SDK
Consent should be understandable before it is technical.
Rollup’s permission flow tells users what the integration is doing before iOS asks them for access to Photos.
What Rollup looks at
Photos and videos the user chooses to make available to your app.
Why
To derive context or retrieve local moments for the feature the user is enabling.
What your server receives
Derived Profile context and structured Query answers for your application’s use case.
What it does not receive
A browsable copy of the user’s camera roll.
If your feature uses search(), explain that the host app receives local moment or media references within its Photos access. Limited access restricts the library Rollup can index and search. Local retrieval does not grant a server access to the camera roll.
Recommended product behavior#
- Explain the user benefit before requesting Photos access.
- Do not make photo access appear mandatory if the feature can function without it.
- Provide a clear path to disconnect Rollup.
- Update the experience when context is unavailable or still incomplete.
Privacy
The disclosure copy is yours to write in your product’s voice. Rollup requires that it names what is looked at, why, and how to disconnect.