Roll Hippo for iOS and Android · last updated 7 August 2026
Roll Hippo collects no data about you, and sends none anywhere. There is no account to make, no sign-in, no analytics, no crash reporting, no advertising, no advertising identifier, no tracking of any kind, and no update check. Nothing you do in the app is transmitted, because the app has no way to transmit anything.
That is not a policy decision that could quietly be reversed in a later
build without you noticing. The Android release package is built
without the INTERNET permission, so the
operating system itself would refuse a network connection the app tried to
make; and there is no networking code in the app to make one. Roll Hippo
works with the SIM removed and in aeroplane mode, and behaves identically.
Three things are saved on your device, in the app's own private preferences, by the phone's standard settings storage:
That is the whole list. None of it identifies you, none of it leaves the device, and there is no backup service, sync service or cloud account behind it. It is included in your phone's own encrypted device backup only if you have that turned on, which is between you and Apple or Google. Deleting the app deletes all of it.
Roll Hippo asks for camera access for exactly one feature: reading a QR code that somebody else's copy of the app is showing, so that their dice set-up becomes yours.
The accelerometer and gyroscope are what make the app work: they are the gravity and the shake inside the tray. Their readings are used in the frame they arrive in and discarded. They are never recorded, never stored, and never sent.
You can turn motion control off in Settings, after which the app does not read them at all and the Throw and Draw buttons do the whole job.
Roll Hippo is suitable for all ages and collects no personal information from anybody, of any age. There is no chat, no user-generated content, no social feature, no link out to a store, and nothing to purchase — there are no in-app purchases and no advertising.
It is a utility that produces random numbers with a physical interaction. It is not a gambling app: there is no wagering, no currency, no stake, and no casino.
The app is built with Flutter and includes a small number of open-source
packages: sensors_plus (the accelerometer and gyroscope),
mobile_scanner (the QR scanner's camera),
qr_flutter (drawing the QR code),
shared_preferences (the settings storage above),
vector_math and cupertino_icons.
None of them is an analytics, advertising or attribution SDK, and none
contacts a network on the app's behalf. The full list, with versions, is in
pubspec.yaml,
and the whole app is
open source
— so none of this has to be taken on trust.
Downloading Roll Hippo is a transaction with Apple or Google, not with us. They record the download, and they may give us aggregate statistics — numbers of installs by country, say — along with crash reports if you have chosen to share those with the platform. None of that is collected by the app, none of it identifies you to us, and it is governed by Apple's privacy policy and Google's rather than by this statement.
Rights to access, correct, export or erase personal data all presuppose that somebody holds some. Nobody here does: there is no server, no database and no account, so there is nothing to request and nothing for us to delete. The data described above is on your device, under your control, and goes when the app does.
If Roll Hippo ever does something this page does not describe, this page will be updated in the same release that changes it, and the date at the top will say so. Previous versions are in the file's history, which is public — this page is written in the app's own repository, so its wording is versioned alongside the code it describes.
Questions about any of this belong in Roll Hippo's GitHub issues, where the answer is useful to everyone rather than to one inbox.
This statement covers the app. The website you are reading it on is covered by the Hippo Herd privacy page, which collects nothing either.