Privacy Policy

Who operates WhatSnap

WhatSnap is operated by RiverVent LLC (“RiverVent”, “we”, “us”). We are the data controller for the personal data described below. Contact us any time through our support page.

Photos and camera access

WhatSnap only opens your camera after your browser grants permission, and only on the scan screen. Nothing is recorded continuously. When you press the shutter or choose a photo, the identification runs inside your own browser on this device. Ordinary scanning, Deep Analyze and follow-up questions do not upload your photo to us and do not send it to any outside AI company.

• Photos you snap and never send are never uploaded. There is no cloud copy to delete.
• The first time you use WhatSnap on a device, it downloads the files it needs to do this work locally. That download is a static file transfer; your photos are not part of it.
• A small thumbnail and the result are saved in your own browser’s storage so your recent scans are there when you return. Clearing recent scans or your browser data removes them. That history never leaves your device.
• WhatSnap does not attempt to identify individual people, and we ask you not to use it for that.

Account and usage data

We collect the minimum needed to run accounts, delivery and billing:

• Email address and authentication identifiers, including Google sign-in identifiers.
• Your subscription status and renewal dates.
• Payment and subscription identifiers returned by our payment provider.
• Anything you write to us through the support form.
• Standard server logs, including IP address, used for security, reliability and fair-use rate limiting of our cloud delivery.

We use this data to provide accounts, delivery, and billing; to keep WhatSnap secure and prevent abuse; and to meet legal requirements such as tax and accounting rules.

Who we share data with

• Paddle.com Market Ltd is our reseller and Merchant of Record. Paddle processes payments, billing, and taxes. We never see or store your card details.
• Our hosting provider supplies the database, sign-in, private file storage, and hosting used for accounts and Smart Snap delivery.
• Professional advisers and authorities where the law requires it.

We do not send your photos to any third-party AI provider. Some of the providers above operate outside the UK and EEA. Where data is transferred internationally, it is protected by standard contractual clauses or an equivalent safeguard offered by the provider.

How long we keep data

Account records are kept while your account exists and for a short period afterwards, then deleted or anonymised. Support messages are kept for up to 24 months. Billing records are retained by Paddle for the period tax law requires. Scan history lives only in your browser until you clear it. Smart Snaps are deleted as described below.

Smart Snaps you send

Sending a Smart Snap is the one part of WhatSnap that uses the cloud. When you tap Send, we upload that photo, the short understanding shown with it, and any note you add, into private storage so the person you send it to can receive it. The link you share contains a long random token and the page it opens is marked so search engines do not index it.

Smart Snaps can be opened once. The recipient has to tap Open; the photo is then handed to their browser and our copy of the file and its record is deleted immediately. Anyone opening the same link afterwards is told it has already been viewed. A Smart Snap that is never opened expires after 7 days and is deleted.

Please still treat the link as the key until it is opened: whoever holds it first can view that Smart Snap. The photo is transferred over an encrypted connection and held in private storage, but it is not end-to-end encrypted, so in that short window we are technically able to access it. Only send Smart Snaps you are happy for the recipient to see.

Location

Location is optional and off unless you ask for it. We never request it when you first open WhatSnap, and nothing stops working if you refuse it. If you tap “Use location to improve this result”, your browser asks your permission, and we turn the coordinates into a rough place name (about a one-kilometre area) to give the analysis some context. We do not store your coordinates, put them in links, or record them in our usage statistics, and we never track you in the background or keep a location history.

Smart Snaps do not include location unless you switch on “Include location” before sending. When you do, the person receiving it sees only the rough place name, not exact coordinates.

Your rights

Depending on where you live, you can request access to your data, correction, deletion, restriction, portability, or object to processing, and you can withdraw consent where we rely on it. Write to us through the support page and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection authority.

Children

WhatSnap is not intended for children under 13 (or the minimum age of digital consent where you live). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted while it travels, and access to our systems is restricted. Account data is kept separate so one account cannot read another account’s information. No system is perfectly secure, but we take practical steps to protect your information.

Cookies and local storage

We use only essential storage: a sign-in session cookie/token, a dismissal flag for the install banner, and your local scan history. There are no advertising trackers or third-party analytics services on this site. Clearing site data removes all of it.

Product analytics

We record minimal first-party product events in our own database so we can understand which features are used and whether they work: for example that a scan was started, succeeded or failed, which broad category was identified, which action button was tapped, and when pricing or checkout was opened. Each event stores an event name, an optional category or action label, a timestamp, and your account ID where you are signed in.

These events never include your submitted photos, extracted document text, the wording of your follow-up questions, your email address, or any other scan content. We do not use a third-party analytics or advertising SDK, and this data is not sold or shared for marketing.