1. INTRODUCTION
SnapDate ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Website versions of our legal documents are available at https://snapdateapp.com/privacy.html, https://snapdateapp.com/terms.html, and https://snapdateapp.com/eula.html.
2. INFORMATION WE COLLECT
2.1 Account and Authentication Data (Firebase Authentication)
When you create an account, Firebase Authentication processes:
- Email address: Required for account creation and authentication
- Password: Hashed and stored by Firebase; we never see your plaintext password
- Display name: Your chosen name displayed in the app
- Firebase User ID (UID): Unique identifier for your account
2.2 Profile and App Data (Firebase Realtime Database)
We store the following in Firebase Realtime Database:
- User profile information
- SnapDate metadata (themes, prompts, completion status, timestamps)
- Photo presence markers (whether a prompt has a captured photo) and, for Annual members, Cloudinary image URLs for scavenger-hunt photos
- Premium status backup
- Onboarding completion status
2.3 Local Device Storage (AsyncStorage and app documents)
The App stores certain data locally on your device, including:
- User preferences
- SnapDates cache for offline access
- Theme and location preference cache
- Captured scavenger-hunt photos (JPEG files in the app's private documents folder)
2.4 Photos and Content
- Free and Day Pass accounts: photos you capture stay on your device only (local-first). Firebase stores SnapDate metadata and a short marker that a photo exists for a prompt; image bytes are not uploaded.
- Annual membership: the same optimized scavenger-hunt photos are also hosted with Cloudinary so they can sync across your devices while membership is active.
- When Annual membership ends or is cancelled, we request deletion of remote Cloudinary photos for that account (best-effort) and the App falls back to on-device storage. Day Pass expiry does not upload or purge cloud photos. Completed SnapDates are not auto-deleted.
- We only capture photos you explicitly take through the App's camera for scavenger hunt prompts
- We do not read or upload existing photos from your photo library
2.5 Purchase and Subscription Data
- Payments are processed by the Apple App Store or Google Play Store. We never collect, store, or have access to your card numbers or full payment credentials.
- RevenueCat validates purchase receipts, manages entitlement (premium) status, links your Firebase UID for purchase restore across devices, and processes purchase/subscription metadata. See RevenueCat's privacy policy: https://www.revenuecat.com/privacy
2.6 Automatically Collected Information (PostHog Analytics)
We use PostHog to understand how the App is used and to improve reliability and product experience. PostHog may process:
- Firebase User ID (UID) as an analytics identifier after you sign in
- Email and display name associated with your account (as person properties)
- Premium / entitlement status (e.g. whether Premium is active)
- Product usage events (for example: sign-up/sign-in, onboarding completion, SnapDate started/completed, photo captured, collage shared/saved, premium screen views, purchase started/completed/restored, account deletion)
- Screen/navigation events and basic app lifecycle events
- Device and app technical properties (such as OS, app version, device type, locale)
- Session replay recordings on iOS/Android when enabled
Session replay: When session replay is enabled, PostHog records interactive sessions so we can diagnose usability issues. Text inputs and images (including scavenger-hunt photos) are masked by default in our configuration so photo contents and typed passwords are not visible in replays. Session replay requires a native app build and is not used for advertising.
Note: We do not use advertising SDKs, location tracking, or microphone access.
2.7 Camera and Photo Library Permissions
The App requires certain permissions to function properly:
- Camera: Used only to capture still photos for scavenger hunt prompts (not video or audio)
- Photo library: Used only to save completed SnapDate collages to your device; we do not read your existing library for upload
Important: We do not request microphone or location-tracking permissions.
