Privacy Policy

1. Who We Are

SnapBooks is the developer and publisher of the SnapBooks receipt scanning and expense management application. We are the data controller of personal information collected through the App.

Contact: snapbookocr@gmail.com
Website: app.nexzuku.com

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address, display name, and profile photo when you sign in via Google or other providers
• Receipt Images: Images you capture or upload for scanning
• Expense Data: Vendor names, amounts, dates, categories, currencies, and notes
• Communications: Messages you send to us via email or in-app support

2.2 Information Collected Automatically

• Device Information: Device type, OS version, unique device identifiers (Android Advertising ID, Apple IDFA)
• Usage Data: Features used, scan counts, session duration, crash reports, and error logs
• Log Data: IP address, access times, and screens viewed
• Analytics: Aggregated usage metrics via Google Firebase Analytics

2.3 Information from Third Parties

• Google Sign-In: Name, email, and profile picture (only what you authorise)
• RevenueCat: Subscription status and purchase history (payment details held by App Stores)
• Google AdMob: Advertising identifiers for ad serving

2.4 Guest Users: Identified by an anonymous device fingerprint. No name or email is collected.

3. How We Use Your Information

• Provide the Service: Process receipt images via AI/OCR and store your expense records
• Account Management: Create, authenticate, and manage your account
• Subscription Management: Track scan credits and enforce plan limits
• AI Processing: Send receipt images to AI providers for data extraction
• Analytics & Improvement: Understand usage and improve features
• Advertising: Serve advertisements to free-tier users via Google AdMob
• Security: Detect and prevent fraud, abuse, or Terms violations
• Legal Compliance: Meet obligations under applicable laws
• Support: Respond to your enquiries

4. Legal Bases for Processing (GDPR)

If you are in the EEA, UK, or Switzerland, we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the App and fulfil our agreement with you
• Legitimate Interests: Analytics, security, and product improvement where not overridden by your rights
• Consent: Advertising personalisation and any processing for which we have sought your consent
• Legal Obligation: Where processing is required by applicable law

5. How We Share Your Information

We share data only as follows:

• AI Providers (Google Gemini, DeepInfra, DeepSeek): Receipt images transmitted for OCR extraction only. No other personal identifiers sent. Each provider's own privacy policy applies.
• Google Firebase: Authentication, database, and analytics as a service provider under our direction
• RevenueCat: User identifier and purchase status for subscription management
• Google AdMob: Device identifiers and interaction data for ad serving on free accounts
• App Stores: Payment processing. We receive only purchase confirmation
• Legal Requirements: Where required by law, court order, or to protect safety
• Business Transfers: In the event of merger or acquisition, with prior notice to you
• With Your Consent: Any other sharing with your explicit consent

6. Receipt Image Processing & AI

When you scan a receipt:

1. The image is captured on-device and encoded securely
2. It is transmitted via HTTPS to our backend server
3. Our server forwards the image to an AI provider for OCR extraction
4. Structured data is returned and stored in your account
5. AI providers process the image under their own retention policies

Important: AI-extracted data may be inaccurate. You must verify all extracted data before use. SnapBooks accepts no liability for errors in AI-generated data.

We recommend not scanning receipts containing sensitive personal information beyond what is needed for expense tracking.

7. Advertising & Google AdMob

The free tier of SnapBooks displays advertisements served by Google AdMob (Google LLC). By using the free tier you acknowledge and consent to the following:

• Google AdMob collects and uses data from your device to serve relevant advertisements, including personalised and non-personalised ads
• AdMob may collect: device identifiers (Android Advertising ID / Apple IDFA), IP address, interaction data (ad impressions, clicks), and approximate location
• This data is used for ad targeting, frequency capping, fraud detection, and analytics
• SnapBooks does not control which specific advertisements are displayed and is not responsible for their content, accuracy, or legality
• Pro subscribers experience reduced advertising as described in the subscription terms

Google's advertising practices are governed by the Google Advertising Policy and Google Privacy Policy.

8. Advertising ID & Device Identifiers

SnapBooks and its advertising partner Google AdMob use the Android Advertising ID (GAID) and/or Apple Identifier for Advertisers (IDFA) to:

• Serve personalised advertisements based on your interests
• Measure ad performance and attribution
• Detect and prevent invalid ad traffic and fraud
• Generate aggregated analytics and reporting

How to opt out of personalised ads:

• Android: Settings → Google → Ads → Reset Advertising ID or select "Opt out of Ads Personalisation"
• iOS 14+: Settings → Privacy → Tracking → disable "Allow Apps to Request to Track"

Opting out means you will still see ads, but they will not be personalised based on your interests. Certain data may still be collected for fraud prevention and ad measurement purposes.

