Your privacy matters to LightRoll. This Privacy Policy explains how we collect, use, and protect information when you use the macOS app and the lightrollapp.com website. Please read it and contact us if you have questions.
Overview
LightRoll is a macOS app operated by SARL TEKAPP in France. It helps you review and organize your Apple Photos library on your Mac.
We design LightRoll around a local-first privacy model. Your photos and videos are analyzed on your device through Apple PhotoKit. We do not upload your photos, videos, filenames, album names, PhotoKit local identifiers, exact photo dates, file paths, or personal media metadata to our servers.
Your Photos Library
LightRoll requests access to your Photos library so it can analyze media sizes, show previews, update favorite state, and delete media that you explicitly confirm for deletion.
Scan metadata and triage decisions may be stored locally in the app sandbox on your Mac. This local cache is used to make the app faster and more useful. It is not transmitted to us.
Deletion is performed locally through Apple PhotoKit after confirmation in the app. PhotoKit deletion does not map to Cmd+Z undo in LightRoll, so you should review deletion batches carefully and keep backups of media that matters to you.
Product and Website Analytics
LightRoll may use PostHog for optional privacy-preserving product analytics when you enable analytics. These events are pseudonymous and help us understand whether core workflows are working, improve reliability, and prioritize product improvements.
Analytics events are designed to avoid personal media content and identifiers. We do not send PhotoKit local identifiers, filenames, album names, exact photo dates, file paths, user-entered content, or personal media metadata to PostHog.
Examples of analytics data may include app version, coarse interaction counts, feature usage, duration buckets, media type categories, error domains, and coarse size buckets.
The website may also use PostHog for minimal website analytics, such as page views, download clicks, feedback page visits, newsletter submission status, and marketing CTA clicks. Website analytics are designed to use low-cardinality event properties and do not include newsletter email addresses, email domains, survey free-text answers, or personal media metadata.
We do not use PostHog on the website for advertising, data broker sharing, or cross-site tracking.
Feedback Survey
LightRoll may provide an optional feedback survey during the beta. The survey may be opened from the website or from the macOS app.
Survey responses are voluntary. Please do not include private photo details, filenames, album names, or personal media information in your response. If you choose to provide an email address in the survey, we use it only to respond to your feedback or ask follow-up questions about LightRoll.
Data Processing Summary
| Processing activity | Data involved | Purpose | Legal basis | Recipients | Retention |
|---|---|---|---|---|---|
| Photos library access | Photos, videos, and media metadata read locally through Apple PhotoKit; local scan cache and triage decisions stored in the app sandbox | Provide the app’s local review, favorite, and deletion workflows | Performance of the service you request | None on TEKAPP servers | Stored locally on your Mac until you remove the app data, reset the relevant cache, or delete the app |
| Diagnostics | Crash reports and sanitized technical diagnostics | Maintain app security, stability, and reliability | Legitimate interest | Sentry | According to TEKAPP’s Sentry configuration |
| Product analytics | Optional pseudonymous product events and coarse usage metrics | Understand feature usage and improve LightRoll | Consent | PostHog | According to TEKAPP’s PostHog configuration |
| Website analytics | Page views, download clicks, feedback page visits, newsletter submission status, CTA clicks, source and entry parameters | Understand website conversion, improve the beta, and monitor reliability | Legitimate interest | PostHog | According to TEKAPP’s PostHog configuration |
| Feedback survey | Voluntary survey answers, optional contact email, source and entry parameters | Collect beta feedback and optionally follow up with respondents | Consent | PostHog | According to TEKAPP’s PostHog configuration or until feedback follow-up is no longer useful |
| Email updates | Email address, signup source, and language code | Send optional product updates and manage subscriptions | Consent | Cloudflare Worker and Mailchimp | Until you unsubscribe or withdraw consent, subject to Mailchimp suppression records required to honor unsubscribe requests |
| Website hosting and security logs | IP address, user agent, requested URL, timestamps, and similar technical request data | Operate, secure, and troubleshoot the website | Legitimate interest | Cloudflare | According to TEKAPP’s Cloudflare configuration |
Diagnostics
LightRoll may use Sentry for crash reports and non-fatal diagnostic events. Diagnostics help us find crashes, PhotoKit failures, cache failures, sync issues, and degraded states.
Sentry payloads are sanitized before they are sent and must not contain your photos, videos, filenames, album names, PhotoKit local identifiers, exact photo dates, file paths, or personal media metadata.
Email Updates
If you choose to sign up for product updates, we collect the email address you provide and may send it to Mailchimp to manage the mailing list.
Email signup is optional. Mailchimp may process your email address to provide double opt-in, delivery, and unsubscribe features. You can unsubscribe using the link included in those emails.
We do not send your email address, email domain, or a hash of your email address to PostHog or Sentry.
Website
The website at lightrollapp.com is a static website hosted on Cloudflare Pages. It does not require an account and does not process your Photos library.
Cloudflare may process basic hosting and security logs, such as IP address, user agent, requested URL, and request timing, to operate and protect the website.
The website may use PostHog to measure basic product and conversion signals, such as page views, download clicks, feedback page visits, and coarse newsletter signup status. Newsletter email addresses are not sent to PostHog.
Service Providers and International Transfers
We use a limited number of service providers to operate LightRoll and the website:
- Sentry for crash reports and diagnostic events.
- PostHog for optional product analytics, website analytics, and feedback surveys.
- Mailchimp for optional product-update emails.
- Cloudflare for website hosting, security, and the email signup Worker.
These providers may process data in countries outside the European Economic Area. When that happens, we rely on the safeguards made available by those providers, such as data processing agreements, standard contractual clauses, adequacy decisions, or equivalent transfer mechanisms where applicable.
Your Choices
You can enable or disable optional privacy-preserving product analytics in LightRoll Settings. Product-update emails are optional and can be unsubscribed from through Mailchimp’s unsubscribe flow. Feedback survey participation is optional, and you can choose not to provide contact information.
You can manage Photos library access for LightRoll in macOS System Settings.
Your Rights
Depending on the situation and applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability where applicable.
When processing is based on consent, you may withdraw that consent at any time. Withdrawing consent does not affect processing that already happened before withdrawal.
To exercise your rights, contact us at [email protected]. You may also lodge a complaint with the French data protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).
Changes
We may update this Privacy Policy when LightRoll’s features, telemetry, website, or legal requirements change. When we make changes, we will update the “Last updated” date on this page.
Contact
Questions about this Privacy Policy can be sent to [email protected].