Privacy Policy

How SnapMedic Works

What We Collect

If you choose to create a sync account, we collect:

• Email address - for account authentication
• Encrypted notes - AES-256 encrypted on your device before upload
• Sync metadata - timestamps and device identifiers for multi-device coordination

If you subscribe to Pro, we also collect:

• Email and user ID - for subscription management via RevenueCat
• Payment details - handled entirely by Apple, Google, or Stripe (we never see card info)

How We Protect Your Data

• Zero-knowledge encryption: Notes are encrypted on your device before upload. We can't read them.
• EU hosting: Data stored on secure EU servers (London, UK)
• Anonymous analytics: We collect anonymous usage statistics to improve the app (no personal data)
• Privacy scanning: The app scans for patient identifiers (NHS numbers, postcodes, names) and warns you before sync. This scanning happens locally - results are never uploaded.

Third-Party Processors

When you use sync or purchase from the shop, your data may be processed by:

Royal Mail processes shipping data (name, address) for delivery. See their privacy policy for details.

Cookies & Website Analytics

This section is about our website (snapmedic.app), not the app. We use Google Analytics 4, provided by Google Ireland Ltd, to understand how visitors use the site so we can improve it.

Analytics only runs if you opt in. When you first visit, our cookie banner asks for your consent. We set no analytics cookies and collect no analytics data unless you choose to accept. Our legal basis is your consent (GDPR Article 6(1)(a)). Your choice is stored locally in your browser (localStorage), not as a tracking cookie.

If you consent, Google Analytics sets the following cookies:

• _ga and _ga_*: Google Analytics identifiers used to count and distinguish visits. These expire after up to 2 years.

We keep this as privacy-friendly as we can:

• Google Signals and ads personalisation are switched off. Your data is only used for aggregate usage statistics, never advertising.
• IP addresses are not logged or stored by Google Analytics.
• Your data may be processed by Google on servers outside the UK and EEA. These transfers are covered by the EU–US Data Privacy Framework and Google's standard contractual clauses.

You can withdraw or change your consent at any time using the “Cookie Settings” link in the website footer or the button below. Withdrawing consent stops analytics and removes the Google Analytics cookies.

For more detail, see Google's privacy policy. You can also install the Google Analytics opt-out browser add-on to prevent analytics on any website.

Your Rights

Account recovery: We provide backup codes for account recovery if you lose email access. Learn how backup codes work.

Shop Orders

When you buy physical products, we collect:

• Name, address, email, phone (optional) - for shipping
• Order details - for fulfillment
• Payment confirmation (via Stripe) - we never see card details

Retention: Order data kept for 7 years for tax/accounting purposes. Contact us to request access, correction, or deletion (after legal retention periods).

Data Retention

• Sync data: Kept until you delete your account
• Error logs: Anonymized, kept 12 months
• Shop orders: 7 years (tax/accounting purposes)

Legal Basis (GDPR Article 6)

• Email, notes, sync metadata: Your consent
• Pro subscription: Contract performance
• Shop orders: Contract performance

Security

• AES-256 client-side encryption for sync data
• TLS 1.3 for all transmissions

For Healthcare Professionals

SnapMedic is for your personal professional notes - not patient records. Follow your organization's policies, use the privacy warnings, and avoid storing patient identifiable information. This is not a replacement for official medical records systems.

Children's Privacy

SnapMedic is for healthcare professionals and not directed at children under 16. Contact us if you believe a child has provided personal data.

Policy Updates

We'll update the "Last updated" date and notify sync users by email of significant changes. We'll give 30 days notice for changes affecting your rights.

Contact Us

Privacy questions: [email protected] (response within 48 hours)

Complaints: Contact the UK Information Commissioner's Office at ico.org.uk or your local EU data protection authority.