Privacy Policy

Last updated: July 23, 2026

1. Information We Collect

We are committed to data minimization. We only collect what is necessary to provide and improve the Service.

Free tier (no account required):

  • Generated image parameters (headline, description, template) are processed in real-time and not permanently stored
  • Basic server logs (IP address, timestamp) for security and abuse prevention, retained for 30 days

Pro tier (subscription required):

  • Email address (for account management and billing notifications)
  • Subscription and billing records (managed by Stripe — we never see your card details)
  • API usage logs for rate limiting and service improvement
  • Generated image metadata (template used, timestamp) for usage analytics

2. How We Use Your Information

  • To process your subscription and manage your account
  • To send important service notifications (billing, security, trial reminders)
  • To monitor usage and prevent abuse or unauthorized access
  • To improve the Service, fix bugs, and develop new features
  • To respond to support requests and provide customer service
  • To comply with legal obligations

We do not use your data for advertising, sell your data to third parties, or create user profiles for marketing purposes.

4. Cookies

We use only essential cookies necessary for the Service to function:

  • Session cookies: Keep you logged into your account
  • Stripe cookies: Required for the checkout process (governed by Stripe's privacy policy)

We do not use advertising cookies, tracking pixels, or third-party analytics that profile users across sites. Any analytics we use are privacy-respecting and aggregate-only.

5. Third-Party Services

We rely on the following third-party services. Each has its own privacy policy governing data they process:

  • Stripe — Payment processing. Processes your card details and billing information. Stripe Privacy Policy
  • Resend — Transactional email delivery (trial reminders, billing receipts). Resend Privacy Policy
  • Cloud hosting provider — Server infrastructure for hosting the Service

6. Data Retention

  • Free tier image data: Not retained — processed in memory only
  • Pro tier image metadata: Retained while your subscription is active
  • Server logs: 30 days
  • Billing records: 7 years (legal requirement for tax purposes)
  • Account data: Retained until you request deletion

You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days.

7. Your Rights

Under GDPR, UK GDPR, and CCPA, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data (“right to be forgotten”)
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent for analytics at any time

To exercise these rights, contact us at support@appsnap.co.uk. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Service is not directed to children under 13 (under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it immediately.

9. International Data Transfers

Your data may be processed in countries other than your own. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data is protected to the same standard as required under GDPR/UK GDPR.

10. Security

We take reasonable technical and organizational measures to protect your data:

  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Secure payment processing via Stripe (PCI DSS compliant)
  • Regular security reviews and dependency updates
  • Principle of least privilege for database access
  • No storage of card details — Stripe handles all payment data

No method of transmission or storage is 100% secure. If a data breach occurs, we will notify affected users within 72 hours as required by GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 30 days before they take effect.

12. Contact

Questions about your privacy or want to exercise your data rights? Contact us at support@appsnap.co.uk.

Also read our Terms of Service

Rules for using the Service

Terms of Service