Privacy policy
Effective 29 October 2026. This policy covers the SnapList AI mobile app for iPhone and Android and the website snaplistai.app. In this policy “we” and “us” mean SnapList AI.
The short version
- You sign in with Apple, Google, or an email address and password. We store your account ID and email address.
- The photos you take, and the listings we write from them, are stored on our servers so your history works. An AI model processes your photos to write the listings.
- We do not sell your personal information, and we do not use your photos or listings to train AI models.
- Free and credit-pack users see ads from Google AdMob, with the consent choices required where you live. Pro users see none.
- You can delete any item, or your whole account, from inside the app.
1. What we collect
Account information
When you sign in with Apple, Google or an email address and password, our authentication provider (Google Firebase Authentication) gives us a random account ID, your email address (for Apple this may be a private relay address if you chose to hide it), and which sign-in method you used. If you create an account with a password, Firebase stores it only in hashed form: we cannot see it, and we never receive your Apple or Google password. Password reset emails are sent by Firebase Authentication.
Content you create
This is the photos you take in the app (the label or size tag, the front, the back and any detail shots), resized on your phone before upload; the condition grade, flaws, measurements and output settings (marketplaces, language, currency, emoji, an optional signature line) you choose; the attributes extracted from your photos (for example brand, size, material, colour) with their source and confidence; the listings generated for each marketplace and any edits you make; the price range to research; and when you copied a listing.
Usage and purchases
We count how many listings you generate each day to apply the free limit, and we keep your credit balance and subscription status. Purchases are made through the Apple App Store or Google Play. We do not see your payment card details. Our purchase provider, RevenueCat, receives your account ID and purchase information so we can unlock Pro and credits.
Product analytics
Our analytics provider, PostHog, receives events such as when you start capturing, finish an item, generate listings, confirm a chip, copy a listing (with the marketplace name), view the purchase screen or hit your daily limit. Events carry counts, categories and your account ID. They never include photo content, listing text or attribute values.
Advertising (free and credit-pack users)
Google AdMob uses your device’s advertising identifier, device and app information, and your approximate location derived from your IP address to select and measure ads. Where the law requires it, you are asked for consent through Google’s consent form before any ad is requested. On iPhone you are also asked for permission under Apple’s App Tracking Transparency rules. You can change your choices at any time under Settings, then Ad privacy choices, and in your device settings. Pro users do not see ads.
Technical logs
Our servers record request metadata, such as the time, which feature was called, response status, duration, size, your account ID and token counts for AI requests, to keep the service running, enforce limits and investigate abuse. Logs do not contain your photos or listing text.
This website
The website does not use cookies or analytics. Our hosting provider, Cloudflare, processes standard request data (such as IP address and browser type) to deliver pages and protect the site.
2. How we use it
- To provide the service: store your items, write your listings, show your history and apply your plan and limits.
- To process purchases and restore your access on a new device.
- To show ads to free users and measure them, subject to your consent choices.
- To understand which features are used and fix problems.
- To protect the service against abuse and to meet legal obligations.
If you are in the European Economic Area or the United Kingdom, our legal bases are: performing our contract with you (providing the app and your plan), your consent (advertising identifiers and personalised ads where required), and our legitimate interests (security, preventing abuse and improving the product, balanced against your rights).
3. How the AI part works
To write your listings, your photos and the choices you made (condition, flaws, measurements, language and marketplaces) are sent from our servers to an AI model that runs on Cloudflare’s Workers AI platform. We do not use your photos or your listings to train AI models, and we have not authorised our providers to do so. The model is instructed to state only what is on the label or visible in the photos, but it can make mistakes, so please check every listing before you post it.
4. Who processes your data
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare | Hosting, database, photo storage, AI processing, content delivery for the app, API and website | Everything you store in the app, request metadata |
| Google (Firebase Authentication, Google Sign-In) | Account sign-in | Account ID, email, sign-in method |
| Apple (Sign in with Apple) | Account sign-in on iPhone | Account ID, email or private relay address |
| Google AdMob | Ads for free and credit-pack users, consent management | Advertising identifier, device and approximate location, ad interactions |
| RevenueCat | Subscriptions and credit purchases | Account ID, purchase and entitlement information |
| PostHog | Product analytics | Account ID and event counts, no content |
| Apple App Store and Google Play | Payments and app distribution | Handled under their own privacy policies |
These providers process data on our behalf, or as independent controllers where they provide the sign-in, store or advertising service, under their own terms and privacy policies.
5. How long we keep it
- Items, photos and listings: until you delete the item or your account. On the free plan, items older than 30 days are no longer shown and their photos are deleted automatically. Pro keeps your history until you delete it.
- Account record, daily usage counters, credit and subscription records: until you delete your account.
- Analytics events: deleted for your account ID when you delete your account, which can take up to 30 days to complete at our analytics provider.
- Server logs: kept for a limited time by our infrastructure providers and not used to rebuild your content.
- Backups: deleted data can remain in backups for a limited period, which we aim to keep to 30 days or less.
- Purchase records: Apple and Google keep their own records of your purchases under their policies.
6. Your choices and rights
In the app you can edit or delete any item, delete your whole account (Settings, then Delete account), change your ad privacy choices, and sign out. You can also manage permissions such as the camera in your device settings.
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent at any time. To use these rights, email support@snaplistai.app from the address you signed in with. We may need to verify that the request is yours. If you are in the EEA or the UK you can also complain to your local data protection authority.
California and other US states. We do not sell your personal information. Advertising on free and credit-pack plans involves Google processing advertising identifiers and similar data, which some state laws describe as “sharing” for cross-context behavioural advertising. You can opt out in Settings under Ad privacy choices, or by upgrading to Pro, which removes ads. You will not be treated differently for using your privacy rights.
7. International transfers
Our providers operate globally, so your data may be processed in countries other than your own, including the United States. Where required, transfers rely on safeguards such as the standard contractual clauses or the providers’ certifications under recognised data transfer frameworks.
8. Security
Traffic between the app and our servers is encrypted. Photos are stored in private storage that only your signed-in account can access through our API, and every request is checked against your account. No system is perfectly secure, so please keep your device and sign-in accounts protected.
9. Children
SnapList AI is not directed to children under 13, or under 16 where local law sets a higher age, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
10. Changes to this policy
If we change this policy in a way that matters, we will update the date above and, for significant changes, tell you in the app before they take effect.
11. Contact
Questions or requests about privacy: support@snaplistai.app. To delete your data, see account deletion.