Privacy Policy

Last updated: May 29, 2026

1. Information We Collect

Account information: When you create an account, we collect your email address and an encrypted password.

Photos: When you use our identification feature, you upload a photo that is processed to identify the organism shown. If you choose to save the result, the photo is stored in your account.

Location data: If you choose to enable location when making an identification, we store the GPS coordinates (latitude and longitude) alongside that identification. Location is never collected without your explicit permission, and you can decline or revoke it at any time.

Usage data: We track your identification count per month to manage subscription limits, and timestamps of when identifications were made.

Payment information: Payment processing is handled entirely by Stripe. We never see, store, or have access to your credit card number or bank details. We only store a Stripe customer ID to manage your subscription.

2. How We Use Your Information

To provide identifications: Your uploaded photos are sent to a third-party AI provider for analysis. The provider processes the image to generate an identification result. Per our provider's API terms, data sent through their API is not used to train their models.

To maintain your account: Your email is used for login, password resets, and optional email notifications such as usage warnings and weekly digests.

To power community features: If you have the Community Feed setting enabled (it is on by default), your saved identifications may appear in the public community feed. Only the identification name, species, threat level, photo, and date are shown. Your name, email, and account information are never displayed. You can opt out of the community feed at any time in your account settings.

To display your discovery map: If you enabled location for an identification, it appears as a pin on your personal map. Your map is private and only visible to you when logged in.

3. Third-Party Services

AI processing: Photos you upload are sent to a third-party AI provider's API for identification. Our provider does not use API data to train their models.

Supabase (data storage): Your account data, identifications, and images are stored on Supabase's infrastructure with encryption at rest.

Stripe (payments): Subscription billing is handled by Stripe. See Stripe's privacy policy.

Vercel (hosting): Our application is hosted on Vercel. See Vercel's privacy policy.

Amazon (product links): When we recommend products, the “View on Amazon” links direct you to Amazon.com. Clicking these links is subject to Amazon's privacy policy. We may earn a small commission from purchases made through these links at no extra cost to you.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and access controls. Passwords are hashed and never stored in plain text. Database connections are encrypted in transit.

Uploaded images are stored with randomized filenames that are not publicly discoverable. While image URLs are technically accessible if known, they cannot be guessed or enumerated.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Your Rights and Controls

Community feed opt-out: You can disable the “Show in Community Feed” toggle in your account settings at any time. Your identifications will no longer appear in the public feed.

Location data: Location is only collected when you explicitly allow it. You can decline the location prompt, and your choice is remembered for the session. Previously saved location data can be removed by deleting the associated identification.

Delete your data: You can delete your entire account and all associated data (identifications, images, collections, achievements, and profile) from the Danger Zone section in your account settings. This action is permanent and cannot be undone.

Export your data: You may contact us to request an export of your data.

Email notifications: You can disable all email notifications in your account settings.

6. Cookies

We use essential cookies only to maintain your login session and remember your theme preference (light/dark mode). We do not use tracking cookies, analytics cookies, or advertising cookies. We do not sell data to advertisers.

7. Children's Privacy

SnapID is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account.

8. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by posting a notice on our website. Your continued use of SnapID after changes are posted constitutes your acceptance of the updated policy.

9. Contact

For privacy-related questions, data requests, or concerns, please contact us at privacy@getsnapid.org.