Privacy Policy

This policy explains what snapp collects, why, and what happens to it. The short version: we collect what's needed to run a bookmark app with billing, we don't sell your data, and we don't run advertising trackers.

1. What we collect

• Account data — your email, name, and a password hash (or your Google account identity if you sign in with Google).
• Your content — the URLs you bookmark, titles, notes, tags, mixes, and the screenshots, fonts, and colors captured when you scan a site, plus the design guides generated for you.
• Usage records — a log of metered actions (guides, analyses, scans) with token counts and estimated cost, used to enforce plan limits and billing.
• Payment data — handled by Stripe. We store your Stripe customer and subscription identifiers and plan status; we never see or store card numbers.

We don't use advertising cookies or cross-site trackers. The only cookies are the session cookies that keep you signed in.

2. How we use it

• to provide the service — storing and showing your library;
• to generate design guides: when you run a scan or a mix, the relevant screenshots, extracted fonts/colors, and your notes are sent to Anthropic's Claude API to produce the guide;
• to enforce plan limits and process subscription payments;
• to respond when you contact us.

3. Who processes it

Your data is handled by these processors on our behalf:

• Supabase — database, authentication, and file storage (screenshots);
• Stripe — subscription billing;
• Anthropic — AI generation (receives site screenshots, extracted design data, and your notes when you generate);
• Google — sign-in, if you choose Google OAuth;
• Vercel — application hosting.

We don't sell your data or share it with advertisers.

4. Retention and deletion

Your content stays until you delete it or your account. Deleting a bookmark or mix removes it (and its stored screenshots) from our systems. To delete your whole account and its data, email us — we'll confirm and complete the deletion within 30 days. Billing records are kept as long as tax and accounting law requires.

5. Your rights

snapp is operated from Canada and handles personal data in line with PIPEDA. Depending on where you live (e.g. PIPEDA, GDPR, or CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we'll honor those requests.

6. Security

Data is encrypted in transit, stored with row-level access controls (your data is only readable by your account), and payment handling is delegated to Stripe. No system is perfectly secure — if a breach affects your data, we'll notify you as the law requires.

7. The browser extension

The Snapp browser extension is optional, and the app works without it. It is deliberately narrow, so it's worth being exact about what it does and does not do.

• When you click save — and only then — it reads the address and title of the tab you're on and sends those two things to snapp to create the bookmark. It does not read the page's contents.
• It does not track your browsing. Pages you visit without clicking save are never recorded, sent anywhere, or read. There is no analytics or telemetry in the extension.
• Live previews — on snapp's own pages, the extension removes the response headers that would stop a site from being displayed inside a preview card. This applies only to frames snapp itself embeds, never to pages you browse normally, and it collects nothing.
• On snapp's pages it records which snapp address you use, so the save button knows where to send bookmarks. That is stored locally in your browser.
• Permissions — the extension asks for access to all sites because you may save any page and preview any site. That access is used for the two purposes above and nothing else.

Bookmarks created through the extension are covered by the rest of this policy, exactly as if you had added them in the app.

8. Children

snapp isn't directed at children under 13 and we don't knowingly collect their data.

9. Changes

If this policy changes materially, we'll notify you before the change takes effect. The effective date above always reflects the current version.

10. Contact

Privacy questions and requests: kasperzhang.ai@gmail.com