Last updated: October 21, 2026 · Effective: October 21, 2026
This Privacy Policy explains how Stavros Papapantelis, trading as SnapUI, Koskinou, Rhodes, Greece (“SnapUI”, “we”, “us”) collects, uses, shares and protects personal data when you use the SnapUI mobile application, our websites and shared app previews (together, the “Service”). We are the data controller for that processing.
We never receive or store your Google or GitHub password.
For each AI call we record the model used, reasoning effort, the prompt and system prompt sent, the output returned, token counts, the provider cost and the amount charged to you, and a timestamp. We keep these to power your revision history, to compute and audit billing, to investigate failures and abuse, and to improve prompt quality.
We never see or store your card number or payment credentials. Payments are processed entirely by Google Play (or Apple, where offered).
If you tap the voice-input control, the app records audio and passes it to your device's speech-recognition service to convert it into text that is placed in the prompt field. On most Android devices this service is provided by Google, and depending on your device settings the audio may be processed on Google's servers under Google's privacy policy rather than entirely on the device.
SnapUI does not upload, store or retain raw audio recordings on our servers. Only the resulting text, if you choose to submit it, is sent to us. Voice input is optional; you can deny the microphone permission and type instead.
This data is removed when you uninstall the app or clear its storage.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and secure your account; authenticate you | Account data | Performance of a contract |
| Generate pages, code, images and text you request; store and sync your projects | Project data, AI request logs | Performance of a contract |
| Meter usage, calculate charges, verify purchases, handle refunds | Billing data, AI request logs | Performance of a contract; legal obligation (tax/accounting records) |
| Send service notifications about your account and generations | Push token, account data | Performance of a contract; legitimate interests |
| Diagnose crashes, keep the Service reliable, prevent fraud and abuse, enforce rate limits | Technical data, server logs, AI request logs | Legitimate interests; legal obligation |
| Understand feature usage and improve the product | Analytics events, aggregated usage | Legitimate interests (or consent where required) |
| Voice input | Microphone audio | Consent (the permission prompt) |
| Publish a public preview of a project | Project data you chose to share | Consent (you enable sharing) |
| Mirror projects to GitHub | GitHub account name and token, project files | Consent (you connect GitHub) |
| Comply with law, respond to lawful requests, establish or defend legal claims | As necessary | Legal obligation; legitimate interests |
We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use your project content to train our own AI models.
SnapUI does not host its own AI models. To generate what you ask for, we transmit the relevant prompt and project context — which may include your app description, previously generated page code, chat history and images — to third-party model providers. Depending on the feature and the model we route to, these currently include:
These providers process your prompts to return a result and act as our processors or independent controllers under their own terms. They may retain request data briefly for abuse monitoring under their own policies. Our provider mix may change as models are updated or replaced; this list describes the providers in active use at the date above.
Stock imagery. To place realistic photos in generated screens, we query third-party stock image services (Pexels and Unsplash) with a short text description of the image needed, derived from your project content. We do not send your identity to these services, and the resulting image URLs are stored inside your generated pages.
Image hosting. Images generated for or uploaded to your projects are stored with Amazon Web Services (S3).
| Permission | Why | Optional? |
|---|---|---|
| Internet / network state | All generation, sync and billing require a connection | Required |
Microphone (RECORD_AUDIO) | Voice input for dictating prompts and edits | Optional — deny it and type instead |
Notifications (POST_NOTIFICATIONS) | Alerts about account activity and completed generations | Optional |
| Storage (Android 12 and below) | Saving exported files and images you ask to save | Optional, requested only when needed |
SnapUI does not request broad photo-library access, contacts, location or SMS. Saving images uses the system media store or app-specific storage. You can change permissions at any time in Android settings.
Sharing is off by default. If you enable a share link for a project, a URL is created and anyone holding that URL can view a read-only web preview of that project — its name, screens and related presentation content — without signing in. Your email address is not displayed.
Shared previews are publicly reachable and may be forwarded, cached, archived or indexed by third parties outside our control. You can switch sharing off at any time from the app menu, after which the link stops opening; that cannot recall copies already made by others. Do not share projects containing confidential material.
GitHub can be used in two ways: as a sign-in provider, and to mirror projects to repositories. Both are
optional and start with you. Authorisation requests the GitHub
repo scope, which is required to create and push to private repositories and is broad by
design. We store your GitHub login name and the access token in encrypted storage on your
device; SnapUI uses them solely to create and update repositories for projects you choose to
mirror. Disconnecting removes the stored authorisation from your device and stops future syncing, but
does not delete repositories already created. Once content is in GitHub it is governed by GitHub's terms
and privacy policy.
| Data | Retention |
|---|---|
| Account and project data (projects, pages, revisions, chats) | Until you delete the project or your account |
| AI request logs (prompts, outputs, costs) | Retained while your account is active, for history, billing audit and abuse investigation; deleted with your account |
| Billing and purchase records | Google Play is the seller of record and keeps its own payment records under its policies. Our credit ledger and your RevenueCat customer record are deleted with your account |
| Content reports | Until reviewed and resolved, and deleted with your account |
| Server and security logs | Short-term, typically up to 12 months |
| Crash and analytics data | Per Firebase defaults (typically up to 90 days for crash data; analytics per configured retention) |
| Microphone audio | Never stored by us |
| Backups | Deleted content may persist in encrypted backups for a limited period before rotation |
Depending on where you live, you may have the right to:
To exercise a right, email support@snapui.app from the address on your account. We respond within the period required by law (generally 30 days, extendable where permitted) and may need to verify your identity. There is no automated decision-making producing legal or similarly significant effects.
You can delete your account in the app from Profile → Delete account, or by emailing us. Deletion is permanent and removes your projects, pages, revision history, chats, AI request logs, credit balances and purchase records held for us by RevenueCat, and your authentication record. Any remaining balance is forfeited and is not refundable or transferable, and public share links stop working. Google Play keeps its own payment records as seller of record. Deleting your account does not cancel a Google Play subscription: cancel it in Google Play first. Without the app, you can request deletion as described at Delete your SnapUI account.
No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your Google account and device secure. We will notify you and the relevant authority of a personal data breach where the law requires it.
We and our providers operate internationally, and your data may be processed in countries outside your own, including the United States. Where data leaves the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) or an adequacy decision. You may request details of these safeguards from the contact address below.
The Service is not intended for anyone under 16 (or the minimum digital-consent age in your country, if higher), and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Our legal bases are listed in Section 2. You have the rights in Section 9 and may lodge a complaint with your supervisory authority. Our EU/UK representative, where required under Article 27 GDPR, is not appointed.
In the past 12 months we collected the categories described in Section 1 (identifiers, commercial information, internet activity, audio at the moment of voice input, and user content) for the business purposes in Section 2. We have not sold personal information and have not shared it for cross-context behavioural advertising, including personal information of consumers under 16. You may exercise rights to know, delete, correct and limit as described in Section 9, and may use an authorised agent. We do not discriminate against you for exercising these rights.
Residents of states such as Virginia, Colorado, Connecticut, Utah and Texas have comparable rights of access, correction, deletion, portability and opt-out, and may appeal a refusal by replying to our response. We do not process personal data for targeted advertising or profiling with legal effects.
We may update this policy. The “Last updated” date at the top always reflects the current version, and we will give reasonable notice in the app or by email for material changes before they take effect.
Stavros Papapantelis
Koskinou, Rhodes, Greece
Privacy enquiries: support@snapui.app
See also our Terms of Use.