ROLL Beauty

Privacy Policy

Last Updated: September 2, 2026

1. Introduction

AMANEKU Studio ("we," "us," or "the operator") sets out this Privacy Policy to explain how we handle the personal information of users of the mobile application "ROLL Beauty" (the "App").

By using the App, you are deemed to have agreed to this Policy.

2. Information We Collect

2-1. Account Information

Information	How it's collected	Notes
User identifier	Sign in with Apple	An identifier issued by Apple
Email address	Sign in with Apple	If you choose to hide your email, we only receive Apple's relay address
Display name	Entered by the user	Required. Shown to other users and searchable
Handle (identifier beginning with `@`)	Generated, editable by the user	Shown to other users and searchable
Avatar image	Set by the user (optional)	You may skip this. If set, the image is stored on our servers (Cloudflare R2) and shown to other users
Profile bio	Set by the user (optional)	You may skip this. Shown to other users

⚠️ Your display name, handle, avatar image, and bio are visible to other users of the App, who can find them by searching for your name or handle. Do not put anything in these fields that you do not want others to see.

2-2. Content You Create and Post

Information	Notes
Hairstyle records (images)	Images captured with the camera
Comments on posts	Text content and timestamp
Direct messages	Text and timestamp of one-to-one messages. We review them if they are reported
Group conversations	Text and timestamp, shown to members of that group
Group membership	Which groups you belong to
Users you have blocked	Who you blocked
Reports	What was reported, by whom, and how it was handled
Likes / bookmarks	Which posts you interacted with

Messages are not end-to-end encrypted. We need to be able to review reported content (Terms of Use, Section 9). We do not read messages as a matter of course, but the system does not prevent us from doing so.

2-3. Stylist Verification Requests (only if you apply)

Information	Notes
Salon name
Salon website or listing URL
URL of the page where the applicant is listed

We do not collect images of cosmetology licenses or any other government-issued ID. Verification is performed using only the publicly available information listed above.

2-4. Feedback You Send Us

Information	Notes
The text of your feedback	Sent via "Send feedback" inside the App
App version	So that bug reports can actually be investigated
OS version	Same as above

Feedback you send is not visible to other users. If we publish a reply within the App, we do so in a form that does not identify the sender.

2-5. Payment Information

Subscription management is handled through RevenueCat, Inc. Payment details such as credit card numbers are processed by Apple; we do not collect them.

2-6. Information We Do Not Collect

We do not collect:

Location data
Contacts (address book)
Advertising identifiers (IDFA) or other ad-tracking data
Government-issued identification images
Face mesh geometry, facial expression data, or depth-map values from the TrueDepth camera (see Section 4-1)
Faceprints, biometric templates, or any other data used to recognise or identify a person by their face

3. Purpose of Use

We use the information collected for the following purposes:

Providing the App's features (saving, displaying, and sharing records; enabling comments)
Identifying and authenticating users
Providing paid features and managing subscriptions
Reviewing stylist verification requests and granting "Verified" status
Responding to reports and investigating violations of our Terms
Investigating issues and improving the App
Responding to user inquiries
Reviewing feedback you send us and publishing our replies within the App (in a form that does not identify the sender)

4. Face Data and On-Device Processing

4-1. Face Data (TrueDepth API)

To record a full rotation of your hairstyle, the App must know how far you have turned your head at each moment. On devices fitted with a TrueDepth camera, the App obtains this using Apple's ARKit face tracking (ARFaceTrackingConfiguration).

What the App obtains through the TrueDepth API

The position and orientation of your face relative to the camera, and a true/false value indicating whether a face is currently being tracked.
From that orientation, the App derives and uses one single number: the horizontal rotation angle (yaw) of your head.

What the App does not obtain

The App does not use face mesh geometry (ARFaceGeometry).
The App does not use facial expression data (blend shapes).
The App does not read the values of the depth map. It only checks whether depth information is present at all, so that it can detect a sensor problem.
The App does not perform face recognition or identification, and does not create a faceprint or any other biometric template.

Purpose of collection

Face data is used for one purpose only: to measure the rotation angle of your head in real time during capture, so that the App can choose evenly spaced frames and display a progress indicator while you turn.

Storage, retention, deletion, and sharing

Storage: face data exists only in the device's memory for the instant it is processed. It is never written to storage — neither to your device nor to our servers.
Retention: none. Each frame's face data is discarded as soon as the rotation angle has been calculated, and nothing remains once capture ends.
Deletion: because nothing is retained, there is nothing to delete.
Sharing: face data obtained through the TrueDepth API is never transmitted off your device, is never sent to our servers, and is never shared with or disclosed to any third party for any purpose.

The photographs that make up a record are ordinary colour images taken with the front-facing camera. They are not depth images and contain no TrueDepth data. How those photographs are stored and shared is described in Sections 4-2, 5, and 8.

4-2. Image Processing on Your Device

Image processing for captured photos (background replacement, head alignment, and face-blurring) is performed entirely on your device. No image is sent externally for these processes.

The temporary video generated during capture is deleted from the device immediately after processing and is never transmitted externally.

Processed images are only sent to our servers when you choose to share or post them.

5. Scope of Sharing

Records you create are shared with other users only within the scope you select.

Selected scope	Who can view it
Not shared	You only
Direct share	The recipient(s) you selected
Group	Members of that group only
Public	Every user of the App

Unless you take an action to share, your records are never made visible to other users.

The following, however, are visible without any sharing action:

Information	Visible to
Display name, handle, avatar image, bio	Every user of the App (and searchable)
Direct messages	The recipient only
Group conversations	Members of that group only

6. Disclosure to Third Parties

We do not disclose collected information to third parties except in the following cases:

With your consent
When required by law
When necessary to protect a person's life, body, or property, and obtaining consent is difficult
When entrusting information to the service providers listed in Section 7, to the extent necessary for the stated purposes

7. Service Providers We Use

The App relies on the following third-party services. Each provider handles data according to its own privacy policy.

Provider	Purpose	Location
Apple Inc.	Authentication (Sign in with Apple), in-app purchases	United States
Cloudflare, Inc.	Image storage (R2)	United States
Supabase, Inc.	Storage of authentication data and text content	United States
RevenueCat, Inc.	Subscription status management	United States

As noted above, your information may be stored on servers located outside of Japan.

8. Retention and Deletion

Collected information is retained until you delete your account.
You can delete your account at any time from the Settings screen within the App.
When you delete your account, records and comments you created are deleted, except:

Information legally required to be retained
Records of report handling (to the extent necessary to protect other users)

Data remaining in backups is deleted progressively within a reasonable period.

9. Security Measures

We take reasonable and appropriate measures to prevent the leakage, loss, or damage of collected information and to otherwise ensure its security.

10. Your Rights

You may request disclosure, correction, addition, deletion, or suspension of use of your personal information that we hold. Please contact us using the details in Section 12.

11. Use by Minors

The App is not intended for use by children under 13. If you are under 13, please do not use the App.

Minors who use the App should do so with the consent of a parent or guardian.

12. Contact

For inquiries regarding this Policy, or requests regarding the handling of your personal information, please contact:

Operator: AMANEKU Studio (Representative: Naoyoshi Hiraishi)
Email: amaneku.studio@gmail.com
Postal address and telephone number: disclosed without delay upon request

13. Changes to This Policy

We may revise this Policy as necessary. If we make a material change, we will notify you within the App or through another appropriate method.

14. Governing Law

This Policy is governed by and construed in accordance with the laws of Japan.

Effective date: August 21, 2026