The Role · Your information

Privacy notice

Version 1.3 — last updated 4 October 2026

Privacy at a glance

This summary is for everyone, including people aged 13–17. The full notice below explains the details.

• Your journal is for you. Casting notes, reflections and feelings are never included in a shared profile.
• You can start without an account. Your journal saves on your device. Signing in does not turn on backup.
• Backup is your choice. It sends supported records and original media to your account only after both backup choices are recorded. Sensitive information about you needs your separate explicit consent.
• Adding a profile is not publishing it. Sharing is a separate adult-only choice. A published page can change when your visible profile edits sync, and visitors can keep copies.
• Under 18? You can use the journal and build a profile, but you cannot publish it or use Connections. A parent does not automatically get access to your journal.
• You have choices and rights. You can export records, stop uploads, pause sharing, request deletion or ask us a question. Withdrawing backup consent removes hosted backup copies once the server receives and completes the request, while keeping your device copy and sign-in account.
• Get help. Email support@therole.app or use our support and deletion page. Please leave out journal entries and sign-in codes.

Your journal and your profile

The Role is preparing for launch. This notice covers the website and the app features described below; online features are available only when enabled in your version. Public profiles and Connections remain subject to age and safety checks.

The Role helps you keep a casting journal and build a professional actor profile. You can use the journal on your device without an account. Your casting entries, notes, reflections and emotions are excluded from public profiles, Visitor Preview and information shown to Connections.

Adding information to your profile does not publish it. Where sharing is available, eligible adults can separately choose to publish a profile or share selected information with Connections. Once a profile is published, later changes to visible details can update the live page when they sync. Check your visibility and gallery settings before adding something you want to keep to yourself.

The Role is intended for people aged 13 or over. People aged 13–17 can use the journal, edit a profile and use available account backup, but cannot publish profiles or participate in Connections. A public profile link can be viewed without an account, including by younger visitors.

Who looks after your information

The Role is operated by SWEET CONCEPT LTD, registered in England and Wales, company number 15248049. Our registered office is 98 Station Road, Stanley, England, DH9 0JX.

SWEET CONCEPT LTD is the controller of the personal information used to operate The Role. Daniel Spencer handles support, privacy requests and safety reports. Email support@therole.app, or write to our registered office marked “The Role — privacy”. This notice covers The Role app and website.

Information we use

Profile playing age describes roles you may play; it is not your verified age. We do not collect a date of birth, identity document or biometric through our sharing-eligibility flow. We do not sell your journal or profile information. The app has no configured advertising or remote analytics SDK. Your personal progress summaries are calculated from your journal on the device; we do not use them to make employment, casting or health decisions about you.

Most information comes from you and your device. We also receive connection actions and reports from other people, and security/request information from our services. A professional name is required when you create a profile; the other professional details you add are your choice. The journal does not require a profile. An email address is needed for an account, and the adult-eligibility check is needed for publication and Connections; without them those features are unavailable.

Device use, backup and sensitive information

Records and supported media begin on your device. Choosing an available account backup sends supported journal/profile records and original photos or Voice Reel files to account storage. Signing in alone does not enable backup. Full backup requires two separate choices: agreement to account backup and explicit consent for sensitive personal information about you. After both are recorded, enabled backup can run automatically while you are signed in and online. Backup and publication are separate choices. Account storage is access-controlled; it is not end-to-end encrypted. Original files can contain embedded metadata, such as capture time, device details or location. We do not promise to strip metadata from original files. Check a file before adding it, particularly before sharing it.

We do not need you to record health, religion, sexual orientation, racial or ethnic origin, political beliefs, trade-union membership or other sensitive personal information to use The Role. Free text can nevertheless contain that information. Where we offer backup of sensitive information about you, we require your separate explicit consent for that processing. You can withdraw backup consent through Account & sync, stopping future backup uploads across your account once the server confirms withdrawal. An offline request stops uploads on that device and is retried when it reconnects; other devices may still upload until confirmation. Withdrawal queues removal of the hosted journal, profile and supported media. Recovery and sharing access close while that removal is pending. The server retries failed cleanup even if you close the app; backup cannot be enabled again until cleanup finishes. Because hosted sharing depends on the backed-up profile, this also removes its public profile, Role Code and Connections, including shared booking updates. The app explains this before you confirm withdrawal. Your journal and profile saved on this device and your sign-in account remain available. After removal you can make new backup choices; any device conflicts still need review. Previously issued media links can remain usable until their short expiry, and downloaded or exported copies cannot be recalled. Minimal consent/cleanup evidence and necessary moderation records have their separate retention purposes described below. Use Delete account to remove the sign-in account as well, or contact us about the affected information. Your consent cannot give us permission to process another person’s sensitive information; please keep that material out of account backup.

We use consent for optional backup and publication/sharing choices. For sensitive information this also requires the separate explicit consent described above. You can withdraw consent; withdrawal does not change the lawfulness of earlier processing. Pausing publication or connection sharing changes access, while account deletion removes the hosted account data. Turning off a feature or signing out does not by itself delete existing account records.

Our legitimate interests support account/service security, adult eligibility, proportionate abuse prevention and ordinary support: protecting people and operating a reliable service while limiting data use. We use legal obligation where required to respond to rights or regulatory requests. Necessary account administration and delivery of the service you request also use our legitimate interest in providing that service. Minimal consent/withdrawal evidence is kept to demonstrate and enforce your choices, under our accountability duties; it does not authorise continued backup of sensitive information after consent is withdrawn. If a legal claim requires information, we use the applicable legal-claims basis and safeguards. We do not use these interests to justify sensitive journal backup without a separate applicable condition.

