Privacy Policy — PicPop

Last updated: 26 October 2026

This policy explains what PicPop (formerly Gallery Roulette) collects, why, who else handles it, and how long it is kept. It covers both the iPhone app and the Android app. Where the two differ, the text says On iPhone or On Android.

PicPop is a party game: 2–8 players join a room with a code, each player adds photos or videos from their own library, and everyone guesses whose picture is on screen.

1) Who we are

• Controller: Hareza Apps, the business of Yauheni Babanin (Polish sole proprietorship), Sandomierska 15/16, 02-567 Warsaw, Poland
• Contact: galleryrouletteapp@gmail.com
• Data protection officer: not appointed

There are no accounts in PicPop. You do not give us an email address, a phone number or your real name.

2) What we collect

2.1 What you give us

• A nickname. It is shown to the other players in your room. It does not have to be your name.
• The photos and videos you approve for a game. Only these leave your phone (see section 3).
• Your guesses and how fast you made them, which decide the scores everyone sees.

2.2 What the app records automatically

• An anonymous player ID. When you first open the app it signs in anonymously with Firebase Authentication, which creates a random ID. It is not linked to your name, email or phone number. It identifies you inside a room and in crash reports.
• Room data: the room code, who the host is, the game mode and number of rounds, which photo belongs to which player, each round's answers and the scores.
• Usage events: for example app opened, screen viewed, game created, round played, paywall shown, subscription bought. These come with device and app details (model, operating system and app version, language, country derived from your IP address), the room code and whether you are host or guest, and an analytics ID generated on your device. We use them to see which parts of the game work and which don't. We do not send your nickname, your photos or your guesses to analytics.
• Crash reports: when the app crashes, a report with the technical state of the app, the device model and OS version, and your anonymous player ID, so a crash can be matched to the game it happened in.
• Purchase information: which subscription you have, whether it is active, and its renewal dates. Payment itself is handled by Apple or Google; we never see your card or billing details.
• Network type (Wi-Fi or mobile data) and whether battery or data saving is on, used on the device to decide how many uploads to run at once, and included in some usage events.

2.3 What stays on your phone

• Your nickname, your settings (sounds, haptics, onboarding done), and a list of which library items you have already used in earlier games, so new games suggest different ones. This list holds only the phone's internal IDs for those items, never the pictures. We never upload it; On Android it can be included in your phone's own Google backup if you have backups turned on.
• On iPhone a weekly “game night” reminder may be scheduled on the device if you allow notifications. It is a local notification; we do not collect a push token.

We do not collect your precise location, contacts, camera, microphone, health data or any account credentials.

We do not sell your data, and we do not show third-party ads.

3) How your photos and videos are handled

• Library access. To suggest a random set for each game, PicPop reads your photo library on your phone, after you allow access. On iPhone this uses the Photos permission (full or limited access). On Android it uses the “photos and videos” permission (or only the items you select, on Android 14 and later). Browsing the library and building suggestions happens entirely on the device; nothing about the rest of your library is uploaded.
• You approve what is shared. Only the photos and videos you confirm for a game are uploaded.
• Copies, not originals. Each photo is re-saved as a new, smaller JPEG before upload. Re-saving drops the information cameras embed in a photo file, such as where and when it was taken and the camera model. Each video is cut to a short clip (about 6 seconds) and re-encoded at a lower resolution. Re-encoding also removes where the video was recorded and other personal details from the clip.
• Who sees them. The uploaded copies are stored with Google Firebase and shown to the players in your room during that game. Other players can see your pictures on their screens, and, like anything shown on a screen, could photograph or screenshot them. Only play with people you trust with those pictures.
• No public gallery. We do not publish your content, use it for advertising, or use it to train any model.
• iCloud (On iPhone). If a photo you approve is only in iCloud, the app asks iOS to download it to your phone first, as the Photos app would.

4) How long data is kept

Gameplay data, including the photos and videos you share in a room, is kept only as long as necessary to run the game, then deleted. Analytics, diagnostics and purchase records are kept as long as needed for operations and to comply with the law.

