Privacy Policy
Last updated: July 23, 2026
1. Information We Collect
We are committed to data minimization. We only collect what is necessary to provide and improve the Service.
Free tier (no account required):
- Generated image parameters (headline, description, template) are processed in real-time and not permanently stored
- Basic server logs (IP address, timestamp) for security and abuse prevention, retained for 30 days
Pro tier (subscription required):
- Email address (for account management and billing notifications)
- Subscription and billing records (managed by Stripe — we never see your card details)
- API usage logs for rate limiting and service improvement
- Generated image metadata (template used, timestamp) for usage analytics
2. How We Use Your Information
- To process your subscription and manage your account
- To send important service notifications (billing, security, trial reminders)
- To monitor usage and prevent abuse or unauthorized access
- To improve the Service, fix bugs, and develop new features
- To respond to support requests and provide customer service
- To comply with legal obligations
We do not use your data for advertising, sell your data to third parties, or create user profiles for marketing purposes.
3. Legal Basis for Processing (GDPR / UK GDPR)
If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
- Performance of a contract: Processing your subscription and delivering Pro features
- Legitimate interests: Server logs for security, abuse prevention, and service improvement
- Legal obligation: Retaining billing records for tax and accounting purposes
- Consent: Analytics data (you can opt out at any time)
5. Third-Party Services
We rely on the following third-party services. Each has its own privacy policy governing data they process:
- Stripe — Payment processing. Processes your card details and billing information. Stripe Privacy Policy
- Resend — Transactional email delivery (trial reminders, billing receipts). Resend Privacy Policy
- Cloud hosting provider — Server infrastructure for hosting the Service
6. Data Retention
- Free tier image data: Not retained — processed in memory only
- Pro tier image metadata: Retained while your subscription is active
- Server logs: 30 days
- Billing records: 7 years (legal requirement for tax purposes)
- Account data: Retained until you request deletion
You may request deletion of your data at any time by contacting us. We will process deletion requests within 30 days.
7. Your Rights
Under GDPR, UK GDPR, and CCPA, you have the following rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data (“right to be forgotten”)
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent for analytics at any time
To exercise these rights, contact us at support@appsnap.co.uk. We respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. Children's Privacy
The Service is not directed to children under 13 (under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it immediately.
9. International Data Transfers
Your data may be processed in countries other than your own. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data is protected to the same standard as required under GDPR/UK GDPR.
10. Security
We take reasonable technical and organizational measures to protect your data:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Secure payment processing via Stripe (PCI DSS compliant)
- Regular security reviews and dependency updates
- Principle of least privilege for database access
- No storage of card details — Stripe handles all payment data
No method of transmission or storage is 100% secure. If a data breach occurs, we will notify affected users within 72 hours as required by GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 30 days before they take effect.
12. Contact
Questions about your privacy or want to exercise your data rights? Contact us at support@appsnap.co.uk.
Also read our Terms of Service
Rules for using the Service