Privacy at SnapLingo
This privacy policy applies to the SnapLingo mobile application ("Application") developed by Nirmal Jeffrey Bernard Wilson ("Service Provider") as a Freemium service. This service is provided "AS IS".
How you use the Application
SnapLingo uses anonymous Firebase authentication. We do not require or collect your email address, name, or other personally identifying information at sign-up. A unique anonymous user identifier (Firebase UID) is generated to associate your subscription and usage with your device.
What data does the Application collect?
- Photos. When you snap or select a photo to learn a word, that photo is transmitted to our backend (Firebase Cloud Functions) and to our third-party AI provider to recognise the object and generate the word. We do not store your photos on our servers. They are processed in real-time and discarded.
- Anonymous user identifier (Firebase UID). A unique anonymous ID generated per device.
- Your words. The words you save (target word, translation, phonetic guide, and example sentences) are stored so your wordbook and mini-games work. These are text, not photos.
- Language settings. The language you know and the language you are learning.
- Device information. OS version, device model, app version, locale.
- IP address. Logged by our backend for abuse detection and rate limiting.
- Approximate location. Country/region derived from your IP address. We do not access GPS or precise location.
- Crash logs and analytics. Crashes, screen views, and feature usage events via Firebase Crashlytics and Firebase Analytics.
- Push notification token. If you enable notifications, your device's Firebase Cloud Messaging token is stored to deliver pushes.
- Purchase history. Subscription state and transaction events via RevenueCat.
How is AI used and which providers process my data?
SnapLingo uses a third-party AI provider to recognise the object in your photo and generate a vocabulary card for it:
- OpenAI — our vision analyzer. The photo you snap is transmitted via API and analysed to identify the object and produce the word in your target language, its English translation, a phonetic guide, and two example sentences. OpenAI retains API data for up to 30 days for abuse monitoring per their API data usage policies, then deletes it. Your photos are not used to train AI models.
SnapLingo returns text only — a word, translation, phonetics, and examples. It does not generate or return any AI images of you or your surroundings.
All photo transmission is encrypted in transit (HTTPS / TLS).
This provider acts as a data processor. It is contractually bound (through a Data Processing Agreement, and for EU/UK users Standard Contractual Clauses) to protect your data to the same standard described in this policy, to use it only to perform the requested processing, and not to train its AI models on it. We confirm that this provider offers the same or equivalent data protection that we provide.
Before your photo is sent to our AI provider, SnapLingo asks for your explicit consent. You must agree before the snap-to-learn feature is used. You can withdraw consent at any time by not using the camera feature and by contacting us to delete any data tied to your anonymous user identifier.
AI-generated content disclosure
The words, translations, phonetic guides, and example sentences shown in SnapLingo are generated by AI. AI can make mistakes — a word may be mis-recognised, a translation may miss nuance, gender, or regional variation, and an example sentence may read imperfectly. Treat SnapLingo's output as a learning aid, not an authoritative translation, and double-check anything important before you rely on it.
Information collected automatically
In addition to the categories above, the Application may collect anonymized telemetry: type of mobile device, mobile operating system, app version, and information about how you use the Application. This is used to improve the product.
Does the Application collect precise real-time location?
No. SnapLingo does not access GPS or precise device location. Approximate country/region is derived from your IP address only.
Third parties that may receive your information
The Application uses third-party services that have their own privacy policies. Below are the providers:
- Google Play Services
- Firebase (Auth, Firestore, Cloud Functions, Cloud Messaging, Analytics, Crashlytics)
- RevenueCat — subscription management
- OpenAI — object recognition and vocabulary generation
- Apple App Store / Google Play — payment processing
The Service Provider may disclose information:
- as required by law (e.g. subpoena or similar legal process);
- when disclosure is necessary in good faith to protect rights, safety, investigate fraud, or respond to a government request;
- with trusted service providers operating on our behalf, who do not have an independent right to use the data and are bound by this privacy policy.
Device permissions SnapLingo requests
- Camera — required to snap a photo of an object so we can recognise it and teach you the word. Photos are transmitted for processing and not retained on our servers.
- Photo library — optional. Used only when you choose to learn a word from an existing image on your device instead of the live camera.
- Notifications — optional. Used to alert you about new features, streak reminders, or subscription updates. Declining notification permission does not affect core app functionality.
You can revoke any of these permissions at any time from your device's Settings.
Your rights under GDPR (EU/UK users)
If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
- Right of access — request a copy of your data.
- Right to rectification — request correction of inaccurate data.
- Right to erasure ("right to be forgotten") — request deletion of your data.
- Right to data portability — request your data in a machine-readable format.
- Right to object — object to processing of your data.
- Right to restrict processing — request that we limit how we use your data.
- Right to withdraw consent at any time.
To exercise these rights, contact nirmal.jeffrey@vaazhstudios.com. The lawful basis for our processing is the performance of a contract (the snap-to-learn service you have requested).
International data transfers
Our backend operates on Google Cloud (US) and our AI provider (OpenAI) is based in the United States. Personal data of EU/UK users is transferred to the United States under Standard Contractual Clauses (SCCs) approved by the European Commission, as part of our agreements with these processors.
Your rights under CCPA / CPRA (California users)
If you are a California resident, you have the right to know what personal information we collect, the right to request deletion of your personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. Contact nirmal.jeffrey@vaazhstudios.com to exercise these rights.
Opt-out rights
You can stop all collection of information by uninstalling the Application using the standard uninstall process on your device or via the app marketplace. To request deletion of any data tied to your anonymous user identifier, contact nirmal.jeffrey@vaazhstudios.com.
Data retention
The Service Provider retains user-provided data only as long as you use the Application and for a reasonable time thereafter. Photos are not retained on our servers — they are processed in real-time and discarded. Our AI provider may retain a transmitted photo for a short period (OpenAI up to 30 days) for abuse monitoring, then deletes it. The words you save are retained until you delete them or uninstall. Automatically collected analytics are retained for up to 24 months and may then be aggregated. To request deletion of your data, contact nirmal.jeffrey@vaazhstudios.com.
Children's privacy
The Service Provider does not knowingly solicit data from or market to children under the age of 16. The Application is not directed at anyone under 16. The Service Provider does not knowingly collect personally identifiable information from children under 16. If we discover that a child under 16 has provided personal information, we will immediately delete it from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact nirmal.jeffrey@vaazhstudios.com so that we can take appropriate action.
How is your information kept secure?
The Service Provider provides physical, electronic, and procedural safeguards to protect information we process and maintain. We limit access to authorized parties who need that information to operate, develop, or improve the Application. Photo transmission is encrypted in transit (HTTPS/TLS). API keys for third-party providers are stored in Google Cloud Secret Manager, never on the device. App Check (App Attest on iOS, Play Integrity on Android) is used to validate that requests come from the genuine SnapLingo app. Although we endeavor to provide reasonable security, no system can prevent all potential security breaches.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time. The Service Provider will notify you of any changes by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly. Continued use of the Application is deemed approval of all changes.
Consent
By using the Application, you consent to the Service Provider processing your information as set forth in this Privacy Policy.
Contact
If you have any questions about privacy while using the Application, please contact nirmal.jeffrey@vaazhstudios.com.