Privacy Policy

Snappu is an event photo platform operated by PAWS Systems ("Snappu", "we", "us"). Photographers add event photos, and attendees find the photos they appear in by taking a selfie. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

Organizers and photographers (account holders):

• Account details: your name, email address, password (stored hashed), and profile picture. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Organization and event details you enter, such as event names, dates, venues and cover images.
• Photos you upload or import, along with basic file details (file name, size, dimensions).
• Payment records for the plans you buy (tier, amount, status). Card and mobile money details are handled by our payment processor and never reach our servers.

Attendees (no account needed):

• A selfie, when you choose to search for your photos. It's processed in memory to run the search and is never stored.
• Usage data when you open an event page, search or download: a one-way hash of your IP address (never the raw address), a random device identifier kept in your browser, your browser's user agent, and how you arrived (for example, a QR code). We use it for event analytics and to prevent abuse.
• Your email address, only if you ask to be notified when new photos are added to an event.

Anyone: the details you send us through our contact form.

When a photo is added to an event, we detect the faces in it and store a numerical representation of each face (a face vector) in a face index that belongs only to that event. We don't store face vectors for attendee selfies: a selfie is compared against the event's index, the matching photos are returned, and the selfie is discarded.

Face data is used only to match attendees with photos from the same event. It is never used to identify people by name, shared between events, sold, or used to train machine-learning models. Deleting a photo deletes its face data, and deleting an event deletes that event's entire face index.

Photographers can choose to connect Google Drive to add event photos from a Drive folder instead of uploading them. This is optional and separate from signing in with Google.

What we access. With your permission, Snappu uses read-only access to your Google Drive (drive.readonly) to list folders so you can pick one, list the image files (JPEG, PNG, WebP) in the folder you choose, and download those images. We also receive the email address of the connected Google account so we can show which account is connected. We never create, modify or delete anything in your Drive.

How we use it. We use Drive data only to provide the import feature you asked for:

• For each image you import, we make a display-size copy (up to 2048px) and a thumbnail (about 480px) and store them in our photo storage so attendees of that event can view them.
• We detect faces in the display-size copy so attendees can find the photos they appear in (see "Face data" above).
• Your full-resolution originals stay in your Drive. When an attendee downloads an imported photo, we read the original from your Drive and pass it straight to them without keeping a copy.

What we store. Your Google OAuth access and refresh tokens (so imports and downloads keep working), the connected account's email address, the Drive file ID of each imported image (to avoid importing it twice), and the display-size copies, thumbnails and face data described above. We don't store your folder listings or any files you don't import.

Who we share it with. We don't sell Google user data or use it for advertising. Imported photos are shown to people who open that event's page, which is the point of the feature. Otherwise, Drive data only goes to the service providers that run Snappu for us (photo storage and face matching, listed in section 6), under contracts that limit them to providing that service. Humans at Snappu don't read your Drive data, except with your permission, to investigate abuse or security issues, or where the law requires it.

Keeping and deleting it. You can disconnect Google Drive at any time from the upload page. That deletes your tokens and revokes Snappu's access with Google. You can also remove access from your Google Account permissions. Photos you already imported stay on the event until you, the organizer or our retention rules delete them (see section 7). Deleting an imported photo or its event removes its copies and face data from Snappu.

Limited Use. Snappu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data to develop, improve or train generalized AI or machine-learning models.

• To run Snappu: hosting events, storing and showing photos, and matching selfies to photos.
• To show organizers and photographers analytics for their events.
• To send emails you need or asked for, such as photographer invites, sign-in emails, receipts and new-photo notifications.
• To process payments for plans.
• To keep Snappu secure, rate-limit searches and prevent abuse.
• To respond to messages you send us.

We share information only with providers that help us run Snappu, and only as much as each one needs:

• Cloudflare (R2) for photo storage and delivery.
• Google for sign-in with Google and the optional Drive import.
=
• PayChangu for processing payments.
• Our hosting and database providers, which run the application.

We may also disclose information when the law requires it, or to protect the rights and safety of our users or Snappu. We don't sell personal information.

• Photos and their face data stay until a photographer or organizer deletes them or the event, or until the event has had no activity for 60 consecutive days, after which its photos may be permanently removed.
• Selfies are not kept at all.
• Google Drive tokens are kept until you disconnect Drive or delete your account.
• Event analytics records are kept for the life of the event and are deleted along with it.
• Account details are kept until you ask us to delete your account.
• Payment records may be kept longer where accounting or tax law requires it.

You can update your profile, delete photos you uploaded, disconnect Google Drive, and stop new-photo notifications at any time. To access, correct or delete your personal information, or to delete your account, email us at hello@snappu.app. We'll respond within 30 days.

If you appear in an event photo and want it removed, contact the event's organizer or email us and we'll help.

Data is encrypted in transit (HTTPS). Passwords are hashed, IP addresses are stored only as one-way hashes, and access to production systems is restricted to the people who need it. No system is perfectly secure, but we work to protect your information and will let affected users know about a breach where the law requires it.

Snappu accounts are not for children under 16. Organizers and photographers are responsible for obtaining any consent required to photograph minors at their events.

We may update this policy from time to time. We'll change the date at the top, and for significant changes we'll notify account holders by email or in the app.

Questions about this policy or your data: email hello@snappu.app or use the contact form on our homepage.