Privacy Policy for the Roliup iOS App

Scope: This privacy policy applies to our ad-free iOS app Roliup (io.agnaes.roliup.app) with both of its game modes, 2D and 3D, hereinafter referred to as “APP”. The APP is free. A one-time in-app purchase “Roliup Deluxe” permanently unlocks all content (see § 4 paragraph 3).

It does not apply to the Android app Roliup: that one is ad-financed in its free scope and is covered by the privacy policy of the ad-financed app. (The iOS app of the same name, “Roliup”, is ad-free and is covered by this policy; on both platforms the one app carries the free scope and the unlockable content together.) Nor does it apply to this website: visits to the agnaes.io website are governed by the privacy policy of this website.

Overview of our privacy policies:

  • Website agnaes.io – applies to visits to this website
  • Social media – applies to our profiles on Instagram, TikTok and Reddit
  • Roliup (Android) – applies to the ad-financed app
  • Roliup (iOS) (this policy) – applies to the ad-free app

Data protection at a glance

The APP does not collect, store or transmit any personal data to us or to third parties. It contains no advertising, no analysis or tracking tools and no user account. The APP itself contains no function that sends data to us or to third parties; the only outward connection is made by your device's app-store service for the optional in-app purchase (see § 4 paragraph 3). All game data (game progress, settings, replay recordings) is stored locally on your device. The sole exception is the backup of your game data by the operating system into your own iCloud with Apple, so that you can restore it on a new device; we have no access to it (see § 4 paragraph 2).

§ 1 General

We take the protection of your personal data very seriously and handle your personal data as confidential information, in compliance with the statutory data protection regulations and this privacy policy. This privacy policy explains the nature, purpose and scope of the data collection within the use of the APP. We herewith advise you that the transmission of data via the Internet (e.g., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

(1) Responsible party (“controller”)

The responsible party for the data processing within this APP is:

Agnaes Software - Karl Kegel
Dr.-Ing. Karl Kegel
Blasewitzer Straße 41
01307 Dresden, Germany

E-mail: web@agnaes.io
Website: https://agnaes.io
Phone: +49 151 72224722

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.). You can find our legal notice at agnaes.io/impressum.html.

(2) General storage duration of personal data

Unless otherwise specified or made more precise within this privacy policy, the personal data collected by this APP will be stored until you ask us to delete it, revoke your consent to its storage, or the purpose for the data storage lapses. If a statutory obligation to retain data or another legally recognized reason for storing the data exists (e.g., a legitimate interest or a statutory retention period), the personal data concerned will not be deleted before the respective reason for retention ceases to apply.

(3) Legal basis for the storage of personal data

The processing of personal data is only permitted if a valid legal basis for the processing of this data exists. If we process your data – which, within this APP, is only the case when you contact us yourself (see § 4) – we do so on the basis of your consent pursuant to Art. 6(1)(a) GDPR, for the fulfillment of a contract pursuant to Art. 6(1)(b) GDPR or on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, which are always weighed against your interests.

(4) Amendment of this privacy policy

We reserve the right to amend these data protection provisions at any time in compliance with the statutory requirements.

§ 2 Your rights

The GDPR grants data subjects whose personal data we process certain rights, of which we would like to inform you here:

(1) Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. An informal notification by e-mail is sufficient for this. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

(2) Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

(3) Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

(4) Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address given in the legal notice.

(5) Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address given in the legal notice. The right to demand restriction of processing applies in the following cases:

  • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

(6) Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

§ 3 Access permissions of the APP

The APP does not access any of your personal device data. In particular, it has no access to location data, contacts, your photo library, call lists, camera or microphone, and it does not establish an Internet connection of its own.

The APP asks you for a permission in one case only: when you choose to save a recorded gameplay video to your photo library, iOS asks once for permission to add media. This does not include, and does not perform, any read access to your existing photos and videos. There is no transfer of game progress between two apps on iOS – the free scope and the unlockable content live in the same app, and your progress simply continues after the in-app purchase.

In its 2D mode, the iOS app is controlled by tilting the device and reads the accelerometer for this purpose; in the 3D mode the sensor is not read. The sensor data is processed exclusively locally while playing and is neither stored nor transmitted.

§ 4 Data processing within the use of the APP

(1) No collection of personal data

The APP can be used without a user account and without providing any personal data. We do not collect, store or transmit any personal data in the course of your use of the APP; the APP contains no advertising, analysis or tracking tools. Game progress, settings and replay recordings are stored in the protected storage area of the APP on your device.

Video exports of game runs that you trigger yourself are placed by you in your device's photo library. For this, you give a one-time permission to add media (see § 3). Sharing achievement images and videos takes place exclusively via the operating system's share dialog with apps chosen by you and is entirely in your hands.

(2) Backup of your game data by the operating system

So that you can restore your game progress on a new device or after a reinstallation, it is backed up by a feature of the operating system into your own iCloud account with Apple. We have no access to these backups, and no personal data is processed in the course of it – only game data is backed up (level progress, times, coins, settings).

iCloud: In addition to storing it locally, the APP mirrors your game progress into the key-value store of your own iCloud (provider: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland). The synchronisation takes place solely between your device and your own iCloud account; the data is not transmitted to us and is not accessible to us. You can disable it for the APP at any time in the iOS settings under “iCloud”. The local copy on your device remains authoritative in every case. Replay recordings are not transferred to iCloud and remain exclusively local.

(3) Purchase via the App Store

The APP is free and contains exactly one in-app purchase: the one-time, permanent “Roliup Deluxe” unlock (no subscription, no consumables). Purchase and payment are handled entirely by Apple, including restoring the purchase on new devices via your App Store account. The APP only learns WHETHER the unlock is present. In this respect, Apple processes data relating to your account and your device as an independent controller. We receive no access to your payment data.

(4) Request by e-mail or telephone

If you contact us (e.g., by e-mail or telephone), your request, including all resulting personal data (e.g., name, request) will be stored and processed by us for the purpose of processing your request. These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of your consent (Art. 6(1)(a) GDPR) and/or on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR). The data sent by you to us via contact requests remain with us until you request us to delete them, revoke your consent to the storage or the purpose for the data storage lapses (e.g., after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected. We do not pass these data on without your consent.

§ 5 Hosting of this page

This privacy policy is provided as a page of the agnaes.io website. The processing that occurs when this page is accessed (e.g., server log files) is governed by the privacy policy of the website.

As of: October 2026