and safety. We may share information if we believe it's required by law or legal process, or necessary to protect the rights, safety or property of our users, the public or OV. That includes reporting child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC).
• Business transfers. If OV is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal, subject to this policy.

We have not sold personal information or shared it for cross-context behavioural advertising. If that changes, we'll update this policy before it does and give you a way to opt out where the law requires.

4. iPhone permissions

• Camera, to take photos and videos. Without it you can still browse your albums.
• Microphone, to record sound with videos.
• Photos (add only), to save shots to your photo library: your own shots automatically if you turn on "Save my shots to Photos", or any shot you save from the viewer. MultiRoll can add to your library but can't read it.

You can change these at any time in your iPhone's Settings.

5. Information stored on your device

• iPhone: your sign-in is stored securely in the iPhone's Keychain. Your display name, settings and any shots waiting to upload are stored in the app.
• Website: your sign-in, display name, invites you've opened, settings and any shots waiting to upload are stored in your browser's storage. We don't use advertising or third-party tracking cookies.

6. Your choices about usage data

• iPhone: Profile > Privacy > the usage data switch.
• Website: the camera's Settings (⚙) > the usage data switch.

Usage data is on by default in the iPhone app and off by default on the website, where it starts only after you turn it on. Turning it off stops collection on that device or browser right away and deletes usage data that hasn't been sent yet. It doesn't affect information we need to run the Service, such as the albums you're in and when you joined or left them, or server logs. On the website, if your browser sends a Global Privacy Control signal, we treat usage data as turned off. We don't otherwise respond to "Do Not Track" signals.

7. How long we keep information

• Your content stays until you delete it, the album's host removes it, it's hidden after a report or removed for breaking our Terms, or your account is deleted. When a shot is deleted, it disappears from the album for everyone right away and no one can open it through the Service any more. The file itself may stay in our private storage for a while before it's permanently erased. When you delete your account, the files of every shot you shared are erased.
• Album details stay until the album is deleted.
• Usage data is deleted after 400 days, or sooner if you delete your account.
• Reports are kept as long as needed to review them, keep the Service safe and meet legal obligations.
• Invite codes are stored only in a scrambled (hashed) form. Links that move a website guest into the app expire after 30 minutes.
• Logs kept by our service providers follow their own retention periods.
• We may keep information longer when the law requires it or to resolve disputes and enforce our Terms.

8. Deleting your information

• A shot: delete your own shots from the viewer. An album's host can also remove anyone's shots from it. Anyone in an album can report someone else's shot, which hides it for everyone while we review it.
• Leaving an album: removes you from it. Shots you shared stay in the album for its members. Delete them first if you don't want them to stay.
• Your account (iPhone): Profile > Delete account. This permanently deletes your display name, every shot you shared in every album, your comments, likes, stars, blocks and memberships, and the usage data stored in our database. Albums you host pass to the next person who joined; an album with no one else in it is deleted. We also delete your usage data from PostHog when you ask. Reports you filed are kept for safety, with your identity removed. We keep anonymous counts of album joins that can't be linked back to you.
• Your account (website): contact us at multiprojectsincorporated@gmail.com or through the contact form and we'll delete it, with the same effect as deleting an account in the app.

Copies other members already saved to their own devices aren't affected by any of these.

9. Security

Albums and their files are private: only members of an album can access them, which we enforce with access controls on our servers and with signed, time-limited links to files. Information is encrypted in transit. MultiRoll is not end-to-end encrypted, and no system is perfectly secure, so we can't guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to:

• know and access the personal information we hold about you;
• correct it;
• delete it;
• get a copy of it in a portable format;
• object to or restrict certain uses, such as usage data; and
• not be discriminated against for exercising these rights.

To make a request, email multiprojectsincorporated@gmail.com or use the contact form. Because MultiRoll accounts don't have an email or password, we may need to verify a request by asking you to make it from the device you use MultiRoll on, or for details only the account holder would know, such as your display name and the albums you're in. You may also use an authorised agent where the law allows. If you're in the European Economic Area or the UK, you also have the right to complain to your local data protection authority.

Legal bases (EEA and UK). We process your information to provide the Service you asked for (performance of a contract), for our legitimate interests in keeping MultiRoll safe and understanding how it's used (including usage data, which you can turn off at any time), and to comply with legal obligations.

11. Where your information is stored

MultiRoll is run from the United States, and your information is stored and processed in the United States. If you use MultiRoll from outside the U.S., your information will be transferred to, stored and processed in the U.S., where data protection laws may differ from those where you live.

12. Age requirement

MultiRoll is only for people 18 and older. We don't knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we'll delete it. If you believe a minor is using MultiRoll, contact us.

13. Changes to this policy

We may update this Privacy Policy. If we make a material change, we'll let you know in the Service before it takes effect, and we'll update the effective date above.

14. Contact us

OV, LLC
Email: multiprojectsincorporated@gmail.com
Contact form: https://tally.so/r/J97r47