Privacy Policy

Welcome to RollCall, operated by Sky Enterprises Australia. We are committed to protecting your privacy and ensuring your personal information is handled transparently and securely. This Privacy Policy outlines what we collect, how we use and share your data, and your rights. By using RollCall, you agree to this policy.

Last Updated: October 2, 2026

1. What We Collect

We collect information to enable group challenges, streak management, social interactions, punishment enforcement, and personalised app functionality.

1.1 Personal Information

This includes data you provide directly when creating your account or participating in RollCall activities:

• Account & Identity: Email address, Apple Sign-In identity token (hashed), securely hashed passwords, JWT tokens.
• Profile Information: Username, display name, profile picture (stored securely on AWS S3).
• Social Interactions: Friend lists, friend requests, mutual-friend counts for suggestions, group memberships, group invites, and group-created punishments.
• User-Generated Content: Photos submitted for daily challenges, photographic evidence for punishment completion, favorites, dislikes, and user comments.
• Push Notification Tokens: Device tokens for real-time challenge alerts, streak updates, and user interactions.
• Premium Subscription Information: Subscription status, monthly skip/punishment restore usage, custom UI preferences (e.g., selected profile colours).
• Contact Matching (Optional): Temporarily hashed contact names to suggest friends within RollCall. Data is discarded unless a match occurs and the friend is added.
• Timezone & User Preferences: User’s timezone, used to deliver time-appropriate challenges and notifications.
• Feedback & Support: Messages you send us through in-app feedback or support, along with your app and OS version.

Contact syncing is optional and can be disabled anytime via your device or app settings.

1.2 Device and Usage Data

We automatically collect specific data to maintain app reliability, performance, and security:

• Device Information: Device type, operating system, and IP address for diagnostics and app security.
• Usage Metrics: Website page views and visitor activity, daily challenge submissions, feed interactions, group activity logs, user streak performance, challenge participation, punishment assignments, and comment interactions.
• App Analytics: How you use the app, such as app opens, screens and features used, and purchase activity, along with your app version, OS version, and timezone.
• Error Logs: Technical details when something goes wrong, including your IP address and device information, used to diagnose and fix problems.

This data is linked to your account and is used only to run, secure, and improve RollCall.

2. How We Use Your Data

We process your data primarily to:

• Deliver daily photo challenges and manage group streaks.
• Assign, monitor, and verify punishments for missed challenges or unanimously disliked submissions.
• Authenticate user accounts and manage secure logins.
• Provide real-time notifications about streaks, submissions, friend activity, group invites, and punishments.
• Enable social interactions, including comments, favorites, dislikes, and friend recommendations.
• Personalise user interfaces and premium user experiences.
• Support troubleshooting, technical assistance, and account recovery.
• Maintain compliance with legal obligations and enforce community safety standards.

We never use your data for third-party advertising or behavioral profiling.

3. Data Sharing

Your personal data is never sold and is shared only when necessary to operate RollCall or comply with legal obligations.

• Group Members: Your profile information, submissions, comments, and streak activity are visible to your group members.
• Third-Party Services:
  • MongoDB Atlas: Stores user account data, social interactions, group activity, and challenge history.
  • AWS S3: Hosts all uploaded challenge images and punishment proof securely.
  • Heroku: Hosts backend services, manages daily challenge assignments, notifications, and streak automation.
  • Apple: Facilitates authentication via Apple Sign-In and provides push notifications via APNs.
  • DataFast: Provides website analytics by processing page views, visitor activity, cookies, and IP addresses to help us understand and improve website usage.
• Legal Authorities: We may disclose your data to comply with valid legal requests, investigations, subpoenas, or to prevent potential harm to other users.

All third-party providers are contractually bound to use your data strictly for RollCall purposes.

4. Data Retention and Deletion

Your data is retained only as long as your account remains active. Deleting your account permanently removes your information from our databases and storage systems, including MongoDB Atlas and AWS S3.

App analytics and error logs are kept for a limited period (up to 12 months for analytics and 90 days for error logs) and then automatically deleted. When you delete your account, any such records we keep are de-identified and no longer linked to you.

Group-related content (comments, submissions, punishment history) may remain accessible within the group context until the group itself is deleted or all members leave.

5. Your Rights

Your rights concerning your personal data vary based on your jurisdiction (e.g., GDPR in Europe, CCPA in California). Typically, these rights include:

• Access: Request copies of your personal data.
• Correction: Update or rectify inaccurate or incomplete information.
• Deletion: Permanently erase your data and account from RollCall.
• Restriction & Objection: Limit how we use your data or object to specific processing methods.
• Portability: Transfer your data in a machine-readable format.

To exercise these rights, please contact us at [email protected]. We will respond within the legal timeframe stipulated by applicable data protection laws.

6. Security Measures

We implement robust safeguards to protect your data:

• End-to-end SSL/TLS encryption for all data transmissions.
• AWS IAM policies and secure MongoDB Atlas access controls.
• JWT authentication and secure session management.

No system can guarantee 100% security; we recommend using strong, unique passwords and maintaining secure login practices.

7. Children's Privacy

RollCall is strictly intended for users aged 13 and older. We do not knowingly collect data from individuals under 13. If you suspect we have collected data from a child, please contact us immediately for removal.

8. International Data Transfers

Your personal data may be transferred and processed outside your country of residence. We ensure data transferred internationally complies with applicable legal standards, such as EU Standard Contractual Clauses (SCCs), to provide adequate protection.

9. Cookies & Tracking Technologies

RollCall uses cookies for essential website functionality and uses DataFast analytics cookies to measure website traffic and visitor activity. DataFast may process cookies and IP addresses solely to provide analytics and help us improve the user experience. We do not use this information for third-party advertising or behavioural profiling.

You can block or delete cookies through your browser settings, though this may affect website functionality and the accuracy of analytics.

10. Policy Changes

This Privacy Policy may be updated periodically. Significant updates will be communicated via email or through prominent in-app notifications. We encourage regular review of this policy.

11. Contact Information

Sky Enterprises Australia
Email: [email protected]
Website: www.skyenterprisesau.com