Privacy Policy for SnapSort AI
Last Updated: September 24, 2026
Welcome to SnapSort AI ("we," "us," or "our"), a service provided by Pshichenko Enterprises Inc. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App") and our services (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
For users in California, this policy includes information specific to your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
1. Information We Collect
We may collect information about you in a variety of ways. The information we may collect via the App depends on the content and materials you use, and the actions you take, and includes:
A. Personal Data You Provide to Us
- Account Information: When you create an account, we collect your email address and a hashed password. If you sign up using Google Sign-In, we may also collect your name, email address, and profile picture URL as provided by Google. We also assign you a unique User ID (Firebase UID).
- Workspace and Organizational Data: Workspace names you create, user roles you assign or are assigned within workspaces, tote names, item descriptions, and tags (whether manually entered or AI-generated).
- User-Uploaded Images: Photographs of your items and totes that you upload to the Service for cataloging and AI processing.
- Invitation Data: Email addresses of individuals you invite to your workspaces, and any invite codes generated or used.
- Purchase Information:
- For physical QR stickers processed via Stripe: Shipping address (name, street address, city, state, ZIP code, country, optional phone number) and confirmation of payment. We do not collect or store your full credit card numbers; this is handled by Stripe.
- For digital QR PDFs, AI credits and capacity upgrades processed through Google Play or Apple's App Store: Purchase verification data such as transaction identifiers, purchase tokens or signed receipts. If you purchase digital QR PDFs, we may collect an email address for PDF delivery.
- Communications: If you contact us for support or provide feedback (e.g., via email to support@snapsortai.com or through integrated support channels like Featurebase), we will collect the information contained in your communications.
B. Data Collected Automatically
- Usage Data: Timestamps of actions (e.g., account creation, item/tote creation, modifications, logins), interaction logs (e.g., borrowing, returning, deleting, moving items/totes, linked to your User ID and/or email).
- Device and Technical Information: Our infrastructure processes technical information such as IP addresses, request timestamps, operating-system information and Firebase Cloud Messaging tokens to provide the service, deliver notifications and investigate failures or abuse. These operational records are distinct from optional usage analytics.
- Mobile Analytics and Advertising Identifiers: The 2.1.2 update disables Firebase Analytics collection on Android and iOS and disables collection of mobile advertising identifiers and the iOS vendor identifier by Analytics. Earlier installed versions may still collect Firebase usage events, such as screen views and sessions. Those events are not described as anonymous. We do not serve advertising in the app or use this information for cross-context behavioral advertising.
C. Information from Third Parties
- Google Sign-In: Name, email, profile picture URL.
- Stripe: Payment confirmation, transaction IDs, and potentially billing address information associated with the payment method for fraud prevention purposes handled by Stripe.
- EasyPost: Address verification, shipping rate information, labels and tracking updates for physical orders.
- Google Play Publisher API / Apple App Store Connect API: Verification of In-App Purchases.
- OpenAI: AI features send selected item photos or typed item descriptions to OpenAI's API to generate tags and descriptions. Generated results are returned to us and stored with your inventory. Uploading an ordinary photo for storage does not by itself require AI processing.
- Google Maps Places API: If you use address autocomplete features, we send partial address input to Google Maps Places API to provide suggestions and retrieve details for selected places.
2. How We Use Your Information
Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the App to:
- Create and manage your account.
- Authenticate you and secure your account.
- Enable the creation, organization, and management of workspaces, totes, and items.
- Process your purchases of AI Credits, digital QR code PDFs, and physical QR code stickers, including calculating shipping and taxes, and fulfilling orders.
- Provide optional AI-powered item tagging and description services using the photos or text submitted for that purpose.
- Generate and manage QR codes associated with your totes.
- Facilitate collaboration by allowing you to invite users to workspaces and manage their roles.
- Send you transactional communications, such as order confirmations, shipping updates, service announcements, and responses to your inquiries.
- Monitor and analyze usage and trends to improve the App and Service.
- Diagnose and fix technical issues and bugs.
- Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
- Comply with applicable legal obligations and respond to legal requests.
3. Disclosure of Your Information (Sharing with Third Parties)
AI permission in the 2.1.2 update: Before this version submits new photos or text for AI processing, it explains the data shared and names OpenAI, then asks for permission. You can decline and save manual entries without AI-generated tags. Your saved inventory, ordinary photo storage, search and manual editing remain available. Review or turn off this permission in Settings > AI processing. Turning it off stops new requests from that installation immediately; your choice must reach our server to stop requests attributed to your account on other installations. Older versions can submit requests without reliable actor information; update your installations to use the new permission controls. Data already sent cannot be recalled. Pending photos and drafts are preserved. Older installed versions do not have this permission screen; install the update to use these controls.
