SnapCert Privacy Notice

Overview

This privacy notice explains how SnapCert handles personal information when you use the iPhone and iPad app, this website, and support email.

For optional account and support information, SnapCert acts as a controller. For customer, site, certificate, and signature information that electricians enter for their own customers, SnapCert normally acts as a processor on the electrician or contractor's instructions. Records stay on the device unless you sign in.

What we collect

Certificate records stay on the device unless you sign in. Sending feedback and opening this website also involve network requests to the service you choose.

• Optional account details: the email address you use to sign in (Apple, Google, or email and password) and a user ID from our authentication provider. The app does not store an account display name or profile photo.
• If you sign in, a copy of the records you already keep on the device: clients (name, phone, email), sites (address, postcode, town), EICR drafts (ordering party, occupier, dates, readings, free text), boards, circuits, inspection outcomes, observations (text; digests of observation, board and installation photographs, not the photographs themselves), test results, declarations (name, organisation, position, address, drawn-ink strokes, consent), and invoice text, amounts and status on issued reports.
• Feedback you choose to send: category, message, optional reply-to email, app version, build, device model identifier, iOS version, and record counts. The automatically attached diagnostics contain no client names, addresses or photos; your message may contain information you type. Signed-in feedback is linked to your account ID even if you leave the reply-to field empty. If you are signed out, that payload goes to the system share sheet instead of our servers.
• Support email you send to us, including whatever you choose to include in the message.
• On this website only: a theme preference in local storage so the page can remember light or dark appearance.

Photos and PDFs stay on the device. We do not collect precise location, payment card details, crash logs, analytics events, advertising identifiers, or address-book contents. The Contacts picker copies only the one contact you choose into a client form. That client record is included in cloud sync if you sign in. The motion sensors are used only to adapt iPad layout when you rotate the device; that reading is not stored or sent.

Why we use it

We use personal information to provide SnapCert, keep records available across your devices where you have signed in, support you when you write to us, secure accounts, and comply with legal obligations.

We use account details to perform our agreement with you and provide sign-in and optional sync. We use support information to respond to your requests. Service-security processing is based on our legitimate interests in protecting accounts and preventing abuse. Where a law requires us to retain or disclose information, the basis is that legal obligation. For records you enter about your customers, you determine the lawful basis as controller and we process on your instructions.

Customer and certificate data

Electricians and contractors decide what customer, site, and certificate data they enter into SnapCert. They are responsible for having an appropriate lawful basis and for giving their customers any privacy information they are required to provide.

We do not sell customer or certificate data. We process it to provide the product, maintain security of signed-in accounts, support the user, and comply with lawful requirements.

Sharing

We share information only where needed to run SnapCert, support users, comply with law, protect rights and security, or complete a business change such as a merger or asset transfer.

• Authentication and cloud storage providers that host optional sign-in and the signed-in snapshot (Google Identity Toolkit, Google Secure Token, Google Firestore, and Apple or Google when you choose their sign-in).
• Authorities, regulators, courts, or professional advisers where legally required or necessary to protect rights and safety.
• People or services you choose to send a draft PDF or support information to, using the system share sheet on your device.

We do not use analytics, crash-reporting, advertising, or payment processors in this app. There is no in-app purchase.

International transfers

Some providers may process information outside the UK. Where that happens, we use appropriate safeguards such as adequacy decisions, contractual protections, or other lawful transfer mechanisms.

Security

We use technical and organisational measures designed to protect personal information, including access controls and encryption in transit for network calls. The default Firestore database is in London. Cloud sync is not an independent backup: changes can propagate between devices. Keep your own exports where you need long-term records. Session tokens are stored in the device Keychain. No system is perfectly secure, so users should also protect their devices, accounts, and exports.

How long we keep information

We keep information only for as long as needed for the purposes described in this notice, including providing the product, supporting users, meeting legal obligations, resolving disputes, and maintaining service security. Retention depends on the category and the reason for keeping the information.

• Records you keep without signing in remain on your device until you delete them.
• Account and synced records are usually kept while the account is active.
• Signed-in users can delete the account from Settings in the app. Mail support@snapcert.app if you cannot use the app. We will confirm the scope and completion of a mail request, and explain any specific records we are legally required to retain.
• Our configured Cloud Logging retention is 30 days for default operational logs and 400 days for required audit logs. Google may retain other limited operational or security records under its service terms. These are distinct from the app's active account and synchronized records.
• Support and dispute records may be kept longer where required or justified.
• Users should export records they need for professional retention duties before deleting data or closing an account.

Deleting your account

Sign in, then open Settings and choose Delete account. Confirm with the same Apple Account, Google Account, or password you use to sign in. That removes the sign-in account, synced clients, sites and certificate records, and feedback sent from the account. It cannot be undone. Signing out alone does not delete your account.

Deletion is usually immediate. If a service is unavailable, it can take up to seven days; Settings will show when it is complete. Operational deletion receipts are kept for 30 days and then removed. Mail support@snapcert.app if you cannot use the app.

Existing records and PDF exports on your devices remain under your control. Account deletion does not remotely erase those copies. To remove them, delete the app and any exports on each device after retaining anything required for your professional duties.

Your rights

Depending on your location and the context, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, and complain to a supervisory authority.

To exercise rights for your SnapCert account, contact support@snapcert.app. If your request relates to data held by an electrician or contractor using SnapCert, you may need to contact that electrician or contractor directly because they control that customer record.

In the UK, you can complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how personal information has been handled.

Cookies and this website

This website stores a theme preference in local storage so the appearance toggle can remember your choice. We do not set analytics cookies, run product-analytics scripts, or send marketing email from this site.

Children

SnapCert is intended for professional users and is not directed at children.

Updates and contact

We may update this notice as SnapCert changes. The latest version is available at snapcert.app/privacy.

Questions can be sent to support@snapcert.app.