🔒 Privacy Policy

1Introduction

VendoSnap ("Company," "we," "our," or "us") operates the VendoSnap mobile application (the "App"). We are committed to protecting your privacy and ensuring you have a positive experience on our App.

This Privacy Policy explains our policies and practices regarding the collection, use, disclosure, and protection of your information when you use our Service and tells you about your privacy rights and how the law protects you.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our App.

2Information We Collect

2.1 Device Information

• Device model and type (iPhone, iPad)
• Operating system and version
• App version and build number
• Device language and locale settings
• Time zone information
• Unique device identifiers (IDFA when available)

2.2 Behavioral and Usage Information

• Features you use within the App
• Screen views and navigation paths
• Button clicks and user interactions
• Time spent in the App and on specific screens
• Image enhancement requests and parameters
• Style selections and preferences
• Error and crash reports

2.3 User-Provided Information

• Email address (for authentication)
• Username (for profile display)
• Photos and images (for enhancement)
• Image metadata (dimensions, format, enhancement style)

2.4 Authentication Data

• Firebase Authentication UID
• Google Account ID (if using Google Sign-In)
• Apple ID (if using Sign in with Apple)
• Sign-in timestamps
• Account creation date
• Last active date

2.5 Image and Content Data

• Original photos: Stored in your Firebase account
• Enhanced photos: Stored in your Firebase account
• Image URLs: Temporary storage for processing
• Content metadata: File type, size, format, enhancement parameters

3Analytics and Tracking Services

We use third-party analytics providers to understand how users interact with our App. These services help us improve performance and user experience.

3.1 Firebase Analytics (Google)

• Provider: Google LLC
• Purpose: Track user behavior, app crashes, and performance metrics
• Data Collected: Screen views, events, user actions, errors, device information
• Data Retention: Up to 90 days
• Privacy Policy: https://firebase.google.com/support/privacy

3.2 Amplitude Analytics

• Provider: Amplitude Inc.
• Purpose: User behavior analysis and app optimization
• Features Enabled:
  • Session Replay (100% sample rate)
  • Network Tracking
  • Session tracking
  • App lifecycle tracking
  • Frustration interaction detection
• Data Collected: All user interactions, device info, network requests, screen recordings
• Session Replay Notice: Amplitude may record your screen activity for quality assurance. See Section 6 for opt-out information.
• Privacy Policy: https://amplitude.com/privacy

3.3 Mixpanel Analytics

• Provider: Mixpanel Inc.
• Purpose: Event tracking and user analytics
• Data Collected: User events, screen views, feature usage, custom events
• Data Retention: Per Mixpanel's standard retention policy
• Privacy Policy: https://mixpanel.com/legal/privacy-policy/

4Third-Party Services

Our App uses the following third-party services:

Service	Provider	Purpose
Firebase	Google	Authentication, database, storage, functions
Google Cloud Platform	Google	Image processing infrastructure
Google AI/Gemini	Google	AI-powered image enhancement
RevenueCat	RevenueCat	Subscription management
In-App Purchases	Apple	Payment processing

Important: These third-party providers have their own privacy policies that govern their use of your data. We encourage you to review their privacy policies to understand how they handle your information.

5Photo Library and Camera Access

5.1 Why We Request Access

• Photo Library: To allow you to select existing photos for enhancement
• Camera: To allow you to take new photos for enhancement
• Photo Saving: To save enhanced photos back to your library

5.2 How Access Works

• Access is optional – the App works without these permissions
• Permissions are requested only when needed (on-demand)
• You can change permissions anytime in iOS Settings
• Photos are processed locally first, then enhanced via cloud AI

5.3 Managing Permissions

To change photo permissions:

1. Open Settings on your iPhone/iPad
2. Scroll down and tap "VendoSnap"
3. Tap "Photos" or "Camera"
4. Select your preferred permission level

6Data Retention

Data Type	Retention Period	Notes
Analytics Data	90 days	Firebase, Amplitude, Mixpanel
User Profile	Until deletion	Email, username, preferences
Photos	Until user deletes	Original and enhanced images
Session Data	30 days	For debugging and analytics
Temporary Processing	During processing only	Deleted after enhancement
Error Logs	30 days	Crash reports and debugging

7Your Privacy Rights

Depending on your location, you have the following rights:

7.1 Universal Rights (All Users)

• Access: Request and download all your data via "Export Data" in Settings
• Deletion: Delete your account and all associated data via Settings
• Correction: Update your profile information
• Portability: Export your data in standard formats
• Opt-Out: Opt out of Amplitude Session Replay by contacting support

7.2 GDPR Rights (EU/EEA Users)

• Right to be informed about data processing
• Right of access to your personal data
• Right to rectification (correction) of data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making
• Right to lodge a complaint with your data protection authority

7.3 CCPA Rights (California Users)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale or sharing of personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your rights

California Privacy Rights: Visit https://oag.ca.gov/privacy/ccpa

8Security Measures

We implement the following security measures to protect your data:

• ✓ Encryption in Transit: TLS/SSL encryption for all data transmission
• ✓ Encryption at Rest: Firebase storage encryption for stored data
• ✓ Secure Authentication: Firebase Authentication with multi-factor options
• ✓ Keychain Storage: Secure Keychain storage for credentials (no plain text)
• ✓ Automatic Session Timeout: Sessions expire after inactivity
• ✓ Regular Audits: Periodic security reviews
• ✓ No Logging of Sensitive Data: Passwords and tokens are never logged

9Children's Privacy

VendoSnap is NOT intended for children under the age of 13.

• We do not knowingly collect personal information from children under 13
• If we become aware that a child under 13 has provided us with personal information, we will delete such information immediately
• Parents who believe their child has provided information to us should contact us immediately at [email protected]

Parental Controls

Parents can use iOS Parental Controls to restrict app access for children:

1. Settings > Screen Time > Content & Privacy Restrictions
2. Set age restrictions for app categories
3. Manage app access and permissions

10Data Sharing and Disclosure

We do NOT sell your personal data to third parties.

We share data only in the following circumstances:

• Service Providers: With third-party service providers who process data on our behalf (Firebase, Google AI, RevenueCat, analytics providers)
• Legal Requirements: When required by law or legal process
• Safety: To protect our rights, privacy, safety, or property
• Aggregated Data: We may share anonymized, aggregated analytics

11International Data Transfers

Your data may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

By using VendoSnap, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than your home country.

When we transfer data internationally, we implement appropriate safeguards including Standard Contractual Clauses and Privacy Shield mechanisms.

12Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

13Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons.

When we make material changes, we will:

• Update this page and the "Last Updated" date
• Notify you via in-app notification (if significant)
• Send email notification to registered users (if significant)

Your continued use of the App after such modifications constitutes your acceptance of the updated Privacy Policy.

14Additional Information

14.1 California Online Privacy Protection Act (CalOPPE)

CalOPPE applies to operators of commercial websites and online services. VendoSnap is a mobile application that complies with CCPA requirements regarding data collection and disclosure.

14.2 Do Not Track Signals

Some browsers include a Do Not Track (DNT) feature. Currently, there is no industry standard for DNT signals. We currently process DNT requests as follows: our analytics partners may ignore DNT signals as there is no universal standard.

14.3 Advertising and Analytics Opt-Out

To opt out of Amplitude Session Replay: Email [email protected] with your request

To manage personalized advertising: Visit Apple's App Tracking Transparency settings