Privacy Policy

Your photos and the look you choose

To make a look, Flashroll prepares each photo you pick on your phone (it is resized to at most 1,536 pixels on its long side, and location and other metadata are removed) and sends it, with the key of the look you chose, through aqualley’s AI gateway, which runs on Amazon Web Services in the United States, to the third-party AI providers we work with, which run the image models. Your photos are used to make the looks you asked for and, as explained below, to review and improve Flashroll’s looks. Flashroll does not use face recognition and never makes face templates or other biometric data from your photos: they are only edited and returned to you. Before your first photo is sent, Flashroll explains this and asks for your agreement; without it nothing is uploaded. Flashroll shows the system photo picker and reads only the photos you pick; it does not ask for access to your whole photo library.

How long we keep your photos and results

• Photos and results: aqualley’s gateway keeps a private copy of each photo you send and of each finished result, linked to your anonymous app user ID, so that only your copy of Flashroll can download them, a failed photo can be redone from the original, and we can review what Flashroll’s looks make and improve their quality. We keep them for 60 days, then delete them automatically. We do not sell them, share them with anyone else or use them for advertising. You can delete them sooner at any time (see below).
• The AI provider’s copy: the provider’s copy of a result is deleted as soon as our private copy is saved, normally within seconds.
• On your phone: Flashroll keeps your dumps and results in its history on your phone until you delete them. When you save or share a result, the destination you choose, such as Photos, Instagram or another app, handles it under its own privacy practices. If you use iCloud, Google backup or another backup service, Flashroll’s history may be included according to that service’s settings.
• Reports: if you report a result, we keep the report (the reason, the look, any note you write and an anonymous app ID, never the image) for up to 400 days to review it.

Deleting your photos

Settings › Delete my photos removes your dumps and results from your phone at once and asks aqualley’s gateway to delete every photo and result it keeps for you. The app shows whether the server copies have been deleted or are still being deleted. Deleting a single dump in History removes it from your phone.

Your credits, offers and invites

To keep plan and pack credits, credits returned for failed photos, free redos, gifts from invites and the first-year offer fair, aqualley’s gateway records each photo you start: a job identifier, the look, whether it succeeded and which credits it used. These records are linked to your anonymous app user ID and to the identifiers of your App Store or Google Play purchases, which the gateway reads from RevenueCat, so that a purchase cannot be spent twice. The app proves to our server that it is the genuine Flashroll app with Apple’s App Attest on iPhone and Google’s Play Integrity on Android. So that an offer’s 24-hour timer and an invite reward count once per phone, the gateway keeps a one-way hash of a device identifier (on iPhone one that our apps share on your phone, on Android the Android ID that Android gives the app), never the identifier itself. When you invite a friend, the gateway records your invite code and which codes were claimed and rewarded. None of this is used for advertising.

Notifications

If you allow notifications, Flashroll sends its push token, your time zone and whether you want offers to aqualley’s gateway, which sends notifications through Google’s Firebase Cloud Messaging (and Apple’s push service on iPhone). We use them to tell you when your photos are ready and, while the Offers switch in Settings is on, for occasional offers such as a reminder before a special offer ends. We send at most one a day and none at night in your time zone. You can turn offers off in Settings, or all notifications in your phone’s settings.

Purchases

Apple or Google processes payments for Flashroll’s subscriptions and credit packs. Flashroll uses RevenueCat to verify purchases. RevenueCat may process an anonymous app user identifier, purchase status, and device and diagnostic information needed to provide that service. Flashroll Settings shows this identifier as your User ID so you can choose to share it with support. Offer codes are entered in Apple’s redemption sheet or on Google Play’s redeem page; Flashroll does not read or send the code. aqualley does not receive your payment-card details.

Optional usage analytics

When usage analytics is on in Flashroll Settings, the app sends limited events to PostHog Cloud in the United States. Events include a random Flashroll-specific identifier, a session identifier, the app version and build, whether the device is one of our own test devices, and actions such as opening the app for the first time, finishing onboarding, choosing a look and photos, your choice on the photo agreement, starting, finishing, redoing, saving, sharing, exporting, deleting or reporting photos and whether they failed, using the free editor, viewing the paywall, packs or an offer, notification and invite choices, and the outcome of a purchase, restore or redeem attempt. They never contain your photos, results, payment details or contact details. PostHog derives your approximate country from the IP address of each request and stores that IP address alongside the event; Flashroll does not read device location, and we use country only for aggregate reporting. Advertising tracking and session replay are disabled.

Usage analytics is on by default and you can turn it off in Settings at any time. This stops further collection, discards unsent events and resets the local analytics identifier; it does not remove events PostHog has already received. See PostHog’s privacy policy for that service.

Crash reports

When usage analytics is on, Flashroll also sends crash reports to Google’s Firebase Crashlytics so we can fix problems. A crash report contains technical details of the crash (the code that failed), the app version, device model, operating system version and the state of the app at the time, with a random installation identifier; it never contains your photos, results, User ID, payment details or contact details. Turning off usage analytics in Settings also turns off crash reports. See Firebase’s privacy information.

How you found Flashroll

To learn which of our videos, links and ads bring people to Flashroll, the app records once how it was installed: whether it came from an Apple Search Ads campaign (Apple tells the app through its AdServices service, without tracking you across apps), or, on Android, the campaign or invite code in one of our links, and, if you choose to answer, where you heard about Flashroll. These values are added to the usage analytics events and stored with your anonymous app user ID at RevenueCat, so we can see downloads and revenue by source in aggregate. They are not sent when usage analytics is off. Our links at go.aqualley.net count taps per campaign, device type and country, and store no IP address or identifier.

Support emails

“Report a bug” opens an email to info@aqualley.net filled in with your User ID, app version and build, device model, iOS or Android version, locale and store country. Nothing is sent unless you send it.

Children

Flashroll is not directed to children. We do not knowingly collect personal information from children through the app.

Changes and contact

We may update this policy as Flashroll changes. The current version will be posted on this page. For privacy questions or requests, contact info@aqualley.net. To have the records linked to your User ID deleted, email us the User ID shown in Flashroll Settings; we delete aqualley’s gateway records for it within 30 days, except the records that stop a purchase, an offer or an invite reward from being used twice. Purchase records kept by Apple, Google and RevenueCat follow their own policies.

Flashroll Support · Terms of Use · Privacy Policy