Privacy Policy

Last updated: 8 October 2026 · Applies to the SnapID Mark apps (Android, iOS), the web dashboard at app.snapidmark.com and the public verification page.

Draft — pending legal review. The text below is a placeholder and has no legal effect until it is approved by legal counsel and officially published.

1. Scope

This policy explains how SnapID Mark ("we") collects, uses and protects personal data when you use the apps, the web dashboard and the verification page. For business workspaces, the business decides the purposes of processing its staff's data; we process that data on the business's instructions.

2. Data we collect

2.1 Account information

  • Email, display name, phone number (if you sign in by phone), profile photo from Google / Apple, language and settings.

2.2 Photos and stamp data

  • Original photos, stamped photos and stamp data: time, SnapID code, notes, signature, stickers, template, project / site.
  • File fingerprints (SHA-256) for integrity comparison.

2.3 Location

  • Precise GPS location, accuracy, location source and derived address at the moment you take a photo or clock in/out. The app does not track your location continuously in the background.
  • Weather at the capture location (from a weather data provider based on coordinates).

2.4 Device and integrity information

  • Device model, operating system, app version, language, time zone, device clock versus server time.
  • Integrity signals: mock location detection, rooted / jailbroken device, App Check result, upload delay.

2.5 Business data

  • Roles, invitations, attendance (clock-in/out times, site, geofence status), audit log of admin actions.

2.6 Technical data

  • Error logs and server access information (IP address, time) for operations and security.

3. Purposes

  • Stamping photos, issuing SnapID codes and running the public verification page.
  • Photo clock-in, geofence checks and reports for businesses.
  • Detecting fraud (fake time, fake location) and raising integrity flags.
  • Sync, backup, customer support, security and improving the Service.
  • Seat plan payments and legal compliance.

We do not sell personal data and do not use your photos for advertising.

4. Legal basis

We process personal data under Vietnam's Decree 13/2023/ND-CP on Personal Data Protection and related Vietnamese law (including the Personal Data Protection Law where applicable). Our bases are: your consent (collected when you grant camera and location permissions and when you sign up), performance of the service contract, and legal obligations. Location data determined by positioning services is treated as sensitive personal data; we only collect it when you take a photo or clock in/out, and you can revoke location permission in your OS settings at any time (some features, such as geofences, will then stop working).

5. Sharing

  • Business workspaces: Owners/Admins of a workspace you join can see the photos, location and attendance you create in that workspace. Photos in your personal workspace are not shared with businesses.
  • Public verification page: anyone with a SnapID code can see the watermarked photo, capture time, a rounded area (not exact coordinates), workspace name and integrity flags.
  • Infrastructure providers: Google Cloud / Firebase (storage, authentication, servers), map / geocoding and weather providers, payment channels (App Store, Google Play, RevenueCat). They process data only under contract with us.
  • Authorities when legally required.

6. Storage and transfers

Data is stored on Google Cloud infrastructure in the Southeast Asia region (Singapore). Cross-border transfers of personal data follow Decree 13/2023/ND-CP, including preparing and keeping a transfer impact assessment.

7. Retention

We keep data while your account is active and according to the retention policy of your plan / business. Photos not yet uploaded stay only on your device. After account deletion, personal data is deleted or anonymized within a reasonable period, except data we must keep by law or that belongs to a business workspace.

8. Your rights

Under Decree 13/2023/ND-CP you have the right to be informed; to consent and withdraw consent; to access and correct; to delete; to restrict processing; to object to processing; to obtain your data; and to complain, denounce, sue and claim compensation. Send requests to hello@snapidmark.com; we respond within the statutory time limits. For data in a business workspace, please also contact your business.

9. Account deletion

If you are the only Owner of a business workspace, transfer ownership or delete the workspace first. Photos still waiting in the on-device queue will not be uploaded after deletion.

10. Security

Data is encrypted in transit (HTTPS/TLS) and at rest on Google Cloud; access is role-based; admin actions are recorded in an audit log. No system is perfectly secure; if an incident occurs we will notify you as required by law.

11. Children

The Service is not directed at children. Processing children's data (if any) requires consent from a parent or guardian as required by law.

12. Website analytics (Google Analytics)

On the snapidmark.com website (landing pages and blog) we use Google Analytics 4 (Google LLC) to measure page views and a few interactions such as clicking the app download buttons, opening the web dashboard, switching language, opening FAQ items, running the verification demo, scroll depth and article reading time. This section applies to the website only, not to the mobile apps.

  • Only with your consent: analytics cookies (_ga, _ga_*) are stored only after you click "Accept" in the cookie banner. The default is denied (Google Consent Mode v2); in that state Google may receive cookieless, non-identifying signals used to estimate traffic.
  • No advertising: ad storage and ad personalization are always denied. We do not send your name, email, photos or SnapID codes to Analytics.
  • Do Not Track / Global Privacy Control: if your browser sends either signal, Google Analytics is disabled entirely.
  • Changing your choice: at any time via the "Cookie settings" link in the footer, or by clearing this site's data in your browser. Your choice is stored in your browser's localStorage.
  • Retention and transfers: Analytics data is kept for the retention period configured in Google Analytics and may be processed outside Vietnam by Google.

13. Changes and contact

We may update this policy and will notify you in the app of material changes. Privacy contact: hello@snapidmark.com.