You can use Snuffo’s core scanner without an account. Pet profiles and scan history stay on your phone unless you choose to sign in for backup. Analytics is off unless you opt in. We do not sell personal data or use it for advertising.
1. Who this policy covers
Snuffo is an independent, pre-incorporation project operating the Snuffo mobile apps, website, and related services. In this policy, “Snuffo”, “we”, and “us” refer to that project as the data controller for information we decide how to use.
This policy applies to Snuffo’s iPhone and Android apps and to snuffo.app. It does not cover third-party websites linked from our app or site.
2. Data we handle
Data kept on your device
Snuffo stores pet profiles, scan history, reminders, notes, app settings, consent choices, and locally selected photos in the app’s storage. Barcode and pet-food label recognition happens on your device. Label photographs are not uploaded.
Your operating system may include app data in an iCloud or Android device backup if you have enabled that platform feature. Apple or Google controls those backups.
Optional account and backup data
If you create an account, we process your email address and authentication details through Supabase. Sign in with Apple may provide an Apple relay address instead of your personal email. Snuffo can back up your selected country, pet profiles, scan history, queued product requests, and barcode contributions so they can be restored on another device. If photo sync is enabled, profile and pet avatars are stored in a private, account-scoped storage area.
Product and barcode contributions
If a product is missing, you can submit its barcode, brand and product name, label text, confirmed nutrient values, whether a label photo supported the reading, platform, app version, and submission time. The label image itself stays on your device. Signed-in submissions are initially linked to your account; anonymous submissions are not.
When you submit a product while signed in, you can choose to be credited: if you enable “Credit me in the catalog”, your Snuffo username may be shown on that product’s page once it is verified. You can leave this off on any submission, and deleting your account removes the credit.
Aggregate product counters
Opening a product’s page in the app adds one to that product’s anonymous view counter, which lets contributors see how often a product they added is looked up. The product barcode is the only data sent for this counter - no account identifier, device identifier, or usage profile - and the stored result is a single per-product total. Our infrastructure provider may process technical information such as IP address to deliver and secure the service, as with any network request.
Optional usage analytics
If you explicitly allow anonymous usage analytics, Snuffo sends a limited set of product-interaction events to PostHog’s EU service. These can include scan outcome (such as found or not found), score grade and status, whether the score came from a scan, provisional result, or catalog browse, whether a pet profile was active, and whether a score-share sheet, product request, barcode contribution, label capture, pet addition, or catalog browse occurred.
These events also include the app version and build, Android platform, public or test release posture, Play or sideload distribution, and an analytics schema version so different releases are not mixed together.
Analytics does not include barcodes, product names, pet names, email addresses, free text, screen recordings, or automatic screen views. Snuffo does not connect the analytics identifier to your account. The analytics provider may still process technical information such as IP address to deliver and secure the service, so we treat this data as pseudonymous rather than claiming it can never relate to a device.
Website and support
This website does not set advertising cookies or run website analytics. If you email support, we receive the information in your message, your email address, and any attachments you choose to send. Our hosting provider may process standard server logs for security and reliability.
3. Why and how we use data
| Purpose | Information | Legal basis |
|---|---|---|
| Provide optional accounts and backup | Email, authentication data, backup payload, synced avatars | Performance of our service agreement |
| Review missing products and improve catalog coverage | Product requests and barcode contributions | Performance of the requested service and our legitimate interest in maintaining the catalog |
| Credit contributors and show product popularity | Optional catalog credit (username), anonymous per-product view totals | Your choice at submission for credit; legitimate interest for anonymous aggregate counters |
| Understand coarse app usage | Limited analytics events | Your consent, which you may withdraw at any time |
| Answer requests and protect the service | Support messages, security and diagnostic records | Legitimate interests and legal obligations |
We do not use personal data for targeted advertising, sell it, or let pet-food brands pay to influence scores.
5. How long we keep data
- On-device data remains until you erase it in Snuffo, uninstall the app, or your platform backup rules remove it.
- Account backups and synced avatars remain while your account is active and are deleted when the account-deletion process completes.
- Product requests are kept while needed to review, verify, and maintain catalog provenance. If you delete your account, the account link is removed and the contribution may remain in de-identified form.
- Opt-in analytics is retained for up to 12 months, then deleted or aggregated.
- Support correspondence is normally kept for up to 24 months, longer only when needed for an ongoing issue or legal obligation.
We may retain minimal records longer when required by law, to resolve disputes, or to enforce agreements. Backups can take additional time to cycle out under a provider’s normal schedule.
6. Your privacy choices
- Use the scanner and local pet profiles without creating an account.
- Turn optional analytics on or off in Settings → Privacy & data. Withdrawing consent stops future events.
- Erase local profiles, scans, reminders, notes, settings, and consent choices in Settings → Privacy & data → Erase all local data.
- Delete a signed-in account in Settings → Account → Delete account. See the account deletion guide.
Deleting a cloud account does not automatically erase local data already on your phone; those are separate controls so you can choose whether to keep the local copy.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a portable copy of personal data, and to object to certain uses. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
To make a request, email contact@snuffo.app. We may need to verify that the request relates to you. You may also complain to your local data-protection authority, including the Romanian ANSPDCP, Ireland’s Data Protection Commission, or the UK Information Commissioner’s Office, as applicable.
8. Security, children, and changes
We use access controls, encrypted network connections, private storage rules, and data minimisation. No service can promise absolute security, so please contact us if you believe your data or account is at risk.
Snuffo is not directed to children under 16 and they should not create an account without a parent or guardian’s involvement. Contact us if you believe a child has provided personal data improperly.
We may update this policy as the product or law changes. We will post the revised date here and provide an additional notice where a change materially affects your rights.
Questions or requests?
Contact the Snuffo privacy team and include “Privacy” in the subject line.