🔐 SlideSnap Privacy Policy

Last Updated: June 30, 2026 Effective Date: June 30, 2026

This Privacy Policy describes how SlideSnap ("we", "us", or "our") — operated by an independent developer based in Hong Kong — collects, uses, and shares information about you when you use SlideSnap (the "Service") on iOS, Android, or the Web.

SlideSnap helps you capture speeches, meetings, and notes, and turn them into reviewable knowledge. We are committed to collecting the minimum information needed to provide the Service and to protecting your privacy.

1. Information We Collect and How We Use It

1.1 Account Information

When you register or sign in, you provide an email address (or a third-party identifier such as Apple ID or Google Account). Authentication is handled by Supabase Auth. Local authentication tokens are stored encrypted on your device via MMKV.

You may close your account at any time via Settings → Account → Delete Account. After deletion, we delete or anonymize the data associated with your account, except where retention is required by law.

1.2 Content You Create

To provide core functionality, we collect content you create within the Service:

• Audio recordings — uploaded in chunks to our storage for transcription.
• Photos — uploaded so you can review them later and so our AI can extract content (text, slide content).
• Notes — text and images you type or paste into the Notes feature.
• Transcripts — generated from your recordings by our speech-to-text providers.
• AI-generated outputs — summaries, share images, slide decks (.pptx) derived from your content.
• Tags and review metadata — labels you apply to your content and review-session statistics.

1.3 Payments and Subscriptions

If you subscribe to a paid plan, transactions are processed by Apple App Store, Google Play, or Stripe (via RevenueCat for the mobile stores). We do not receive or store your full payment card number or bank account. We retain only what is necessary to maintain your subscription status (such as subscription state, store-issued transaction IDs, and expiration dates).

1.4 Device and Log Information

To operate the Service, detect abuse, and improve performance, we automatically collect:

• Device model, OS version, screen resolution, locale
• IP address, network type (Wi-Fi or cellular)
• App version, crash logs, performance metrics
• Feature-usage frequency and duration (in de-identified form)

1.5 Notifications

When you enable features such as review reminders, we send local notifications at the times you specify.

1.6 Service Improvement

We may use de-identified, aggregated usage data (which does not personally identify you) to improve our algorithms, optimize AI prompts, and train internal models. We do not use the content of your recordings, photos, or notes to train AI models without your explicit consent.

1.7 Sensitive Personal Information

The Service may involve sensitive personal information: email address, account password, device identifiers, behavioral logs, audio recordings, photos, and AI-generated content derived from them. Please consider what you record and upload.

2. How We Share Information

We do not sell your personal information. We share data with third parties only as described below:

2.1 Service Providers

• AI model providers: We send your transcripts, photo extracts, and prompts to AI providers (such as OpenAI and selected API proxies) to generate summaries, images, and slides.
• Payment processors: Apple App Store, Google Play, Stripe, and RevenueCat process subscription transactions.
• Cloud infrastructure: Supabase (database, storage, Edge Functions).

2.2 Legal Requirements

We may disclose your information when we believe in good faith that disclosure is required by applicable law, regulation, legal process, or a valid governmental request.

2.3 Business Transfers

If we undergo a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will require the new owner to honor this Privacy Policy or notify you of changes.

3. International Data Transfers

Our core backend (database, storage, AI inference, Edge Functions) is provided by Supabase, with servers located in the United States and other regions. By using the Service, you understand that your data will be transferred to and processed outside your country of residence.

For users in the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission, together with supplementary measures, as our lawful basis for these transfers.

4. Security

• Transit encryption: all communication between client and server uses HTTPS/TLS.
• Storage encryption: sensitive data is encrypted at rest; local auth tokens are encrypted on-device via MMKV.
• Access controls: Row-Level Security in our database limits each user's data to that user only.
• Backups: periodic backups guard against data loss.

No system is perfectly secure. In the event of a personal-information security incident, we will notify affected users in accordance with applicable law.

5. Your Rights

You have the following rights with respect to your personal information:

• Access and portability — request a copy of the data we hold about you, or export it from the in-app Knowledge Base export.
• Rectification — edit or correct content you've created.
• Erasure — delete your content or your entire account.
• Restriction and objection — limit or object to certain processing.
• Withdrawal of consent — revoke permissions (camera, microphone, photos, notifications) from your device's system settings.

To exercise these rights, edit or delete content directly in the app, or email privacy@slidesnap.ai. We will respond within 30 days.

5.1 EEA/UK Residents (GDPR)

Our legal bases for processing are: (a) performance of a contract (to provide the Service you signed up for), (b) legitimate interests (security, fraud prevention, service improvement), and (c) your consent (for optional features like push notifications). You have the right to lodge a complaint with your local supervisory authority.

5.2 California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, email privacy@slidesnap.ai.

6. Third-Party Services

Service	Provider	Purpose
Supabase	Supabase Inc. (US)	Auth, database, storage
OpenAI	OpenAI L.L.C. (US)	LLM, transcription, image generation
RevenueCat	RevenueCat Inc. (US)	Subscription state
Apple IAP	Apple Inc. (US)	iOS subscription billing
Google Play Billing	Google LLC (US)	Android subscription billing
Stripe	Stripe Inc. (US)	Web subscription billing
Expo	Expo Inc. (US)	Over-the-air updates

Each service has its own privacy policy. Where required, we have entered into data processing agreements with these providers.

7. App Permissions

iOS: camera, photo library, microphone, notifications, local authentication.

Android: CAMERA, READ_MEDIA_IMAGES, RECORD_AUDIO, MODIFY_AUDIO_SETTINGS, POST_NOTIFICATIONS.

You may grant or revoke any permission in your device's system settings.

8. Children

SlideSnap is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact privacy@slidesnap.ai and we will delete it.

For users in the European Economic Area, the minimum age is 16 unless a lower age (down to 13) is permitted under the law of your member state.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through in-app notice or email. The "Last Updated" date at the top of this page reflects the most recent revision.

10. Contact Us

For questions, complaints, or requests:

• General: hi@slidesnap.ai
• Privacy: privacy@slidesnap.ai
• Website: https://slidesnap.ai

We will respond to inquiries within 30 days.