This Privacy Policy describes how Roll Call (the "App"), operated by Cliff Anstey ("we," "us," or "our"), collects, uses, and protects information when you use our mobile application.
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use the App.
1. Information We Collect
Information You Provide
- Account information: When you create an account, we collect your email address and a password (stored as a one-way cryptographic hash, never as plain text).
- Collection data: Information about action figures you add to your collection, including condition, optional purchase date, optional purchase price, and optional notes you write.
- User-uploaded photos: Photos you choose to upload using the in-app camera or photo library picker. See Section 6 for full details.
Information We Do Not Collect
- We do not collect your name, address, phone number, or any other personally identifying information beyond your email.
- We do not access your contacts, location, or microphone.
- We access your camera and photo library only when you actively choose to upload a photo, and only to retrieve the photo you select.
- We do not use third-party advertising networks, analytics SDKs, or social media tracking.
- We do not collect information about how you use the App beyond what is required for it to function.
2. How We Use Information
We use your information solely to provide the App's functionality:
- To authenticate you and securely associate your collection with your account.
- To display your collection and calculate estimated values.
- To display photos you have uploaded back to you in your collection.
- To respond to support requests when you contact us.
We do not sell, rent, or trade your personal information to anyone. We do not use your information for advertising or marketing purposes. We do not share your collection data or photos with other users.
3. Third-Party Services
The App relies on the following services to function:
Supabase
We use Supabase (operated by Supabase, Inc.) to store account credentials, collection data, and uploaded photos. Supabase processes data on our behalf and is bound by their own privacy practices. Their privacy policy is available at supabase.com/privacy.
eBay
The App queries publicly available eBay marketplace listings to compute estimated market values for action figures. No information about you is sent to eBay. eBay queries are server-side, anonymous, and contain only the figure name being looked up — never your email, account, collection details, or photos.
4. Data Security
We take reasonable steps to protect your information:
- All communication between the App and our servers uses HTTPS encryption.
- Passwords are stored as one-way cryptographic hashes (we cannot recover or read them).
- Database access is protected by row-level security: your collection data and photos are technically inaccessible to other users, even by direct database query.
- Uploaded photos are stored at unguessable URLs and are scoped to your account.
- Supabase, our database and storage provider, maintains SOC 2 Type II certification.
While we use industry-standard practices, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
5. Your Rights
You have the right to:
- Access the information we have about you.
- Correct inaccurate information.
- Delete your account, photos, and all associated data at any time.
- Export your collection data in a machine-readable format.
- Withdraw consent for the App to process your data, by deleting your account.
To delete your account: Email
cansteydev@gmail.com from the email address associated with your account, with the subject line "Delete my account." We will permanently delete your account, all uploaded photos, and all associated data within 30 days. You will receive confirmation when the deletion is complete.
6. User-Uploaded Photos
The App allows you to upload photos of figures in your collection using your device's camera or photo library. These photos are stored on our servers (operated by Supabase) and displayed back to you within the App.
Ownership and rights
- You retain all ownership and copyright in photos you upload.
- By uploading a photo, you grant us a limited license to store and display it to you within the App for the purpose of providing the App's functionality. We do not use, repurpose, share, or display your photos in any other context.
- You represent that you have the right to upload any photo you submit, that the photo does not infringe on the rights of any third party, and that the photo does not violate any applicable law.
Privacy of your photos
- Your uploaded photos are private to your account. Other users of the App cannot see your photos.
- Photos are stored at unguessable URLs, and access is restricted by database-level security policies.
- We do not analyze, categorize, or extract metadata from your photos. We do not use them to train any AI or machine learning systems.
Camera and photo library permissions
- The App requests camera and photo library access only when you actively choose to upload a photo.
- You can revoke these permissions at any time in your device's Settings app under Privacy & Security.
- Revoking permissions does not delete photos you have already uploaded. To delete uploaded photos, use the in-app delete option or contact us.
Acceptable content
You agree not to upload photos that contain illegal content, content that infringes the intellectual property of others (beyond fair use), or content depicting other identifiable people without their consent. We reserve the right to remove any uploaded content that violates these terms or applicable law, and to terminate accounts that repeatedly violate these terms.
Deletion of photos
- You can delete any photo you have uploaded at any time from within the App.
- When you delete a photo, it is permanently removed from our storage within 7 days.
- Deletion of your account removes all associated photos.
7. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information.
We do not sell your personal information to anyone. To exercise any CCPA right, contact us at cansteydev@gmail.com. We will respond within 45 days as required by law.
8. International Users
The App and its servers are operated from the United States. By using the App, users outside the United States consent to having their information transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.
9. Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For significant changes, we will provide notice within the App. We encourage you to review this policy periodically.
11. Contact
If you have questions about this Privacy Policy or our data practices, contact us at:
12. Trademark Notice
Roll Call is an independent application developed for collectors. It is not affiliated with, endorsed by, sponsored by, or in any way officially connected with Hasbro, Inc. or any of its subsidiaries or affiliates. All trademarks, product names, and brand names referenced are the property of their respective owners.