Privacy Policy

SnapTik (“SnapTik”, “we”, “our”, “us”) is an Australian service that lets you record short vertical videos and get them automatically edited. This Privacy Policy explains what we collect about you, why we collect it, and the choices you have.

If you have questions at any point, email privacy@snaptik.app.

• To run the service — authenticating you, delivering your prompts, editing and serving your videos, billing your subscription if you have one.
• To communicate with you — transactional messages (sign-up confirmation, password resets, billing receipts) and, only if you opt in, streak reminders or feature announcements.
• To improve the product — using aggregated usage analytics to decide what to build next.
• To keep things safe — detecting abuse, enforcing our Terms of Service, and responding to security incidents.

Account + videos: for as long as your account is active. If you delete your account, we remove your account data and your videos from our systems within 30 days.

Backups: rolling 30-day backups may retain a copy after deletion; these are automatically rotated out.

Billing records: we retain invoices and payment records for 7 years to meet Australian tax law, even after you close your account.

Analytics: aggregated metrics are kept indefinitely; individual event rows roll off after 24 months.

We share your data with these vendors so we can run SnapTik:

• Amazon Web Services (AWS) — compute, database, video storage, and transactional email delivery (via SES). Region: ap-southeast-2 (Sydney) for production workloads.
• Stripe, Inc. — subscription billing. Stripe is PCI-DSS Level 1 compliant. See Stripe’s privacy policy.
• PostHog (optional, deployed region-local) — product analytics. When enabled, events are streamed to a self-hosted PostHog instance. Can be disabled for your account on request.

We do not sell or rent your personal data to any party, ever.

SnapTik uses only essential cookies and browser storage. The one cookie we set is snaptik_refresh — an HTTP-only cookie containing your refresh token, used to keep you signed in between visits. We do not use advertising cookies, fingerprinting, or cross-site tracking.

We also use browser local storage to keep your preferences and a short-lived copy of your access token. Clearing your browser data will sign you out.

Under Australian privacy law (and comparable laws in your region), you have the right to:

• Access your data — request a copy of what we hold.
• Correct your data — ask us to fix anything inaccurate.
• Delete your data — close your account from Settings, or email us.
• Portability — download your videos at any time from the app.
• Withdraw consent — turn off notifications or analytics from Settings.

To exercise any of these rights, email privacy@snaptik.app and we’ll respond within 30 days.

SnapTik is not for children under 13. We ask for your date of birth at sign-up solely to enforce this minimum. If you believe a child under 13 has created an account, email privacy@snaptik.app and we’ll delete the account promptly.

Videos and account data are encrypted at rest. Passwords are hashed with bcrypt. Access tokens are short-lived (15 minutes) and refresh tokens rotate on every use with family-level revocation if we detect reuse. Data in transit is HTTPS-only.

No system is perfectly secure. If we learn of a breach affecting you, we will notify you by email within 72 hours and disclose the scope.

We’ll post any changes on this page and update the “last updated” date. For material changes, we’ll also email registered users at least 30 days before the change takes effect, so you have time to decide whether to continue using SnapTik.

Questions, concerns, or privacy requests: privacy@snaptik.app.