SnappetPrivacy Policy
- Data controller
- Data we collect
- Purposes and legal basis
- Service providers
- Retention and deletion
- Your rights
- Children
- Security
- Changes
- Contact
1. Data controller
The Snappet mobile app and the snappet.app website (the "Service") are operated by SSD Creative Agency ("Snappet", "we"). Address: Küçükbakkalköy Mah. Dereboyu Cad. No: 3A İç Kapı No: 48, Ataşehir / İstanbul, Türkiye. Contact: sales@ssdcreative.com.
This policy fulfils our information duties under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data we collect
| Data | Source | Examples |
|---|---|---|
| Account details | You | Name, email address, password (stored only as a salted hash) |
| Pet details | You | Name, species, breed, date of birth, photo |
| Care records | You and household members | Feeding, water, toilet and walk entries; date, time, who logged it, notes |
| Health records | You | Vaccinations, medication, vet visits, next appointment, clinic name, notes |
| Reminders | You | Task text, date, repeat, assigned member |
| Household and membership | You | Household name, member list, invited email addresses |
| Device and notifications | Your device | Push notification token, platform (iOS/Android) |
| Subscription | App stores and RevenueCat | Subscription status, product id, renewal date; payment card details never reach us |
| Technical logs | Automatic | Error and operation logs (request id, timestamp, user id), IP address (transient, in server logs) |
We do not collect location, contacts or advertising identifiers. We access photos only when you pick one, and only the photo you picked.
3. Purposes and legal basis
- Providing the Service (performance of a contract): creating your account, syncing records with household members, delivering reminders on time.
- Sending notifications (performance of a contract and your consent): when a household member logs an entry or a reminder is due. You can turn notifications off in your device settings at any time.
- Managing subscriptions (performance of a contract): unlocking Pro features, verifying trial and renewal status.
- Security and abuse prevention (legitimate interest): rate limiting, duplicate prevention, audit logs.
- Legal obligations: keeping legally required records and responding to lawful requests from authorities.
We do not use your data for profiling, behavioural advertising or sale to third parties.
4. Service providers
Your data is shared with the processors below, each only for the stated purpose.
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase (Google LLC) | Authentication, database, file storage, server functions | USA (us-central1) |
| Expo (650 Industries, Inc.) | Delivering push notifications to devices | USA |
| RevenueCat, Inc. | Verifying and managing subscription status | USA |
| Apple App Store / Google Play | Payments and subscription processing (subject to their own privacy policies) | Store's country |
International transfers take place under KVKK Article 9 and GDPR Chapter V, on the basis of the providers' standard contractual clauses and your explicit consent. Members of your household see the records of pets in that household and the name of whoever logged each entry; this sharing is inherent to the Service.
5. Retention and deletion
- Account and care data are kept for as long as your account exists.
- When you delete your account, your personal data is removed from our systems within 30 days; removal from backups may take up to 90 days. In other members' records your name is anonymised to "Former member".
- Push tokens are deleted when the device is unregistered or the token becomes invalid.
- Audit logs are kept for at most 12 months.
- Duplicate-prevention keys are deleted automatically after 24 hours.
You can delete your account in the app under Settings > Delete account, or by writing to sales@ssdcreative.com.
6. Your rights
Under KVKK Article 11 and the GDPR you have the right to access, rectify, erase, restrict processing, port your data and object. Send requests to sales@ssdcreative.com; we respond within 30 days. You may also lodge a complaint with the Turkish Personal Data Protection Authority or the supervisory authority in your country.
7. Children
Snappet is not directed at children under 13 and does not knowingly collect their data. If you believe a child has created an account, let us know and we will delete the account and its data.
8. Security
Data is encrypted in transit with TLS and at rest by our providers. Access is restricted by household-membership security rules, and critical writes go through server functions only. No system is completely secure; in the event of a breach we will notify you and the relevant authorities within the legally required period.
9. Changes
We may update this policy. Material changes are announced in the app or by email; the current version is always available on this page.
10. Contact
SSD Creative Agency · Küçükbakkalköy Mah. Dereboyu Cad. No: 3A İç Kapı No: 48, Ataşehir / İstanbul, Türkiye · sales@ssdcreative.com