Privacy Policy
The short version. SnagAudit is built so that your reports, photos and signatures live on your phone. We do not run an account system, we do not upload your reports to our servers, and we cannot see them. The only data that leaves your device is what is needed to process a purchase through Apple or Google, anything you choose to share yourself when you send a PDF, and, if you turn on Smart capture, the notes and photos you choose to send for a suggestion (see below).
1. Who we are
SnagAudit is operated by Aaron Parry, trading as SnagAudit (“we”, “us”), based in England. We are the data controller for the small amount of personal data described in section 4. For everything you record inside a report (section 3) you are the controller and we are not involved in processing it.
Contact: privacy@snagaudit.app
2. What the app does
SnagAudit lets inspectors, contractors, letting agents and landlords photograph defects and conditions on site, mark up the photos, record details against numbered items, collect signatures and export a PDF report. It works fully offline.
3. Data that stays on your device
The following is stored only in the app’s private storage on your phone and is never transmitted to us:
- Reports, sections, items, descriptions, field values and notes.
- Photographs you take or import, including the date and time they were taken and, where you allow it, the location they were taken (see section 5).
- Annotations you draw on photographs.
- Signatures, the signer’s name and role, and the time and device model recorded with them.
- Your business profile: company name, contact name, address, phone, email, accreditation line, logo and brand colour.
- Exported PDF files, until you delete them.
Photographs and reports will often include personal data about other people, for example a tenant’s belongings or a signature. For that data you are the controller and you are responsible for having a lawful basis to collect it, for telling people what you are photographing and why, and for how long you keep it. The app includes a privacy notice you can show to tenants and customers before photographing; you can edit it in Profile.
Because nothing is uploaded, there is no way for us to recover your reports if your phone is lost, broken or reset, or if you delete the app. Keep exported PDFs somewhere safe.
4. Data we (or our processors) receive
| Data | Why | Who handles it |
|---|---|---|
| Purchase and subscription status, transaction identifiers, product identifiers, trial and renewal dates, an anonymous app-generated user ID, device platform and app version | To unlock Pro on your device, honour your free trial, restore purchases and detect refunds or billing problems | Apple (App Store) or Google (Google Play), and RevenueCat, Inc., our subscription processor |
| Your email address and the contents of your message | Only if you email us for support | Us |
| The text of a dictated note (never audio, your name or the property address), together with the names of the report’s sections and the template’s field names | Only when you turn on Smart capture (off by default, Pro only): the text is sent to our parse service, which uses an AI model to split it into the item’s fields for you to confirm. The text is not stored by us after the reply is returned. | Us (Supabase edge function, EU region) and the AI model provider named in the app’s Settings (currently OpenAI, Inc., under its API terms, which exclude the use of your text for training) |
| Up to two of an item’s photographs, re-encoded at a small size (768 pixels on the long side) with location and all other embedded metadata removed, together with the report type, the section name and any note already written for the item | Only when Smart capture is on and you tap Describe from photo on an item: the photos are sent to our describe service, which uses an AI model to suggest a one or two sentence description of the visible issue for you to use, edit or dismiss. Nothing is sent automatically, and the photos and text are not stored by us after the reply is returned. | Us (Supabase edge function, EU region) and the AI model provider named in the app’s Settings (currently OpenAI, Inc., under its API terms, which exclude the use of your content for training) |
| The app’s random purchase ID (issued by RevenueCat, not linked to your name or email) and a count of how many Smart capture and photo suggestions it used each day | Sent with each Smart capture or photo suggestion, so we can confirm the feature is part of your subscription and apply a generous daily fair-use limit. The daily counts are deleted after 30 days. | Us (Supabase, EU region); the purchase ID is checked with RevenueCat |
We do not use advertising SDKs, we do not track you across other apps or websites, and we do not sell or share personal data for marketing. At the date above the app contains no analytics or crash-reporting service. If we add one to help fix bugs we will update this policy first and it will not include the contents of your reports.
The purchase data is processed under the contract we have with you (UK GDPR Article 6(1)(b)) and our legitimate interest in preventing fraud (Article 6(1)(f)). Support emails are processed under our legitimate interest in answering you.
5. Permissions
- Camera — to photograph defects and conditions. Photos are saved inside the app, not to your camera roll.
- Photo library — only when you choose to import existing photos or a logo. We access only the items you pick.
- Microphone and speech recognition — optional, only when you tap the microphone or hold to describe. Speech is turned into text by your phone’s own recogniser: on iPhone this happens on the device; on Android it uses Google’s speech service, which may process the audio on Google’s servers according to your device settings. We never receive audio. The resulting text is stored in your report on the device like anything you type.
- Location — optional. When allowed, the location where each photo was taken is stored with it and printed on the report as evidence. Location is captured only at the moment a photo is taken and is never tracked in the background. You can decline the permission and the app works without it.
6. Sharing a report
When you tap Share, the PDF is handed to the app you choose (Mail, Messages, WhatsApp, Files, AirDrop and so on). From that point the file is governed by that app’s and the recipient’s handling, not by us. Think before you share reports that contain other people’s personal data.
7. Retention
Data on your device stays until you delete the report, clear exports in Profile → Storage, or uninstall the app. Purchase records are kept by Apple, Google and RevenueCat for as long as needed for tax, accounting and fraud-prevention purposes, typically up to seven years. Support emails are deleted within 24 months.
8. International transfers
RevenueCat processes purchase data in the United States under standard contractual clauses and the UK International Data Transfer Addendum. Apple and Google process data under their own privacy policies.
9. Your rights
Under UK GDPR you can ask us to access, correct, delete or restrict the personal data we hold about you, object to our processing, or ask for a copy in a portable format. For report contents, you already have full control on the device. To exercise a right concerning purchase data, email privacy@snagaudit.app; we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
10. Children
SnagAudit is a professional tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.
11. Security
Report data is stored in the app’s sandboxed storage, protected by your device passcode and the platform’s encryption. Every photograph is hashed (SHA-256) at capture so that it can be shown to be unaltered. Keep your device updated and protected with a passcode.
12. Changes
If we change this policy we will update the version and date above and, for material changes, tell you inside the app before they take effect.
SnagAudit · Aaron Parry trading as SnagAudit · England · privacy@snagaudit.app · Terms of Use · Made by ARX Algorithms