Legal

Privacy Policy

Last updated: May 14, 2026 · Effective: May 14, 2026

1. Who we are

Snapkit is published by Codeful, an independent developer based in Seoul, Republic of Korea ("we", "us", "our"). Snapkit shares the same backend and account system as the web product at vibeland.app. For any privacy question, contact support@vibeland.app.

2. What data Snapkit handles

Photos you take or pick

When you run a tile, Snapkit uploads the photo you selected to our servers (Vercel, US region) and forwards it to Anthropic Claude for vision analysis. The result card is then returned to your device. We retain the photo only as long as needed to deliver the result and let you review your run history. You can delete a run (including its photo) from in-app Settings at any time, which removes it from our servers within 24 hours.

Account data

You can use Snapkit anonymously (no sign-in) for some features. If you sign in with Sign in with Apple, we receive a stable but private Apple-provided identifier and, if you choose to share it, your name and an Apple-relay email address. We do not receive your real email unless you explicitly choose to share it.

Purchase data

In-App Purchases (Snapkit Pro subscription, Spark packs) are processed by Apple via the App Store. We receive transaction receipts from Apple to verify entitlements; we never receive or store your payment card number.

Device tokens (for notifications)

If you opt in to notifications, your device sends Apple Push Notification service (APNs) tokens to our servers so we can notify you when a long-running tile finishes. Tokens are tied to your install and can be revoked by disabling notifications in iOS Settings.

Diagnostic and crash data

We use Apple's standard crash reports and lightweight server logs (request paths, status codes, anonymized timing) to keep Snapkit reliable. Server logs are retained for up to 30 days. We do not use third-party analytics or ad SDKs.

3. What we never do

• We do not sell, rent, or share your data with advertisers.
• We do not use your photos to train AI models. Anthropic's enterprise API terms also prohibit training on customer inputs.
• We do not embed third-party advertising SDKs, IDFA, or cross-app tracking.
• We do not read your photos beyond the one you explicitly pick or capture for each run.

4. Third-party services we rely on

We use carefully selected sub-processors to run Snapkit. Each is bound by a data processing agreement and used only for the purpose described here.

• Anthropic, PBC — Claude vision model that analyzes your photo (privacy).
• Vercel, Inc. — application hosting and request routing (privacy).
• Supabase, Inc. — database, account auth, file storage (privacy).
• Apple Inc. — Sign in with Apple, In-App Purchase, APNs push delivery.

5. Photo data, in detail

The photo flow is: (1) you capture or pick a photo; (2) the iOS app downsizes it to a maximum dimension of 1280px and JPEG-encodes it; (3) the app uploads the result to our Vercel endpoint over TLS; (4) our server validates and forwards it to Anthropic Claude's vision API; (5) Claude returns a structured result, which we narrow into a result card; (6) we return the card to your device and persist the photo + card to your run history so you can review or share it later.

Photos in your run history live in our Supabase storage bucket, scoped to your user identifier (anonymous or signed-in). When you delete a run or your account, the underlying photo is removed within 24 hours.

6. Your rights and controls

• See and delete your history. In-app Settings → History lets you review every run and delete any of them. Deletion removes both the result card and the photo from our servers.
• Delete your account. In-app Settings → Account → Delete Account permanently removes your account, library, runs, photos, and device tokens. This is irreversible.
• Disable notifications. iOS Settings → Snapkit → Notifications. We then stop sending pushes and your token expires.
• Cancel a subscription. iOS Settings → Apple ID → Subscriptions → Snapkit Pro → Cancel.
• EU/UK/CA residents have the right to access, rectify, port, and erase personal data, and to object to processing or lodge a complaint with your local supervisory authority. Write to support@vibeland.app and we will respond within 30 days.
• California residents have rights under the CCPA/CPRA (know, delete, correct, opt out of sale/sharing). We do not sell or share personal information as defined by California law.

7. Children

Snapkit is not directed to children under 13 (or under 16 in jurisdictions where that age threshold applies). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Data location and transfers

Our infrastructure is hosted in the United States (Vercel, Supabase, Anthropic). If you use Snapkit from outside the US, your data will be transferred to the US for processing. We rely on Standard Contractual Clauses and equivalent transfer mechanisms with our sub-processors.

9. Security

All data in transit uses TLS 1.2+. Backend storage uses encryption at rest. Access to production systems is restricted by single sign-on and 2FA. We use least-privilege API keys for every sub-processor.

10. Retention

• Photos and run history: until you delete them, or up to 12 months of inactivity for anonymous accounts.
• Account record: until you delete it.
• Server logs: up to 30 days.
• Purchase records: as required by Apple and applicable tax law (typically 7 years for receipts).

11. Changes to this policy

If we make material changes, we will update the "Last updated" date and, for significant changes, prompt you in the app the next time you open it. Continued use after an update constitutes acceptance.

12. Contact

Questions, requests, or concerns? Email support@vibeland.app. We aim to respond within 5 business days.

Snapkit · published by Codeful · Seoul, Republic of Korea · Terms of Use · Home