Sharing and age checks

Public publication makes selected profile information available to anyone with the link. Connections receive the selected information you choose to share and the permitted booking signal. Visible profile fields are initially selected for preview, but a profile is unpublished until you choose to publish it. A local Visitor Preview is not itself a public page.

The first-run minimum-age choice stores a 13+ confirmation on your device, rather than your birth date. The separate adult check uses the age result provided by your Apple Account on a supported device.

Adult sharing requires both an adult range and Apple’s confirmed declaration source, with an account-bound App Attest integrity check. App Attest checks that the request comes from an authentic instance of the app; it does not establish who is holding a shared device. Self-declared, guardian-declared, under-18, declined, missing and unsupported results cannot qualify. The automated check determines access to sharing; it does not change access to your local journal. Contact us if a result seems wrong. We can investigate and explain the result; we cannot manually bypass the adult-eligibility rule.

Hosted eligibility lasts up to 24 hours. We store its deadline/check time and public integrity keys/counters, rather than the original age range or registration attestation as account records. Challenges are valid for five minutes. Those access deadlines do not mean the underlying rows are immediately erased. Account deletion removes these account-linked records.

If the device cannot contact the server when access is withdrawn, device access closes immediately, but hosted eligibility can remain until expiry or a successful revocation retry. Pausing sharing prevents new access through the service, but an already issued media link can work until its short expiry: up to one minute for connected media or five minutes for public media. We cannot recall someone’s downloaded copy. A later successful eligibility check does not republish your profile or restore previous Connections.

Providers, links and overseas processing

We use Supabase for account authentication, databases, private file storage and server operations. The account project’s primary region is London, UK. We use Vercel to serve the website. Email-delivery and support-mail providers process the addresses, message content and delivery information needed for their respective services. Providers receive information needed for their functions; access by our operator is limited to a support, security or legal need.

London is the primary account-storage region, not a promise that all processing stays in the UK. Supabase, Vercel and their subprocessors can process service, support and request information overseas, including in the United States and Singapore. Supabase's data-processing addendum describes its contractual safeguards, including the UK Addendum. Vercel's privacy policy describes its international processing; its data-processing addendum applies to eligible customer agreements. The safeguard that applies depends on the provider, processing and account agreement; these links are not a claim that every provider or plan uses the same contract. Contact us for the safeguards and recipients relevant to your information.

Profile previews use local showreel artwork and do not load YouTube thumbnails. In the app and on published web profiles, no YouTube player loads until you choose the showreel’s play control after reading the information in the profile’s showreel section. The video then plays inline in that section. Loading shares your IP address and browser/device request information with Google/YouTube, and the player may use cookies or other device storage. We use YouTube’s privacy-enhanced embed. The native app also uses an isolated player session; supported browsers also isolate the web player in a temporary frame, while other browsers apply their own session and storage controls. These controls do not make the visit anonymous or guarantee that no device storage is used. The choice lasts for that profile visit and video only; “Close video”, leaving the profile or putting the app/page in the background unloads it. Opening “Open in YouTube” starts a separate visit to that service. Google’s privacy policy applies to its processing. The legal and support pages themselves contain no advertising, analytics scripts, embedded YouTube players or third-party fonts. Opening an external link starts a separate visit to that service. External links, your calendar, and destinations you select in Save or Share also have their own practices.

Export and deletion

Export my data creates a JSON copy of your device-held journal and profile records, including recently deleted markers. It excludes original media files and account secrets. You choose where to save or send it. Calendar addition opens the device’s calendar editor for your confirmation and excludes private reflections and notes.

Deleting a casting entry hides it in Recently deleted. The hosted journal retention worker permanently removes eligible deleted account entries and their child events after the 30-day recovery period, on its next scheduled run. Device-only records and offline/device copies do not have that automatic purge: they can remain until removed through app/device controls. Device backups and exported copies have separate retention under your control.

Delete my account removes the hosted account and associated application records/media, then clears this device’s account copy. Other offline devices, your operating-system backups and copies you exported are separate. You can also use the external account-deletion instructions to request deletion without reinstalling the app; we check account ownership first. Signing out is different from deletion.

How long we keep information

If a legal duty or claim requires longer retention, we restrict the information to that purpose. We do not use recovery copies to restore a deleted account as an active service account. When a recovery is necessary, deletion requests must be reapplied before ordinary access resumes.

Your rights and complaints

Depending on the information and purpose, you can ask for access, correction, deletion, restriction or a portable copy. You can object to processing based on our legitimate interests. You can withdraw consent at any time. Contact support@therole.app; we normally respond to rights requests within one calendar month and explain any lawful extension or exception. We may need a proportionate ownership check before disclosing information.

Teenagers have their own privacy rights. A parent or other representative is not automatically entitled to the journal; we consider authority, understanding, confidentiality and the young person’s interests before responding.

If you have a privacy complaint, tell us what happened and what you would like resolved. We acknowledge privacy complaints within 30 days, investigate without undue delay and communicate progress and the outcome. You can also complain to the Information Commissioner’s Office.

Changes

We keep this notice available in the app and on the website. We explain significant changes when appropriate and obtain new consent where required before a new use begins.