Last updated: July 18, 2026
Rollfork is a local-first app. The short version: we do not collect, store, transmit, or sell any of your data. Everything you do in Rollfork stays on your device.
None. Rollfork has no user accounts, no analytics, no advertising, no crash reporting, and no server of its own. The Android release build does not even request network permission.
Your pantry inventory, recipes you create (including photos you attach), favorites, quest history, shopping list, settings, and local statistics are stored in a private database on your device. They are included in your device's standard app storage and are deleted when you uninstall the app or use the in-app "Erase all local data" control.
Rollfork asks for camera or photo-library access only when you choose to scan a grocery receipt or attach a photo to a recipe. Receipt text recognition runs entirely on your device using on-device machine learning; receipt images are processed locally and temporary copies are deleted after scanning. No image or recognized text ever leaves your device.
You can export a backup file of your data at any time. The file is created locally and shared only where you choose to send it (for example, to your own cloud drive). Rollfork never uploads backups anywhere itself. Automatic operating-system backups of app data are disabled on Android.
Optional cosmetic items (dice skins and themes) are one-time purchases processed entirely by the Apple App Store or Google Play. Rollfork never sees your payment details. Purchases can be restored through the platform store on any of your devices.
Rollfork does not collect data from anyone, including children, and contains no ads or external links to social features.
If a future version of Rollfork ever changes how data is handled, this policy will be updated and the "Last updated" date revised before that version is released.
Questions? Email lcarrico827@gmail.com.