Trust

Built around on-device intelligence.

Rollup analyzes and indexes the camera roll on-device. Original photos and videos stay there.

Remains on the device
  • original photo and video pixels
  • raw camera-roll browsing
  • precise local media identifiers
  • OCR and sensitive image-level details used locally
  • local semantic and media index
  • local face clusters and other private image-level representations

A context API, not a media API#

This boundary applies to Rollup’s server-side context services. They do not provide photo downloads, remote camera-roll browsing, arbitrary retrieval of individual media, or reconstruction of a user’s full camera roll.

Profile can describe a recurring food affinity; Query can answer a question about travel preferences. Evidence counts support these inferences without giving your backend references to the source images.

The on-device SDK separately supports local media retrieval through search(). Results remain local and refer to moments and assets the host app is authorized to access. They do not become a browsable remote copy of the user’s camera roll.