Privacy Policy

1. What we collect

We collect: (a) information you provide (phone number, first name, payment details); (b) biometric identifiers derived from your selfie (see Section 7); (c) device and usage information; and (d) photos you purchase or interact with.

2. How we use it

To match you with photos, process purchases, deliver downloads, support you, prevent fraud, and comply with law. We do not sell your personal information.

3. Sharing

We share data only with: payment processors (to charge you); partner photographers and venues (only the fact of a sale, never your face data); and authorities when legally required.

4. Retention

We retain your account and biometric data until you delete your account or after 3 years of inactivity, whichever comes first. Purchase records are retained for 7 years for tax compliance.

5. Your rights

You may access, correct, export, or delete your data at any time from settings, or by emailing hello@snapped.nyc. California, Virginia, Colorado, and other state residents have additional rights under CCPA/CPRA and similar statutes.

6. Security

We encrypt data in transit and at rest. We undergo regular SOC 2 audits. No system is perfectly secure; we will notify you of material breaches as required by law (including the NY SHIELD Act).

7. Biometric Information Notice

This section is the legally required biometric notice and applies to all users.

What we collect. When you scan your face, we convert your selfie into a mathematical face signature (a vector of numbers). We do not retain the original selfie image after the signature is generated.

Purpose. The face signature is used exclusively to match you with photos in our gallery. It is not used for advertising, tracking, surveillance, or any other purpose.

Retention. Your face signature is retained until you delete it (one tap in settings) or after 3 years of account inactivity. On deletion, the signature is purged from production systems within 24 hours and from backups within 30 days.

Sharing. We do not sell, lease, trade, or otherwise profit from your biometric data. We do not share it with photographers, venues, advertisers, data brokers, or any third party except (a) sub-processors strictly necessary to operate the matching service under contractual confidentiality, or (b) when required by law (e.g., a valid court order).

Consent. By scanning your face, you provide written informed consent under the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and similar statutes. You may withdraw consent at any time, which constitutes a deletion request.

Your rights. You may access, export, or delete your face signature at any time. To exercise these rights, use the settings menu or email hello@snapped.nyc. We will respond within 45 days.

Compliance. We maintain a written biometric data retention and destruction schedule available on request. Snapped is compliant with BIPA, CCPA/CPRA, the NY SHIELD Act, and applicable state biometric privacy laws.

8. Children

Snapped is not directed to children under 13. We do not knowingly collect biometric data from children under 13.

9. Changes

We will notify you of material changes by email or in-app notice at least 30 days before they take effect.

10. Contact

Privacy questions: hello@snapped.nyc. Snapped, Inc., 433 Broadway, 6th Floor, New York, NY 10013. Governing law: State of New York.