9. GDPR & Consent (EEA / UK Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following applies:

• We use Google's User Messaging Platform (UMP) to collect your consent before displaying personalised advertisements
• You will be shown a consent dialogue on first use and whenever consent is required to be refreshed
• If you do not consent, you will still see ads, but they will not be personalised
• You may withdraw or change your consent at any time via: Settings → Privacy & Consent in the App

Our legal bases for ad-related processing under GDPR are:

• Consent — for personalised advertising and targeted ad delivery
• Legitimate Interests — for fraud prevention and non-personalised ad measurement

To exercise your data rights or withdraw consent, contact: snapbookocr@gmail.com

10. Data Retention

We retain your personal data for as long as: your account is active; it is necessary to provide the Service; required by applicable law; or necessary to resolve disputes or enforce agreements.

Retention periods by data type:

• Account data (name, email): Retained until account deletion, then deleted within 30 days
• Receipt images & expense data: Retained while account is active; deleted within 30 days of account deletion
• Usage & analytics data: Retained for up to 24 months in aggregated or anonymised form
• Log & crash data: Retained for up to 90 days
• Advertising data: Governed by Google AdMob's own retention policies

Anonymised, aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

11. Data Deletion & Account Removal

You have the right to delete your account and all associated personal data at any time.

How to delete your data:

• In-App: Settings → Account → Delete Account
• By Email: Send a request to snapbookocr@gmail.com with subject "Delete My Account – SnapBooks"

Upon receiving a valid deletion request, we will:

• Delete or anonymise all your personal data within 30 days
• Confirm deletion via the email address associated with your account
• Retain only data required by applicable law (e.g. financial records), clearly separated and restricted

Note: Data held by third-party providers (Google, AdMob, RevenueCat) must be deleted directly with them under their respective policies.

12. Data Security

We implement these security measures:

• All data transmitted using TLS/HTTPS encryption
• Firebase security rules restrict access to authenticated users only
• Industry-standard token-based authentication (JWT)
• Payment details never stored by us — handled by App Stores and RevenueCat
• Receipt images transmitted to AI providers over encrypted connections only

13. Your Rights

All Users:

• Access and export your expense data within the App at any time
• Delete your account and data — see Section 11
• Opt out of personalised ads via device settings — see Section 8
• Contact us at any time: snapbookocr@gmail.com

EEA / UK Users (GDPR):

California Users (CCPA/CPRA):

• Right to know what personal information is collected and used
• Right to delete personal information (with certain exceptions)
• Right to opt out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

To exercise any right: email snapbookocr@gmail.com with subject "Privacy Request – SnapBooks". We respond within 30 days.

14. Children's Privacy

The App is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact snapbookocr@gmail.com immediately. We will delete such data promptly upon verification.

Users between 13 and 18 must have verifiable parental or guardian consent before using the App.

15. International Data Transfers

Your data may be processed in countries other than your own, including the United States, where data protection laws may differ from your jurisdiction.

Where we transfer personal data from the EEA or UK to third countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent frameworks as required by GDPR.

By using the App you consent to the transfer of your information to jurisdictions where our service providers operate.

16. Cookies & Tracking Technologies

The App does not use browser cookies. However, the following SDKs use device-level tracking technologies:

• Firebase Analytics: Uses device identifiers and anonymous session tokens to track app usage and crashes
• Google AdMob: Uses Android Advertising ID (GAID) or Apple IDFA for personalised ad delivery, measurement, and fraud detection
• RevenueCat: Uses anonymised identifiers for subscription and purchase tracking

You can limit tracking through device settings as described in Section 8.

17. Third-Party Services & Privacy Policies

SnapBooks integrates the following third-party services. Each has its own privacy policy governing their data practices:

• Google Firebase (authentication, database, analytics) — policies.google.com/privacy
• Google AdMob (advertising) — policies.google.com/technologies/ads
• Google Gemini (AI/OCR processing) — policies.google.com/privacy
• RevenueCat (subscription management) — revenuecat.com/privacy
• DeepInfra (AI/OCR processing) — deepinfra.com/privacy
• Google Play Store / Apple App Store (distribution and billing) — governed by their respective platform policies

SnapBooks is not responsible for data practices of third-party services. We encourage you to review their policies directly.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated Policy in the App with a revised "Last Updated" date
• Showing an in-app notification for significant changes

Your continued use of the App after changes become effective constitutes your acceptance of the updated Policy. If you do not agree, please stop using the App and delete your account.

19. Contact Us

Email: snapbookocr@gmail.com
Website: app.nexzuku.com
Privacy Requests: Email with subject "Privacy Request – SnapBooks"
Account Deletion: Email with subject "Delete My Account – SnapBooks"
Legal Notices: Email with subject "Legal Notice – SnapBooks"

We respond to all privacy-related requests within 30 days.

© 2025 SnapBooks. All rights reserved. We are committed to protecting your privacy.