Privacy Policy
Last updated: March 15, 2026
This Privacy Policy explains how SnapAction ("SnapAction," "we," "us," or "our") collects, uses, discloses, and protects information when you use the SnapAction mobile application, including its related share extension and in-app features (collectively, the "App").
By using the App, you agree to this Privacy Policy. If you do not agree, do not use the App.
1. Scope
This Privacy Policy applies to information processed through the App, including when you:
- import an image from your device;
- share an image into SnapAction through the iOS share extension;
- capture a photo in the App;
- analyze text extracted from an image;
- create calendar events or reminders from suggestions;
- submit feedback; or
- use a guest session or any future account-linked version of the App.
This Privacy Policy does not apply to third-party apps, operating system services, calendars, reminder lists, app stores, websites, or AI providers except to the extent we directly control the processing described here.
2. Information We Collect
Depending on how you use the App, we may collect and process the following categories of information.
A. Content You Import or Create in the App
- Images or photos you import, capture, or share into the App.
- Text extracted locally from those images using on-device OCR.
- Structured results generated from extracted text, such as detected entities, intent classifications, suggested actions, dates, prices, names, links, and other recognized content.
- Metadata stored with your imported items, such as file name, image size, dimensions, source type, and timestamps.
- Local action history related to created calendar events or reminders.
Based on the current implementation, SnapAction performs OCR on-device first. The App then sends extracted text, not the raw image itself, to a cloud analysis endpoint to generate structured AI results and suggested actions. If a future version uploads image content for any feature, we will update this Privacy Policy before or when that change takes effect.
B. Session, Account, and Identifier Information
- Anonymous guest user ID created through Supabase Auth.
- Installation identifier stored on your device for quota and usage tracking.
- Session tokens and related authentication state.
- Limited profile metadata synced to our backend, such as whether the session is anonymous, the authentication provider, a generated user label, and update timestamps.
At present, the App uses guest sessions by default. If we later enable non-anonymous sign-in methods, we may also process account details associated with those methods, such as email address, provider identity, or display name.
C. Feedback and Communications
- Rating, category, and message content you submit through the in-app feedback form.
- Associated context such as the screen or source from which feedback was submitted.
D. Usage and Service Data
- Number of analyses used.
- Whether your device is flagged for a subscription or unlimited analysis access.
- Usage limit configuration and synchronization timestamps.
- Limited technical and operational data needed to secure, deliver, and troubleshoot the service.
The current codebase does not include a third-party advertising SDK and does not send production analytics events to a dedicated analytics platform. Development/debug logging may still occur locally or in service logs as part of normal operation and troubleshooting.
E. Permissions and Device Access
If you grant permission, the App may access:
- Camera, to capture images for analysis.
- Photo library or media library, to import images you choose.
- Calendars, to create events you approve.
- Reminders, to create reminders you approve.
- Share extension data, when you share content into SnapAction from another app.
You can deny or revoke these permissions at any time in your device settings, but some features may stop working.
3. How We Use Information
We use information we process through the App to:
- provide the App's core image-to-action functionality;
- run on-device OCR and generate structured results from extracted text;
- create and manage guest sessions;
- store your imported items and history locally on your device;
- enforce free analysis limits and usage rules;
- submit and review product feedback;
- maintain security, detect misuse, and troubleshoot service issues;
- improve reliability, quality, and usability of the App; and
- comply with legal obligations and enforce our Terms of Service.
We do not use your information for cross-app advertising, and the current App configuration does not indicate any cross-app tracking for advertising purposes.
4. AI and Cloud Processing
The App currently uses a hybrid approach:
- OCR runs locally on-device.
- Extracted OCR text may be sent to our backend infrastructure and then to a configured AI provider to identify entities, classify intent, and generate suggested actions.
Based on the current implementation, SnapAction uses Supabase Edge Functions as the backend gateway for analysis requests. The configured AI provider may be:
- OpenAI; or
- OpenRouter, which may route requests to one or more supported model providers depending on our configuration.
This means text extracted from your images may be processed by third-party AI service providers. That extracted text may contain personal information, depending on the image content you choose to analyze.
We aim to send only the content reasonably necessary for the requested analysis. However, you should avoid using the App to process highly sensitive information unless you are comfortable with that information being handled by our service providers under their own terms and privacy practices.
AI-generated outputs can be inaccurate, incomplete, or misleading. You are responsible for reviewing any extracted information or suggested actions before relying on them.
