Your media stays yours.

1. Scope

This Privacy Policy applies to the Rollit app, the Rollit Web Page at rollit.bytely.app, and related services operated by Bytely. It explains how information is handled during local media transfers and optional browser pairing.

2. Information on your iPhone or iPad

• Photos and videos: Photos and videos added to Rollit stay in the Rollit folder on your iPhone or iPad until you move them to Photos or delete them.
• Photos permission: Rollit requests add access only when needed to save media into the Photos app.
• Camera permission: The camera is used only when you choose to scan a QR code to pair a browser.
• Local network permission: This is used to run the local transfer server and connect your computer directly to your iPhone or iPad.

Your photos and videos are never sent to Bytely.

3. Optional browser pairing

When you choose Rollit Web Page, Rollit temporarily sends connection details to Bytely's pairing service so your browser can find your iPhone or iPad. These details include:

• a six-digit verification code;
• random session identifiers and temporary access tokens;
• your local network address, hostname, and port;
• the app name, connection status, and expiration time.

Rollit does not send a separate device display name. However, a local network hostname may include a name assigned to your iPhone or iPad.

Bytely processes these connection details only to provide browser pairing and keep it secure. Active details are deleted when pairing closes or expire automatically within approximately five to ten minutes. Cloudflare recovery systems may keep deleted records technically recoverable for up to 30 days.

4. Service providers and disclosures

Cloudflare hosts and protects the online pairing service and may process standard request data, including IP address and browser information. Apple provides the App Store, Photos, and optional iCloud services. Our email provider processes support messages, which are kept only as needed to respond.

We do not sell personal information, share it with data brokers, or use it for targeted advertising. Information may be disclosed when legally required or necessary to protect users and the service.

Cloudflare operates globally, so technical information may be processed outside your country under applicable safeguards.

5. Your choices and rights

You can avoid online pairing by choosing Device Name or Local IP Address. You can manage Rollit permissions in Settings, close an active transfer session, and delete files stored in Rollit.

You may contact us to request access, correction, deletion, restriction, objection, or portability where available. You may also complain to your local data-protection authority.

Because Rollit has no accounts and pairing details expire quickly, we may be unable to identify an expired session.

6. Security

Hosted pairing uses HTTPS, short-lived access tokens, verification codes, rate limits, and automatic expiration.

Browser media transfers over your local network currently use local HTTP with a random session token and are not protected by local TLS. Use Rollit on a trusted network and close the transfer screen when finished.

7. Children's privacy

Rollit is not directed to children under 13 or the minimum age required in their country. Contact us if you believe a child has provided personal information.

8. Changes to this policy

We may update this policy when Rollit, its providers, or legal requirements change. The date below identifies the current version.