Privacy Policy

1. Who we are

Snagga ("we", "us", "our") makes a snagging and site-inspection app for construction teams. We have built it to be privacy-first: we do not track you, we do not sell data, and your project data stays under your control. SNAGGAAPP LTD (a company registered in Scotland, company number SC894256, registered office 5 South Charlotte Street, Edinburgh, EH2 4AN) is the data controller for the limited information described below. You can reach us at support@snagga.app.

For the content you create, you are the one in control: it lives on your device and in storage you own. The one exception is when you send work to somebody else, and section 4 explains exactly what happens then.

2. The short version

• We do not gather personal information about you to profile, advertise to, or sell.
• There is no Snagga account. You do not register, and we hold no username, password or profile.
• Your snags, photos, notes and project data live on your device, and in your own cloud storage if you choose to back up.
• When you send work to a subcontractor, it is encrypted on your device before it leaves. We hold only scrambled data we cannot read, briefly, and then it is deleted.
• We use no advertising and no cross-site tracking in the app or on this website.
• The app never asks for your location and does not record where you are.

3. Your snags, photos & projects

The content you create in Snagga — snags, photos, notes, drawings, checklists and project details — is stored on your device. If you choose to back up, a copy is written to your own connected cloud storage (your Google Drive or Microsoft OneDrive), which you control. We do not keep a copy of your projects on our systems and we cannot read them. You can delete everything at any time from your device or your cloud provider.

Backup is something you switch on; it is not automatic. Restoring a backup creates a fresh copy of the project rather than merging into an existing one.

4. Sending work to someone else

When you issue a package of snags to a subcontractor, that package has to travel. You can send it as a file, through your own Google Drive or OneDrive, or over Snagga's transfer service. If it goes over our transfer service, this is what happens.

• The package is encrypted on your device with AES-256-GCM before any of it is uploaded.
• The key never reaches us. It travels inside the link you share, so only someone holding that link can open the package. Treat the link like the work itself — anyone you forward it to can read it.
• What we hold is ciphertext we cannot read. We can see a randomly generated package reference, how many pieces there are and how big they are, and when they were uploaded. We cannot see your photos, your notes, or who your client is.
• Encrypted packages are stored on Cloudflare R2 in EU jurisdiction. Cloudflare, Inc. acts as our sub-processor.
• Packages are deleted once collected, and in any case expire on a backstop of 90 days for issued work and 60 days for returns.
• The link carries the job name and your company name so the recipient knows what they have been sent. These are not encrypted, only encoded — so do not put anything confidential in a project name you intend to share.

Encrypted personal data is still personal data in law, so we do not claim to hold none. What we claim is narrower and true: we hold only scrambled data we cannot read, for as short a time as the job allows.

5. Photos and what is in them

Snagga reads the capture time from a photo so a report can show when a defect was actually seen, rather than when it was typed up. That is the only thing we read out of a photo.

The app never requests your location. There is no location permission, and no GPS coordinate is stored against a snag. Where a snag is on site comes from what you type and where you drop the pin on the drawing.

One thing worth knowing: standard-quality photos are resized on your device, which strips the camera's embedded data along the way. If you turn on full-quality photos, the original file is kept as-is — so if your phone's camera writes GPS into its photos, that stays in the file. Nothing is sent to us either way, but it travels with the photo into a report or a package.

6. Sign-in & cloud storage

Snagga does not require an account with us and never asks you to create one. If you connect a cloud provider to back up or to share work, you sign in with that provider directly. We never receive your password.

• Google Drive: we ask for the narrow drive.file permission, which limits us to the files the app itself creates. We cannot see the rest of your Drive.
• Microsoft OneDrive: Microsoft's equivalent permission (Files.ReadWrite) is broader than Google's and grants access to your OneDrive files. We only ever use it to write and read Snagga's own backups and packages, but we would rather tell you the scope is wider than pretend otherwise.

Sign-in tokens are held in your device's secure storage. You can disconnect at any time, from within the app or from your provider's own security settings.

7. Purchases

Snagga Projects and Snagga Management are sold as subscriptions through the Apple App Store and Google Play, and through the Microsoft Store once the Windows app is listed there. Those stores take the payment and manage the subscription; we receive only confirmation that a subscription is active. We do not see or store your card or bank details.

8. When you contact us

If you email support@snagga.app, we receive your email address and whatever you choose to include.

If you use the contact form on this website, we receive the name, email address, company (if you give one), topic and message you send. It reaches us as an email delivered by Resend, our email delivery provider, whose servers are in the EU. We use it only to reply and to help with what you have asked, and we keep it no longer than we need to.

9. Website analytics & cookies

This website uses no advertising or tracking cookies. We do not use Google Analytics and we are not part of any advertising network.

We do measure how the site is used, with Cloudflare Web Analytics. It tells us how many times a page was viewed, which pages people look at, roughly which country a visit came from, what kind of browser and device was used, and how quickly pages loaded. It sets no cookies, stores nothing on your device, and creates no identifier that could recognise you from one page to the next, from one visit to the next, or on anybody else's website. We can see that a page was viewed; we cannot see who viewed it. Cloudflare, Inc. processes this on our behalf.

The only thing this site stores on your device is a single preference — your light or dark theme choice — kept in your browser's local storage, which never leaves your device.

Because nothing is stored on or read from your device for analytics, no cookie banner is needed. Where this basic, non-identifying measurement involves personal data at all, we rely on our legitimate interest in understanding and improving our own website. If we ever adopt analytics that could identify you, we will ask your permission first.

10. Your rights

Even though we hold very little about you, your UK GDPR rights — to access, correct, delete, or object to the use of any personal data we do hold — still apply. Email support@snagga.app and we will help. For content stored on your device or in your own cloud, you control it directly. You can also complain to the UK Information Commissioner's Office (ICO).

11. Changes to this policy

If our data practices change — for example when we add new features — we will update this page and the "last updated" date above.

12. Contact us

Questions about privacy? Email support@snagga.app or message us on WhatsApp.

SNAGGAAPP LTD, 5 South Charlotte Street, Edinburgh, EH2 4AN, Scotland.