3. HOW WE USE YOUR INFORMATION
We use the collected information solely for:
- Providing and maintaining the App and its core features
- Storing SnapDate metadata and syncing progress state across devices (scavenger-hunt photos sync via Cloudinary only while Annual membership is active; Free and Day Pass accounts keep photos on-device)
- Authenticating your account (Firebase)
- Validating purchases and managing premium entitlements (RevenueCat, Apple App Store / Google Play)
- Product analytics and session replay via PostHog to improve the App (not for advertising)
- Detecting and preventing fraud or abuse
- Complying with legal obligations
We do not:
- Use your data for advertising or marketing purposes
- Track user behavior for ads
- Send promotional emails or push notifications
- Share your data with third parties except as described in Section 5
4. DATA STORAGE AND SECURITY
4.1 Storage
- Photos (free): stored on your device in the App's private storage
- Photos (Annual membership): also hosted by Cloudinary while membership is active, in addition to the on-device copy
- Account and SnapDate metadata: Firebase Authentication and Firebase Realtime Database
- Purchase/entitlement status: RevenueCat (linked to your Firebase UID) and a premium status backup in Firebase
- Product analytics and session replay data: PostHog
- Preferences and caches: Local AsyncStorage on your device
- We use industry-standard encryption for data transmission (SSL/TLS) when communicating with Firebase, Cloudinary, PostHog, and payment providers
4.2 Security Measures
- Secure authentication protocols (Firebase Auth)
- Encrypted data transmission (SSL/TLS)
- Access controls and monitoring
- Regular security reviews and updates
4.3 Data Retention
- We retain your account and SnapDate metadata as long as your account is active
- On-device photos remain until you delete the SnapDate, delete your account, or uninstall the App
- For Cloudinary-hosted photos, we request deletion when Annual membership ends, when you delete the SnapDate/photo, or when you delete your account (best-effort; account metadata in Firebase is always removed)
- You may delete your account at any time through Settings in the App
- Account deletion is permanent and cannot be undone
- Some information may be retained only as required by law
5. SHARING YOUR INFORMATION
We do not sell your personal information. We may share information only with the service providers below and as required by law.
5.1 Service Providers
We share your information only with the following service providers necessary for app functionality:
These service providers are used only to operate and improve the App. Free and Day Pass scavenger-hunt photo files are not uploaded to Cloudinary. We do not share your data with advertising networks or data brokers. Analytics events and (when enabled) masked session replays are processed by PostHog as described in Section 2.6.
5.2 Purchase and Subscription Data
Purchase receipts and subscription metadata are processed by Apple or Google and by RevenueCat for validation and entitlement status. SnapDate does not receive your payment card details. RevenueCat links your Firebase UID so premium access can be restored across devices. For details on how RevenueCat processes data, see https://www.revenuecat.com/privacy.
5.3 Legal Requirements
- To comply with legal obligations
- To protect our rights and property
- To prevent fraud or illegal activities
- In connection with legal proceedings
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets
6. YOUR RIGHTS AND CHOICES
6.1 Access and Control
- Access your personal information
- Update or correct your information (including display name)
- Change your account password
- Delete your account and associated data permanently via Settings
- Export your data (prior to account deletion)
- Manage or cancel subscriptions in Apple App Store or Google Play settings
6.2 Account Deletion
You may delete your account at any time through Settings in the App. Account deletion:
- Deletes your Firebase Realtime Database data (profile, SnapDates, photo markers / Cloudinary URLs, premium backup, onboarding status)
- Deletes your Firebase Authentication account
- Deletes on-device scavenger-hunt photo files stored by the App
- Requests deletion of Cloudinary-hosted scavenger-hunt photos associated with your account (when Annual cloud hosting was used)
- Clears local AsyncStorage data on the device
- Logs you out of RevenueCat
- Resets the local PostHog analytics identity (subsequent activity is not linked to the deleted account ID on that device)
Important: Account deletion does not cancel App Store or Google Play billing. Day Pass is non-renewing and expires after 24 hours. If you have an active Annual subscription, cancel it separately in your Apple ID or Google Play subscription settings.
6.3 Communication Preferences
We do not send promotional emails or push notifications. If we implement these features in the future, we will update this Privacy Policy and provide opt-out options.
7. CHILDREN'S PRIVACY
The App is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.
8. THIRD-PARTY SERVICES AND PRIVACY POLICIES
We use the following third-party services. Please review their privacy policies:
We are not responsible for the privacy practices of these third parties beyond our contractual arrangements with them.
9. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in countries other than your own (including by Firebase, Cloudinary, RevenueCat, and PostHog). We rely on appropriate safeguards provided by these providers to protect your information.
10. CALIFORNIA PRIVACY RIGHTS (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination
We do not sell personal information. To exercise CCPA rights, contact us at privacy@snapdateapp.com or jon@snapdateapp.com.
11. EUROPEAN PRIVACY RIGHTS (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access your data
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent
To exercise these rights, contact us at privacy@snapdateapp.com or jon@snapdateapp.com.
12. COOKIES AND TRACKING
The App uses PostHog for first-party product analytics and (when enabled) session replay, as described in Section 2.6. We do not use advertising SDKs or third-party ad tracking. If you delete your account or sign out, we reset the local analytics identity on that device. For questions or requests related to analytics data, contact privacy@snapdateapp.com or jon@snapdateapp.com.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of material changes by:
Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
14. DATA BREACH NOTIFICATION
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law.
15. CONTACT US
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
16. DISPUTE RESOLUTION
Any disputes regarding this Privacy Policy will be resolved in accordance with the dispute resolution provisions in our Terms of Service.
By using SnapDate, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.