Privacy Policy

Effective date: 1 January 2026 · Governing law: India (DPDP Act 2023)

Plain-English summary: We collect only what's needed to run your profile. Anonymous perceptions are structurally anonymous — we cannot link a submission back to the person who sent it. We do not sell your data. Ever.

Contents

1. Who we are 2. What data we collect 3. What we do NOT collect 4. How anonymous perceptions work 5. How we use your data 6. Data stored on your device 7. Third-party services 8. Data sharing & disclosure 9. Data retention & deletion 10. Your rights 11. Children's privacy 12. Changes to this policy 13. Contact us

1 Who we are

Snapkoo is an anonymous perception platform that lets you discover how others genuinely perceive you. When we say "Snapkoo", "we", "us", or "our" in this policy, we mean the Snapkoo service and the team that operates it.

This Privacy Policy explains what personal data we collect when you use Snapkoo, why we collect it, how we use it, and what rights you have over it. It applies to registered account holders and to visitors who submit perceptions without an account.

2 What data we collect

We collect only the minimum data necessary to provide the service.

Category	Data points	When collected
Account data	Name, email address, username, password (hashed), profile photo, bio, occupation	When you register or update your profile
Perception data	Tag IDs selected, your user ID, timestamp	When a visitor submits a perception on your profile
Custom tags	Tag text you create for your Word Set	When you add custom perception tags
Profile views	View count (aggregate number only)	Each time your profile URL is opened
Push token	Firebase Cloud Messaging (FCM) device token	When you grant notification permission
Auth token	Session auth key (random string)	When you log in; stored server-side and in your browser

3 What we do NOT collect

We do not collect the following data — by design:

The identity of anyone who submits a perception on your profile.
IP addresses linked to a specific perception submission.
Device fingerprints or browser identifiers tied to a perception.
Location data of any kind.
Your contacts, call logs, or any data from other apps on your device.
Tracking cookies for advertising or retargeting purposes.
Payment or financial information (Snapkoo is currently free to use).

We do not use third-party advertising networks. We do not sell, rent, or trade your personal data to anyone.

4 How anonymous perceptions work

Understanding our anonymity model is important. When a visitor opens your profile link and submits a perception, here is exactly what our system records:

The ID(s) of the tag(s) they selected.
Your user ID (so the perception is attributed to your profile).
A timestamp.

No sender identity is recorded. There is no column in our database linking a specific perception to the person who submitted it. This is a structural design choice — not a setting that can be toggled off. Even we cannot retrieve who sent a specific perception.

This means:

You, as the profile owner, cannot find out who submitted any particular perception.
We cannot tell you who submitted a perception even if you ask us to.
There is no "reveal sender" feature, now or in the future.

We may analyse perception data in aggregate (e.g., which tags are most commonly selected across all profiles) to improve the platform. This analysis does not identify individuals.

5 How we use your data

We use the data we collect only for the following purposes:

To operate your account — authenticate you, display your profile, and save your preferences.
To display your public profile — your name, username, bio, occupation, and profile photo are shown to anyone who visits your profile URL.
To deliver perceptions — store submitted tag selections and make them visible to you in your dashboard.
To send notifications — if you have enabled push notifications, we use your FCM token to notify you when you receive a new perception.
To send transactional emails — account verification, password reset, and important service notifications.
To improve the platform — aggregate, anonymised usage patterns help us understand what features work and what to build next.
To enforce our Terms & Conditions — identify and act on reported abuse or policy violations.

We do not use your data for targeted advertising, profiling for commercial sale, or any purpose not listed above.

6 Data stored on your device

When you log in to Snapkoo, your browser stores the following items in localStorage (local browser storage on your device):

auth_key — your session authentication token
name — your display name
username — your Snapkoo username
image — your profile photo URL

This data stays on your device and is used to keep you logged in and pre-populate your UI without a network request on every page. It is not shared with any third party. You can clear this data at any time by logging out or clearing your browser's site data for snapkoo.com.

