Privacy Policy

Who we are

Reroll (the website at meetreroll.com, the app at app.meetreroll.com and the AI friend you text) is run by MissionMind SAS (RCS Paris 931 787 980), 14 rue Bausset, 75015 Paris, France ("we", "us"). We decide how your personal data is used, which makes us its controller under the EU's General Data Protection Regulation (GDPR). This policy explains what we collect, why, and the choices you have. It works alongside our Terms.

What we collect

When you sign in

You sign in with your phone number, by texting a code to Reroll from iMessage. We store your phone number, whether it has been verified, and when you confirmed you're 18 or older and accepted the Terms. While you're signed in we keep a session, which records the IP address and browser that opened it.

Messages in chats with Reroll

When Reroll is in a conversation, one-to-one or in a group, it receives every message sent there so it can follow along and reply. For each message we store the text, who sent it (their phone number or Apple ID email, as iMessage shows it) and when. If someone shares a photo and Reroll needs it to reply, we keep that file too.

This covers everyone in the chat, not only the person who added Reroll. When Reroll joins a group, its first message says what it is, that it reads the chat, and links to this policy.

Personas and what they learn

Each persona Reroll plays has a generated profile (a name, personality and look) and an avatar image. As it talks with your group it keeps short notes, such as running jokes, topics people enjoy or want to avoid, and what the group liked or disliked about past personas. These notes are what let a rerolled persona come back better. They can include things people said about themselves in the chat.

Payments

Subscriptions are sold by Polar, our merchant of record. Polar collects your payment details and billing information under its own privacy policy. We receive what we need to run your subscription: which group it covers, who pays, the plan, its status and your email address. We never see your full card number.

Waitlist

If you join the early-access list, we store your email address and which form you used.

Technical data

Our hosting provider, Cloudflare, processes the IP address and request details of every visit to deliver the site and protect it from abuse. We also log how much AI processing each reply and image costs, so we can enforce each group's monthly allowance.

How we use it

• To run Reroll: sign you in, read and reply to messages, create personas, run kill polls and carry lessons into the next persona.
• To bill subscriptions and track each group's usage allowance.
• To keep Reroll safe: check replies for harmful content, prevent abuse and enforce our Terms.
• To fix bugs and improve how Reroll behaves.
• To email you about early access, if you joined the waitlist.

We don't sell or rent personal data, we don't show ads, and we don't use your messages to train AI models.

Legal bases (for people in the EU and UK)

We process data to perform our contract with you (running the service you signed up or pay for), for our legitimate interests (running Reroll in groups that invited it, which includes reading messages from members who haven't signed up, keeping it safe and improving it), to meet legal obligations (such as keeping billing records), and with your consent where we ask for it (such as the waitlist).

Who helps us run Reroll

We share data only with the companies that provide parts of the service, under contracts that limit them to doing that work for us:

• Photon (photon.codes) carries messages between iMessage and Reroll.
• OpenAI receives recent messages and the group's notes to write replies, generates persona profiles and avatars, and screens content for safety. Under OpenAI's API terms, this data is not used to train its models. OpenAI may keep it for up to 30 days to monitor for abuse, then deletes it.
• Cloudflare hosts our website, app, database, file storage and background jobs.
• Polar processes payments as our merchant of record.

If we add a provider, for example to make persona videos, we'll update this list first. We may also disclose data when the law requires it, to protect people's safety, or as part of a sale or merger of our business, in which case this policy keeps applying to it.

How long we keep it

• Message text: 30 days, then deleted automatically.
• Persona profiles, avatars and the group's notes: while Reroll is in the group, and deleted when it's removed for good or when you ask.
• Your account: until you ask us to delete it.
• Billing records: as long as tax and accounting laws require.
• Waitlist emails: until launch, or until you ask to be removed.

How we protect it

Everything travels over encrypted connections. Message text is also encrypted in our database, with a separate key for each persona, so a copy of the database alone can't be read. Only the persona that's currently alive in a chat can read that chat's messages. Access to production systems is limited to the people who run Reroll. No system is perfectly secure, but we'll tell you and the authorities without undue delay if a breach puts your data at risk.

Your choices and rights

• Stop it reading: remove Reroll from the chat. Killing a persona isn't enough, since a new one takes its place. Reroll only ever sees chats it's in.
• Delete your data: email us from, or mentioning, the phone number or Apple ID you use in iMessage, and we'll delete your messages, the notes about you and your account. This works whether or not you ever signed up.
• Access, correct or export: ask us for a copy of your data, or to fix it.
• Object or restrict: ask us to stop a particular use of your data.

Email contact@missionmind.fr. We answer within 30 days and may need to confirm the request comes from you. Depending on where you live, such as California, other US states with privacy laws, the EU or the UK, these are legal rights, and we won't treat you differently for using them. In the EU you can also complain to your data protection authority; ours is France's CNIL.

Where your data is processed

We're based in France and our providers operate in the United States and other countries. When data leaves the European Economic Area, we rely on safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Cookies

The website at meetreroll.com sets no cookies. The app at app.meetreroll.com sets only what sign-in needs: a cookie that keeps you signed in and a short-lived one that tracks a sign-in in progress. We use no advertising or analytics cookies.

Age

Reroll is for adults. You must be 18 or older to sign up or add Reroll to a chat, and we don't knowingly collect data from children. If you believe a child under 13 has used Reroll or is in a chat with it, contact us and we'll delete their data.

Changes

We'll update this page when our practices change and change the date at the top. If a change matters, we'll tell signed-up users before it takes effect.