Privacy Notice

This notice explains how Snappy handles your personal data. Snappy is operated by Hayden Montes as a sole proprietor in Nebraska, USA. Hayden Montes is the data controller for the information described here: we decide why and how it is processed, and we are responsible for keeping it safe.

What we collect and why

• Account data — email address, password credentials (stored hashed by our authentication provider), Google sign-in identifiers. Used to create and secure your account. Legal basis: performance of our contract with you.
• Profile data — the name you want to be called and the kinds of support you want from Snappy. Used to personalise conversations. Legal basis: contract.
• Conversation content — messages you send, Snappy's replies, tagged moments, notes and journal entries. Used to provide the service and let you revisit your history. Legal basis: contract.
• Mood entries — the moods and reflections you record, which may reveal information about your wellbeing. Used to show your charts, streaks and insights. Legal basis: your consent, given by choosing to record them; you can delete them at any time.
• Voice audio — when you use voice mode, audio is captured on your device and sent for transcription and speech synthesis. Wake-phrase listening happens locally in your browser. Audio is processed to produce your reply and is not kept as a long-term recording. Legal basis: contract.
• Settings and preferences — voice, wake phrase, sensitivity, reminders, quiet hours and privacy-lock settings (PIN stored only as a hash; Face ID / Touch ID stays on your device). Legal basis: contract.
• Usage, device and technical data — message counts against your daily quota, feature usage, device and browser type, IP address, and error logs. Used for security, fraud prevention, abuse limits, troubleshooting and improving the product. Legal basis: legitimate interests.
• Support messages — what you send us when you ask for help. Used to answer you. Legal basis: legitimate interests.

Who we share data with

• Service providers / subprocessors — cloud hosting and database providers, and the AI providers that generate replies, transcribe speech and synthesise voice. They process data on our instructions under contract.
• Payments and Merchant of Record — Stripe, for the sale of Snappy Plus, subscription management, payments, invoicing and tax compliance. Stripe handles your payment details directly; we never receive your full card data.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect rights and safety.

We do not sell your personal data and we do not use your conversations to advertise to you.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account, conversation, note, journal and mood data is kept while your account is active, plus a short grace period. Deleting an item in the app removes it from your account; deleting your account removes your data, and anything retained for legal, tax or security reasons is deleted or anonymised once it is no longer needed. Usage logs are kept for a limited period.

Your rights

Depending on where you live, you may ask us to give you access to your data, correct it, delete it, restrict or object to our processing, provide it in a portable format, or withdraw consent. Many of these you can do yourself: export or delete chats, clear history, and reset your data from Settings. Contact us in-app to exercise any right; we respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage with our cloud provider, row-level access rules so only you can read your own records, hashed credentials, and an optional PIN or Face ID / Touch ID lock for your settings and conversation history.

Cookies and local storage

Snappy uses only essential cookies and browser local storage — to keep you signed in, hold your session, and cache your settings and drafts on your device. We do not use advertising or cross-site tracking cookies. You can clear this data through your browser settings or from Snappy's Settings screen, though signing in again will be required.

Children

Snappy is not intended for children under 13 (or the minimum age in your country).

Contact

For any privacy question or request, reach Snappy through the in-app support option or our published support contact address.