Privacy Policy

Last updated: 28 August 2026

ShadowSnap (“we”, “us”, “our”) is operated by Rauff M Imasdeen. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. By creating an account or using the ShadowSnap app, you agree to this policy.

1. Information we collect

Information you provide

Account details: your first and last name, email address, and mobile number.
Security credentials: your account password, vault PIN, and security question answers. These are stored only in a hashed (one-way, unreadable) form — we cannot read or recover them.
Your photos: images you upload, which are encrypted before storage.

Information collected automatically

Usage and device data: basic technical information needed to operate the service (e.g., device type, app version, and storage usage).

We do not use advertising, and we do not track you across other apps or websites.

2. How your photos are protected

Each photo is encrypted with its own unique key at the time of upload and stored only in encrypted form. Plain (unencrypted) copies are not retained in storage. Access to your photos requires your account login and your PIN.

We operate a custodial encryption model: we manage the encryption keys so that we can keep the service running, perform maintenance, and comply with valid legal obligations. We will not access, view, or disclose your photos except where you ask us to, where it is necessary to operate or protect the service, or where we are legally required to.

Your PIN and security answers are yours alone. Because we store them only in hashed form, we cannot recover them. If you lose them, the photos they protect cannot be unlocked. Please keep them safe.

3. How we use your information

To create and manage your account and authenticate you.
To store, encrypt, and deliver your photos when you request them.
To process subscriptions and enforce storage limits.
To send service messages (e.g., password resets, storage and billing notices).
To provide customer support and improve the service.
To detect and prevent abuse and keep the service secure.

4. Service providers we share data with

We use trusted third parties to operate ShadowSnap, sharing only what is needed:

Cloudflare R2 — encrypted photo storage.
Our hosting provider — runs our servers and database.
SendGrid — sends transactional emails (e.g., password resets).
Apple App Store / Google Play — process and manage subscription payments. We do not receive or store your full payment card details.

We do not sell your personal information.

5. Data retention

We keep your account information and photos for as long as your account is active. If you downgrade or cancel a paid plan and your stored data exceeds the free allowance, your account becomes read-only for a 30-day grace period during which you can download your photos or re-subscribe; after that period, photos above the free limit may be deleted. If you delete your account, we delete your photos and personal data, except where we must retain limited records to meet legal or accounting obligations.

6. Your rights and choices

Access, update, or delete your photos at any time in the app.
Request deletion of your entire account and associated data.
Depending on where you live, you may have rights to access, correct, port, or erase your personal data, and to object to or restrict certain processing.

To exercise any of these, contact [email protected].

7. Children's privacy

ShadowSnap is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will remove it.

8. Security

We use encryption and reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, but we work to safeguard your information and to protect the encryption keys that secure your photos.

9. Changes to this policy

We may update this policy from time to time. We'll post the updated version here and revise the “Last updated” date. Significant changes may also be communicated in the app.

10. Contact us

Rauff M Imasdeen — [email protected]