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
- With Service Providers: We share your information with third-party vendors and service providers that perform services for us or on our behalf, including:
- Firebase (Google Cloud Platform): For authentication, database hosting, file storage for images and PDFs, backend processing, app verification and push notifications. Earlier mobile versions also use Firebase Analytics as described above. The 2.1.2 update disables that mobile Analytics collection. We do not use Firebase or Google services to serve ads in the app.
- Stripe: For processing payments for physical QR stickers. Stripe handles your payment card information directly.
- EasyPost: For verifying shipping addresses, calculating shipping rates, buying labels and tracking physical QR-sticker orders.
- Google and Apple: For processing and verifying digital purchases through their app stores. Google Maps Places also provides address autocomplete and selected-address details.
- OpenAI: For generating item tags and descriptions from photos or typed item descriptions submitted for AI processing.
- SendGrid (Twilio): For sending transactional emails (e.g., order confirmations, password resets, invitations).
- With Other Users in Your Workspace: If you are part of a shared workspace, your email address and/or display name may be visible to other members of that workspace. The content you add to a shared workspace (totes, items, images, descriptions, tags) will be accessible to other members of that workspace according to their assigned roles and permissions.
- By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only permit them to process your personal data for specified purposes and in accordance with our instructions.
We do not sell your personal information to third parties for monetary consideration. For California residents, please see Section 7 for more information on "sharing" under the CCPA/CPRA.
4. Data Security
We use administrative, technical, and physical security measures to help protect your personal information. This includes using HTTPS for data transmission, encrypting sensitive data like passwords (hashed), utilizing Firebase's security features (including security rules for database and storage access), and implementing role-based access controls within the App. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information. You are responsible for keeping your account password confidential.
5. Data Retention
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Account Information: Retained as long as your account is active. If you delete your account (e.g., via workspace closure if you are the sole owner and member of all your workspaces), your core user record may be retained for a reasonable period for administrative purposes or as required by law, before being anonymized or deleted.
- Workspace, Tote, and Item Data (including images and AI-generated tags): This data is associated with a workspace. Soft-deleted items and totes remain available for restoration until permanently removed by an authorized user. Workspace closure removes active inventory and access. Some photos and recovery records currently remain pending a sharing and ownership review, so closure or sign-in deletion does not confirm erasure of every stored copy. We are completing the photo-cleanup process and do not currently promise a fixed photo/backup erasure deadline. See our account deletion and data deletion pages for the current process and contact route.
- Purchase Records: Information related to your purchases (e.g., order ID, product purchased, amount, but not full payment card details) will be retained for as long as necessary for our financial and legal compliance obligations (generally 3-7 years, or as required by applicable law).
- OpenAI Data: Photos and text submitted for processing are subject to OpenAI's applicable service terms and data-retention policies. We do not promise immediate deletion or zero retention by a third-party provider. Turning off AI permission does not recall previously submitted data.
- Log Data: Usage logs and analytics data may be retained for internal analysis and service improvement for a period necessary for these purposes and then anonymized or deleted.
6. Children's Privacy
Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at support@snapsortai.com so that we can take necessary actions.
7. Your Data Protection Rights (Including California Residents under CCPA/CPRA)
Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include:
- The right to know and access: You may have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, and the categories of third parties to whom we disclose personal information.
- The right to delete: You may have the right to request that we delete personal information that we have collected from you, subject to certain exceptions (e.g., to complete a transaction, detect security incidents, comply with a legal obligation).
- The right to correct: You may have the right to request that we correct inaccurate personal information that we maintain about you.
- The right to opt-out of sale or sharing: We do not "sell" your personal information for monetary consideration. Under the CCPA/CPRA, "sharing" can also refer to sharing for cross-context behavioral advertising. We do not currently engage in such sharing. If our practices change, we will update this policy and provide an opt-out mechanism.
- The right to limit use and disclosure of Sensitive Personal Information (SPI): You may have the right to limit our use of your SPI (such as account login credentials) to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer. We primarily use SPI like your email for account management and service provision.
- The right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise these rights, please contact us at support@snapsortai.com. We will respond to your request consistent with applicable law. We may need to verify your identity before processing your request.
Android Advertising ID controls: You can reset or limit the use of your device’s advertising identifier at any time. On most devices, go to Settings > Google > Ads (or Settings > Privacy > Ads), then choose “Reset advertising ID” and/or turn on “Opt out of Ads Personalization.” On Android 13 and later, if you opt out, the advertising ID may be unavailable to apps. Our app honors these system settings.
8. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States (where Firebase and other key services are hosted) and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
9. Links to Third-Party Service Policies
Our Service uses third-party services that have their own privacy policies. We encourage you to review them:
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. If we make material changes, we may also notify you through the App or by email. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us: