Privacy policy

1. Information we handle

• Account information: identifiers, display name, and sign-in information provided through Clerk and your chosen sign-in provider, which may include your email address.
• Collection information: sets, minifigures, quantities, condition, purchase prices and dates, collections, labels, filters, inventory memberships, and invitations.
• App identifiers and purchases: a generated device identifier, account identifiers, subscription status, and transaction information processed through Apple and RevenueCat. We do not receive your full payment-card details.
• Technical information: our hosting and service providers may process IP addresses, request timestamps, device or browser information, and service logs to deliver, secure, and troubleshoot the service.
• Support messages: your email address, correspondence, and attachments you choose to send.

2. Camera and local storage

The app requests camera permission to scan set barcodes and QR codes. Scanning is performed on your device; the scanning feature does not upload camera footage to our backend. You can decline camera access and use catalog search instead. The app stores identifiers in the iOS Keychain and may cache catalog information and search history locally.

3. How we use information

We use information to authenticate you, save and synchronize your inventory, provide shared collections, maintain subscription access, respond to support and privacy requests, prevent abuse, troubleshoot problems, and meet legal obligations. Where applicable law requires a legal basis, these purposes rely on performing our agreement with you, legitimate interests in operating a secure service, legal obligations, or consent where required.

We do not sell personal information or share it for cross-context behavioral advertising. This marketing website has no advertising pixels, analytics scripts, or mailing-list forms. Infrastructure providers may still process technical request information.

4. Service providers and sharing

We use Clerk for authentication, Convex for backend storage and synchronization, RevenueCat for subscription management, and Apple for App Store purchases and platform services. Vercel hosts this website; Cloudflare provides domain and support-email routing services. Support email is handled through our email provider, Google.

Catalog and market information comes from third-party sources, including Rebrickable and BrickEconomy. Requests for their data and images may expose technical request information to those providers. We share information with service providers as needed to operate Brickroll, with members of inventories you choose to share, when legally required, to protect rights and safety, or as part of a business transfer subject to appropriate protections.

5. Shared inventories

Members of a shared inventory can see and manage the collection information in that inventory. Leaving or deleting your account removes your membership; it does not remove shared content retained for other members. Do not put sensitive personal information in inventory names or labels.

6. Retention and deletion

We keep personal information while needed to provide the service and for legitimate security, support, accounting, and legal purposes. In-app Account → Delete My Account removes your personal inventory data and shared inventory memberships from the app backend. Authentication records held by Clerk, purchase records held by Apple or RevenueCat, backups, and support correspondence may persist separately. Contact support@brickroll.app for a broader deletion request. We retain only information needed for applicable obligations, resolving disputes, security, or other permitted purposes, and backups expire through provider retention processes. Deleting your account does not cancel an Apple subscription.

7. Your choices and rights

You can update collection data in the app, manage camera permissions in iOS Settings, and manage subscriptions through Apple. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to processing, withdraw consent, or appeal a decision about a privacy request. Email support@brickroll.app to exercise these rights. We may verify identity, and will respond within applicable legal time limits without discriminating against you for exercising your rights. You may also complain to your local privacy regulator.

8. Security and international processing

We use reasonable technical and organizational safeguards, including authentication and encrypted connections. No service can guarantee absolute security. Information may be processed in the United States and other countries where our providers operate. Where required, applicable transfer safeguards are used.

9. Children

Brickroll is intended for users aged 13 and older and is not directed to children under 13. If local law requires a higher age for consent, that requirement applies. If you believe a child has provided personal information without appropriate authorization, contact support@brickroll.app so we can investigate and remove it where required.

10. Changes and contact

We may update this policy as the service changes and will revise the date above. For material changes, we will provide additional notice where required. Contact McMurry Ventures LLC, United States, at support@brickroll.app for privacy questions or requests.