Privacy Policy
Roulo
Privacy Policy — Roulo
Last updated: 17 September 2026
Summary
Your lists and draws are stored on your iPhone and are never sent to a server belonging to the developer. One exception, detailed below: anonymous usage measurements, used to understand how the app is used and to improve it. Roulo requires no account and does not use iCloud.
1. Who we are
Roulo is an iOS mobile application for random picking (names, teams, presentation order, wheel, dice, coin flip, numbers), published by Alexandre Paul, an independent developer.
2. Data collected
The data you enter stays on your device only:
| Data | Storage | Purpose |
|---|---|---|
| List names ("My class", etc.) | SwiftData (local) | Reuse a list |
| List members (first names or labels you enter) | SwiftData (local) | Perform draws |
| Draw history (type, result, date) | SwiftData (local) | Fairness record, review |
| Preferences (haptics, sound, animation duration, default presentation mode) | UserDefaults (local) | Remember your settings |
In addition, anonymous usage measurements are sent to PostHog:
| Data | Storage | Purpose |
|---|---|---|
| Screens viewed, actions taken (draw performed, list created, result shared, paywall shown, purchase), app version, device model, iOS version, approximate country derived from the IP address | PostHog, hosted in the European Union | Understand how the app is used and improve it |
3. Data not collected
Roulo does not collect:
- Your GPS location
- Your advertising identifier (IDFA), and no advertising tracking
- Your name, email address or any data that identifies you
- The content of your lists and draws: usage measurements record that a draw took place and how many people the list contained, never the names it contains; in the session recordings described below, those names are masked on your device before sending
4. Network
Roulo has no server and no account of its own. The app only communicates with:
- PostHog (usage measurements,
eu.i.posthog.com, hosted in the European Union): pseudonymised events tied to a random identifier generated by the app and never linked to your identity. No advertising tracking: the app manifest declaresNSPrivacyTrackingasfalse. - The App Store: purchase, renewal and restore of Roulo Premium, handled by Apple.
Roulo does not use iCloud: your lists are not synced across your devices by the app. They may however be included in your iCloud or iTunes/Finder backup if you enabled that iOS feature, which falls under Apple's privacy policy.
5. System permissions
Roulo requests no system permission: no access to camera, photos, microphone, location, contacts or notifications.
6. Trackers and advertising
No advertising tracker, no ad network, no sale of data. PostHog is used solely for product analytics, never for advertising targeting or cross-app tracking.
7. Rights (GDPR)
Your lists and draws stay on your device: you can view, edit and delete them directly in the app, and uninstalling erases all local data.
Usage measurements rely on the developer's legitimate interest in improving the app. The processors are PostHog (product analytics, hosted in the European Union) and Apple (App Store). To request deletion of the usage measurements associated with your device, write to alexandre-paul@outlook.com.
8. Subscription
Roulo is free for up to 2 saved lists and 5 draws kept in history. Roulo Premium removes those limits. Payment, renewal and refunds are handled by Apple, which never shares your payment details with the developer. Renewal terms are set out in the Terms of Use.
9. Minors
The App does not specifically target minors. Its typical use (classroom, club) means lists may contain pupils' first names entered by the teacher or group leader; that data stays entirely on the adult user's device and is never sent to PostHog.
10. Compliance
This app complies with:
- The GDPR
- Apple's App Store Review Guidelines regarding privacy
- The
PrivacyInfo.xcprivacyfile, which declares the collection of product interaction data for analytics purposes, not linked to your identity and without advertising tracking
11. Changes
Any substantial change to this policy will be reflected by updating the date at the top of this document and, where relevant, communicated through the App Store release notes.
Session recording (screenshots with masking)
Since September 2026, Roulo may record usage sessions through PostHog, to understand where people get stuck in the app.
- What it is: a series of screenshots of the app screen, replayed like a video, with the places that were tapped. No audio, no camera, no content from other apps. Nothing is recorded while the app is in the background.
- What is masked: your list names, participants, teams and draw results. Masking is applied on your device, before sending: these never appear in a recording.
- Hosting and retention: PostHog servers in the European Union, kept for 30 days, then deleted automatically.
- Identification: the recording is tied to the same random identifier as the other usage metrics, which cannot identify you.
12. Contact
For any question about this policy: alexandre-paul@outlook.com.