5. Where Information Is Stored
On Your Device
Based on the current implementation, the App stores certain data locally on your device, including:
- imported/shared image files copied into the App's local storage;
- extracted text and structured analysis results associated with those items;
- action history;
- guest session state;
- local usage snapshots; and
- app preferences and related metadata.
On Our Backend or Service Providers
We also process limited information through hosted services, including:
- authentication and session management;
- profile synchronization;
- usage/quota records;
- feedback submissions; and
- cloud text analysis requests.
6. How We Share Information
We may share information in the following circumstances:
A. Service Providers and Infrastructure Providers
We may share information with vendors and processors that help us operate the App, including:
- Supabase, for authentication, database functions, and backend infrastructure;
- AI processing providers configured by SnapAction, such as OpenAI or OpenRouter; and
- platform or device services from Apple, Google, or your device OS when you use system integrations such as camera, photo access, calendars, reminders, or app distribution.
B. With Your Direction
We share information when you tell us to, including when you:
- create a calendar event in your calendar account;
- create a reminder in your reminders list; or
- share content into or out of the App.
C. Legal and Safety Reasons
We may disclose information if we believe in good faith that doing so is reasonably necessary to:
- comply with law, regulation, legal process, or governmental request;
- protect the rights, property, or safety of SnapAction, our users, or others;
- investigate fraud, abuse, security incidents, or violations of our Terms; or
- enforce our agreements.
D. Business Transfers
If SnapAction is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that process, subject to applicable law.
7. Legal Bases for Processing
If you are in a jurisdiction that requires a legal basis for processing, we rely on one or more of the following:
- performance of a contract with you, including providing the App and requested features;
- your consent, such as when you grant device permissions or voluntarily submit feedback;
- our legitimate interests, including service security, fraud prevention, service improvement, and enforcement of our Terms; and
- compliance with legal obligations.
8. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the App, comply with law, resolve disputes, and enforce agreements.
Based on the current implementation:
- Local images, extracted text, structured results, and action history remain on your device until you delete them, sign out, uninstall the App, or clear local app data.
- Signing out clears local image storage, local action history, and shared-image metadata on the device.
- Server-side records such as feedback submissions, usage records, and profile metadata may continue to exist after local sign-out unless separately deleted from our systems.
- Calendar events or reminders you create through the App remain in the relevant system app or account until you delete them there.
We may keep de-identified, aggregate, or log information for security, troubleshooting, or operational purposes as permitted by law.
9. Your Choices and Rights
Depending on your location, you may have the right to access, correct, delete, restrict, object to, or request portability of certain personal information.
You can also:
- deny camera, photo, calendar, or reminders permissions;
- delete images and related local content from within the App;
- sign out of the guest session;
- uninstall the App; and
- stop using the App at any time.
Important: because the App currently relies on anonymous guest sessions, signing out or uninstalling may make that session unrecoverable. In the current implementation, anonymous sessions are not designed to be restored after sign-out on another device or after local data is removed.
If you want to make a privacy request regarding server-side data, contact us at tharuxpert@gmail.com. We may need information to verify your request and may limit or decline requests where permitted by law.
10. International Data Transfers
Your information may be processed in countries other than the country where you live, including where our service providers operate. Those countries may have data protection laws that differ from those in your jurisdiction.
Where required, we take steps intended to support lawful cross-border transfers.
11. Children
SnapAction is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the App. If you believe a child under 13 has provided personal information through the App, contact us using the support channel described above so we can review and take appropriate action.
If local law sets a higher minimum digital-consent age, that higher age applies.
12. Security
We use reasonable administrative, technical, and organizational measures intended to protect information under our control. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for reviewing the content you choose to process through the App and for protecting access to your device and accounts.
13. Third-Party Services
The App may rely on third-party services, SDKs, operating system APIs, and model providers. Their handling of data is governed by their own terms, privacy notices, and security practices.
Examples relevant to the current implementation include:
- Supabase for authentication and backend processing.
- OpenAI or OpenRouter for AI text analysis, depending on runtime configuration.
- Apple or Google platform services for device permissions, calendars, reminders, app distribution, and operating system integrations.
We encourage you to review the privacy information made available by those providers where relevant to your use of the App.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. If changes are materially significant, we may also provide additional notice in the App or through another appropriate channel.
Your continued use of the App after an updated Privacy Policy becomes effective means you accept the updated Privacy Policy, to the extent permitted by law.
15. Contact
If you have questions, concerns, or privacy requests regarding this Privacy Policy or the App, contact SnapAction at:
- tharuxpert@gmail.com