5) Why we use your data (legal bases)

• To run the game — rooms, nicknames, uploads, rounds, scores. (Contract: you asked to play.)
• To provide subscriptions — unlock Premium and restore it on your devices. (Contract.)
• To fix crashes and improve the game — crash reports and usage events. (Legitimate interests.)
• To measure where installs come from — On iPhone, attribution through Adjust; using the advertising identifier for this requires your permission. (Legitimate interests; consent for the advertising identifier.)
• To meet legal duties — tax and accounting records for purchases. (Legal obligation.)

6) Who else handles your data

We use these service providers. They process data on our behalf, under their own data-processing terms.

• Google Firebase (both apps) — anonymous sign-in (Authentication), the game database (Cloud Firestore), photo and video storage (Cloud Storage), crash reports (Crashlytics), usage events (Google Analytics for Firebase) and feature settings (Remote Config). Firebase privacy · Google Privacy Policy
• Amplitude (both apps) — product analytics; our projects are hosted in Amplitude's EU data centre. Amplitude privacy notice
• RevenueCat (both apps) — keeps track of your subscription status across purchases and restores. It receives purchase receipts and an anonymous ID generated by RevenueCat. On iPhone it also receives device identifiers (the vendor identifier, IP address, the Adjust ID, and the advertising identifier only if you allowed tracking), to tie subscription revenue to install campaigns. RevenueCat privacy policy
• Adjust — install attribution and invite links. On iPhone the app includes Adjust, which receives device and network information (including IP address) when the app is installed and opened, and the advertising identifier only if you allowed tracking. On both, PicPop invite links are Adjust links, so Adjust receives the device and network information of whoever opens one (on any phone or computer). Adjust privacy policy
• Apple (On iPhone) — App Store purchases and subscriptions (StoreKit), the in-app rating prompt. Apple Privacy Policy
• Google Play (On Android) — Play Billing for purchases and subscriptions, and the Play in-app review prompt. Google Privacy Policy

Some of these providers process data outside the EEA and the UK, including in the United States. Where they do, transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

7) Advertising identifiers and tracking

• On iPhone the app asks for permission to track (App Tracking Transparency) when it first starts. If you allow it, Adjust, Google Analytics for Firebase and RevenueCat may read the advertising identifier (IDFA) to measure which campaigns lead to installs and subscriptions. If you decline, the IDFA is not available to the app. You can change this any time in Settings → Privacy & Security → Tracking.
• On Android Google Analytics for Firebase can read the device's advertising ID for analytics. You can reset or delete it in Settings → Google → Ads (or Settings → Privacy → Ads, depending on your phone); once deleted, apps no longer receive it.
• We do not show ads and do not sell or share your data with advertisers.

8) Children

PicPop is not directed at children under 13, and we do not knowingly collect personal data from them (or from children under the age of digital consent in your country, which is up to 16 in parts of the EU). If you believe a child has used PicPop and shared data, email us and we will delete it.

9) Your rights

Depending on where you live (for example under the GDPR in the EU/UK), you can ask to access, correct or delete your data, to restrict or object to how we use it, to receive a copy of it, and to withdraw consent you gave. You can also complain to your data protection authority (in Poland, the UODO).

To ask for deletion, or for anything else here, email galleryrouletteapp@gmail.com. Because there are no accounts, it helps to include the room code(s) you played in and your nickname, and roughly when; we will reply within 30 days.

You can also limit what is collected yourself: turn off photo access or tracking in your phone's settings, reset the advertising ID, or delete the app.

10) Security

Data travels encrypted (TLS) between the app and our providers, and access to our Firebase project is restricted to us. No system is perfectly secure, so please share only pictures you are comfortable showing to the people in your room.

11) Changes to this policy

When we change this policy we update the “Last updated” date above. If a change matters (for example a new kind of data or a new provider), we will also say so in the app or the store listing.

12) Contact

Hareza Apps (Yauheni Babanin)
Sandomierska 15/16, 02-567 Warsaw, Poland
Email: galleryrouletteapp@gmail.com