We do not use tracking cookies. Any cookies set by Snapkoo are strictly necessary for session management and expire when you log out or close your browser.

7 Third-party services

Snapkoo uses a small number of trusted third-party services to operate. Each has its own privacy policy.

Firebase Cloud Messaging (Google) — used to deliver push notifications to your device. Google may process your FCM device token in accordance with their privacy policy. You can opt out of notifications at any time in your device settings.
firebase.google.com/support/privacy
Google Fonts — fonts may be loaded from Google's CDN. Google may log the request. No personal data beyond a standard HTTP request is sent.
policies.google.com/privacy
jsDelivr / cdnjs (Cloudflare) — JavaScript libraries (jQuery, Bootstrap, QRCode.js) are loaded from these CDNs. Standard HTTP request logs may be retained by the CDN provider.
PHPMailer / SMTP — used to send you transactional emails. Your email address is passed to our mail server to deliver the message; it is not shared further.

We do not embed Facebook Pixel, Google Analytics, or any advertising trackers on Snapkoo.

8 Data sharing & disclosure

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Public profile information — your name, username, bio, occupation, profile photo, and aggregated perception stats are publicly visible to anyone with your profile URL. This is the core purpose of the service and something you control by creating and updating your profile.
Legal obligations — we may disclose data if required to do so by a valid court order, law enforcement request, or other legal process under Indian law. We will notify you where permitted.
Safety — if we have a good-faith belief that disclosure is necessary to prevent imminent harm to a person, we may share relevant data with appropriate authorities.
Business transfers — in the event that Snapkoo is acquired or merged, your data may be transferred to the acquiring entity. We will notify you of any such change and your rights at that time.

9 Data retention & deletion

We keep your data for as long as your account is active. The following applies when your account is deleted:

Your account data — name, email, username, bio, occupation, profile photo — is permanently deleted.
All perception records associated with your profile are permanently deleted.
Your custom perception tags are permanently deleted.
Your FCM device token is removed from our system.

Account deletion is permanent and cannot be undone. Once deleted, your profile URL becomes inactive and all your perception history is gone.

You can delete your account at any time from the Settings page. Deletion is processed immediately. Residual copies in automated backups are overwritten within 30 days.

Anonymous perception submissions (tag IDs with no sender identity) may be retained in aggregate statistical form after account deletion, as they contain no personal data attributable to anyone.

10 Your rights

Under the Digital Personal Data Protection (DPDP) Act 2023 (India) and general privacy principles, you have the following rights with respect to your personal data:

Right to access — you can view most of your account data directly on your profile and account settings pages. For a full data export, email us at hello@snapkoo.com.
Right to correction — you can update your name, bio, occupation, profile photo, and other profile fields at any time from the Settings page.
Right to erasure — you can delete your account and all associated data at any time. See Section 9.
Right to withdraw consent — you can disable push notifications at any time from your device settings, which will stop us from using your FCM token for that purpose.
Right to grievance redress — if you believe your data has been mishandled, you can contact our grievance contact below. We will respond within 7 business days.

To exercise any of these rights, contact us at hello@snapkoo.com. We may verify your identity before processing requests.

11 Children's privacy

Snapkoo is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you are between 13 and 18, a parent or legal guardian must review and agree to these terms on your behalf before you use the platform.

If we become aware that a child under 13 has created an account, we will delete that account and all associated data immediately. If you believe a minor under 13 is using Snapkoo, please report it to hello@snapkoo.com.

12 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you through the app.

Your continued use of Snapkoo after any changes means you accept the updated policy. If you do not agree with a change, please stop using the platform and delete your account.

13 Contact us

For privacy-related questions, data requests, or grievances, please reach out to us:

Email: hello@snapkoo.com
Website: snapkoo.com
Contact form: snapkoo.com/contactus

We aim to respond to all privacy-related queries within 7 business days. For DPDP Act grievances, we will respond within the timelines mandated by applicable law.