Privacy Policy

Last updated 10 November 2026

1. Controller

[COMPANY LEGAL NAME], [REGISTERED ADDRESS], Greece (VAT [NUMBER]) is responsible for your personal data. Contact: [CONTACT EMAIL].

2. What we collect

Account: e-mail, password (stored encrypted by our provider), username, display name, bio, website, date of birth (to check you are 18+; never shown to others). Content: pins (photos, videos, voice captions and video sound on Influencer and Business, captions, hashtags, place name, the location you choose, timing, pin effect), comments, likes, saves, follows, messages and group chats, reports. Microphone: used only while you record a video with sound or a voice caption (Influencer and Business); nothing is recorded otherwise. Location: your phone's location only when you use a location feature (Use my location, Nearby now, unlocking a time capsule, the “taken on location” check). For “taken on location” the server keeps only yes/no, never where your phone was. Device: a push-notification token if you allow notifications. Usage: pin views and review-link clicks (counts shown to Business accounts) and technical logs.

3. Why we use it (legal basis)

To run the service you asked for (contract): accounts, posting, map, chats, notifications, plans. To keep Snappora safe and meet our legal duties (legal obligation / legitimate interest): age check, word filter, reports, rate limits, fraud and abuse prevention, answering authorities. Push notifications only with your permission (consent), which you can withdraw in Settings or on your phone.

4. Who sees what

Public pins (photo, caption, place, username) are visible to everyone on the map; on a private account only your followers see them. Coordinates and directions are shown to viewers on Explorer and higher. Messages are visible only to the people in the chat. Your e-mail and date of birth are never shown.

5. Service providers

Supabase (database and login; servers in Frankfurt, EU). Cloudflare R2 (storage of pin photos, videos and voice captions; data kept in the EU). Expo / 650 Industries (sending push notifications, USA), Google Firebase Cloud Messaging and Apple Push Notification service (delivery to your phone). Mapbox (the map and satellite imagery, USA; your phone requests map data from Mapbox, so Mapbox receives your IP address and the map area, plus anonymous usage data (telemetry) that you can switch off with the ⓘ button on the map). OpenAI (automatic safety check of new pins: the text and photos / video frames of a pin are sent for classification; under OpenAI's API terms this data is not used to train its models). [Payment providers when paid plans start: Apple App Store, Google Play]. Transfers outside the EU use the EU-US Data Privacy Framework or Standard Contractual Clauses.

6. How long we keep it

Pins: until their live time ends, then deleted with their files within about a day. A pin you delete yourself loses its files within about an hour. On Adventurer, Influencer and Business your own pins are kept for you until the end of January of the next year (for “Year on the map”), then deleted. Account data: until you delete your account. Reports and moderation records (decisions, warnings, suspensions): up to 12 months after closing, longer only when the law requires it. Push tokens: until you sign out, switch off notifications, or delete your account. Chat messages: deleted for good after the time set by the plan of the person who started the chat (24 hours on Traveller, 48 hours on Explorer, 1 week on Adventurer, 1 month on Influencer and Business), counted from when each message was sent; a reported message is kept until a moderator has looked at it.

7. Your rights

You can access, correct, download, delete or restrict your data, object to processing, and withdraw consent at any time. Most of this you can do in the app (edit profile, delete pins, Settings → Delete account). For anything else write to [CONTACT EMAIL]; we answer within one month. You can complain to the Hellenic Data Protection Authority (www.dpa.gr) or the authority in your EU country.

8. Security

Data is encrypted in transit. Access is limited by strict database rules: photos and videos are in private storage and open only for people allowed to see the pin, through short-lived links.

9. Age

Snappora is only for adults (18+). We do not knowingly collect data from children. If you believe a child uses Snappora, report the account or write to us.

10. Changes

If we change this policy in a way that matters, we tell you in the app.