Privacy policy

Last updated 24 September 2026

The short version

Your photos are never uploaded. They stay on the phone that took them.
We store your account details, and your property and snag records so they sync across your own devices and with anyone you share a property with.
We don't use advertising, analytics or tracking, and we never sell your data.
You can delete your account and data from the app at any time.

Who we are

Snagly is published by Zebra Designs, [registered address] ("we", "us"). We are the controller of the personal data described in this policy.

What we collect

We collect only what the app needs to work.

Account & email address Snagly creates an anonymous account automatically the first time you open it — no email needed to get going. If you later add an email address (or sign in with Google), it's used to sign you in on other devices and connect you to the properties you share. Handled by Google Firebase Authentication.

Property and snag records Addresses, floors, rooms, snag descriptions, categories, priorities, statuses, scheduled dates and the history of changes. These sync through Google Cloud Firestore as soon as you're signed in — which happens automatically — so they're available if you use more than one device, and so everyone on a property you share sees the same thing.

Who did what On a shared property we record which member added or changed a snag, and photo requests between members, so each person can see who did what.

Purchases If you buy the one-off unlock, Google Play handles payment. We receive confirmation that the purchase is valid. We never see your card details.

What we don't collect

Photos. Snagly stores photos only on the device that took them. They are not uploaded to us or to Firebase, and we cannot see them. If someone you share a property with asks for a photo, you send it yourself through your phone's share sheet, using whichever app you choose. That transfer is between you and them and is covered by that app's privacy terms, not ours.

Reminders and other alerts are scheduled and shown by your own phone. We don't operate a push-notification server, and we don't collect a device or notification token to send them.

We don't collect your location, contacts, advertising identifiers or usage analytics, and there is no advertising in the app.

Why we use it and our legal basis

We process your data to provide the service you asked for: signing you in, keeping a shared property in sync, showing the reminders you've enabled and unlocking features you've paid for. Our legal basis under UK GDPR and EU GDPR is performance of a contract (Article 6(1)(b)).

Where we keep records of purchases for tax and accounting, the basis is legal obligation (Article 6(1)(c)).

Who we share it with

Other members of a property you share can see its snag records and who made each change. They cannot see your photos.

Google acts as our processor for authentication, database hosting and payments through Google Play. We don't share your data with anyone else, and we never sell it.

Where it's stored

Property and snag data is stored in Google Cloud's London region (europe-west2), in the UK. Sign-in is a Google service that may be processed outside the UK and EEA. Where it is, transfers are covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses included in Google's data processing terms. UK-to-EU transfers rely on the EU's adequacy decision for the UK.

How long we keep it

We keep your account and property data while your account is open. If you remove someone from a property, or leave one, they lose access immediately.

When you delete your account, we delete your email address and any property that only you belong to within 30 days. On a property shared with others, your changes stay part of its history, attributed to "Former member". Records needed for tax are kept for six years.

Your rights

You have the right to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw any consent you've given. Most of this you can do in the app under Settings. For anything else, email [email protected] and we'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EU, to the data protection authority in your country.

Security

Data is encrypted in transit and at rest on Google's infrastructure. Access to a property is limited to its members, enforced by database security rules. Invite codes are single-use.

Children

Snagly is intended for adults managing a property and is not directed at children under 16.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. For significant changes we'll tell you in the app before they take effect.