Legal · Privacy

Privacy, plainly.

Last updated: July 16, 2026

RollCall — operated by RollCall - NightLife, Inc., a Delaware corporation — helps you see where the night's at, coordinate with your crew, and buy cover at venues. This policy explains what we collect, why, and the choices you have.

Information we collect

You give us

Profile: the display name and emoji you choose. If you sign in with Apple, we receive a private identifier (and your name once, if you share it).
Your crew & activity: the friends you add by referral code, the rallies you start or join, and the venues you save for later.
Your nights: your check-in history, the friends you tag as "with you" on a night, and your one-tap morning ratings — used as a venue-quality signal and to understand whether the nights we helped you find were actually good ones. Venues only ever see aggregate scores, never an individual rating.
Night gallery photos: photos you choose to share to a night's gallery are uploaded and shown only to the people you were with that night — you control per-photo visibility and can delete your photos anytime. Matching your camera roll to a night happens on-device; nothing is uploaded unless you share it.
Support messages: if you message support (from the app or this site), we keep your message and the reply address you give us, just to help you.
Safety actions: if you block or report someone, we keep that record to keep the community safe.
Venue partners: if you list a venue, the contact details you provide (name, role, phone, email) so we can verify the venue and reach you about payouts and support. These are kept private to you and the RollCall team and are never shown in the app.
Venue room scans: when a venue posts a room scan (a photo or short clip of how busy it is), we process it to read the crowd level and headcount and show that live in the app. That reading is performed by our AI vision provider, Anthropic, which processes scan images on our behalf as a service provider; under its API terms, Anthropic does not use this data to train its models. We also use these scans, and the crowd counts derived from them, to build, train, and improve RollCall's own crowd-detection models so the read gets more accurate over time. Scans expire from the live page automatically, a venue can delete a scan, and we take reasonable steps to avoid singling out identifiable individuals when scans are used to improve our models. Our vision pipeline counts, never identifies: no facial recognition, no tracking of any individual — ever. Raw scan clips are deleted from our storage after 90 days; only the aggregate counts and charts derived from them are kept.
Venue walkthroughs: a venue owner records a one-time walkthrough video of their space so we can build their room map. Walkthroughs are captured without audio, are never visible to other users, and are analyzed the same counting-only way as scans.
Venue staff & texts: if a venue owner adds you to their scan roster, they give us your name and mobile number so we can text you shift links. Before anything else, we text you once to ask — nothing more arrives unless you reply YES, and STOP always works, immediately and permanently, even if the venue re-adds your number. We keep a record of your yes or no (that record is how we make sure a no sticks). Messages are delivered by Twilio. We never use staff numbers for marketing.
Purchases: when you buy cover, our payment processor (Stripe) handles your card details — we never see or store your full card number. We keep a record of the purchase (venue, amount, time, status).

Collected automatically

Precise location: while you're using the app, to show venues near you, measure distance, and confirm you're actually at a venue when you check in. We use it only while the app is in use (never in the background) and never sell it. You can turn it off in iOS Settings.
Check-ins: the venue you check into (visible only to your friends — or no one, in Ghost mode). Checking in is always a choice you make, night by night — we ask before your first one, and check-ins expire on their own within hours. Your own check-in history stays in your Nights tab (and our records) until you delete your account — that history is yours, and venues only ever see anonymous aggregate counts, never who was there.
Usage analytics: how you use RollCall, tied to your account — the venues you're shown and open, when you check in and head out, and purchases you make — to understand and improve the product, fix what's broken, and measure whether features like deals actually work. This stays first-party: it is never sold, never shared with advertisers, and never used to track you across other apps. Raw records are deleted on a fixed schedule, and when you delete your account they are removed from our live systems right away and from our analytics reporting within days. Ghost-mode check-ins never enter these records with a venue attached — we keep only the fact that a ghost check-in happened, never where.
Notifications token: a device token so we can send you crew/deal alerts.
Waitlist email: if you join the launch waitlist on our website, we keep the email you enter solely to tell you when RollCall opens in your city. We don't sell it or use it for anything else, and you can ask us to delete it any time.

How we use it

To run the core experience: nearby venues, live crowd, your crew, rallies, your nights, and cover passes.
To read how busy a venue is from its room scans, and to build, train, and improve RollCall's own crowd-detection models from those scans and the headcounts derived from them.
To process cover purchases and issue your pass.
To send notifications you've opted into.
To keep the service safe, prevent abuse, and improve features.

What we share

With your friends: your name, emoji, and current check-in (unless you're in Ghost mode). Strangers never see your location.
With your night circle: photos you share to a night's gallery are visible only to the people tagged on that night — and only the ones you've allowed per photo.
With venues: only aggregate signals (how many people are there now) — never your identity. When you redeem a pass, the venue confirms that pass is valid.
Service providers: Google Firebase (hosting, database, notifications), Stripe (payments), Anthropic (AI reading of venue scans, as described above), and Twilio (staff shift texts). They process data on our behalf under their own terms.
We do not sell your personal information.

Your choices

Ghost mode: count toward a venue's crowd anonymously without sharing where you are.
Per-photo visibility: choose exactly who can see each photo you share — or delete it.
Location & notifications: control both in iOS Settings at any time.
Delete your account: Profile → Delete account removes your profile, crew, check-ins, nights, shared photos, and passes from our systems.
Your data rights: depending on your state, you may have legal rights to access, correct, or delete your data — and we honor deletion for everyone regardless. For anything you can't do in the app, email support@rollcall.bar.

Data retention

We keep your information while your account is active. When you delete your account, we remove your personal data; we may retain limited purchase records as required for tax, accounting, or dispute resolution.

Age

RollCall is intended for adults of legal nightlife age (21+). It is not directed to children.

Security

Data is encrypted in transit, access is locked down server-side, and we keep only what the product needs. If we ever have a security incident that affects your data, we'll tell you what happened, what it means, and what we did — promptly and plainly. Security researchers: see /.well-known/security.txt.

Changes

We'll update this page and the "last updated" date when this policy changes.

Questions or requests about your data? Contact support@rollcall.bar — a human reads it.