Privacy Policy

This Privacy Policy explains how SnapVik ("we", "us") collects, uses and protects your personal data when you use SnapVik (the "Service"). We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU GDPR.

1. Data controller

The data controller is SnapVik. For any privacy question or to exercise your rights, contact us at hello@snapvik.com.

2. Personal data we collect

• Account data — username, email address, password (stored only as a secure hash), full name, date of birth, and any profile details you add (bio, website, gender, profile photo).
• Content data — photos, captions, comments, stories, messages and other content you create or send.
• Usage & technical data — IP address, device/browser information, login timestamps and security logs (such as failed login attempts), and actions you take on the Service.
• Communications — messages you send us through the contact form or by email.
• Cookies — essential cookies described in our Cookie Policy.

3. How and why we use your data (lawful bases)

• To provide the Service — creating your account, showing your feed, delivering messages. Lawful basis: performance of a contract.
• Security & fraud prevention — verifying your email with a one-time code, captcha checks, rate limiting and login monitoring. Lawful basis: legitimate interests and legal obligation.
• Safety & moderation — detecting and removing prohibited content such as nudity, abuse or spam. Lawful basis: legitimate interests and legal obligation.
• Communicating with you — sending service emails and responding to enquiries. Lawful basis: performance of a contract and legitimate interests.
• Improving the Service — understanding how the Service is used. Lawful basis: legitimate interests.
• Legal compliance — meeting our legal obligations and responding to lawful requests. Lawful basis: legal obligation.

4. Who we share data with

We do not sell your personal data. We share it only with:

• service providers who host our servers or send our emails, acting on our instructions under appropriate contracts;
• law enforcement or regulators where we are legally required to do so, or to protect the rights, safety and security of users and the public;
• other users — but only the content and profile information you choose to make visible.

5. International transfers

Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as UK adequacy regulations or Standard Contractual Clauses / the UK International Data Transfer Addendum.

6. Data retention

We keep your personal data for as long as your account is active. When you delete your account we delete or anonymise your personal data within a reasonable period, except where we must retain certain information to comply with the law, resolve disputes or enforce our agreements. Security logs are kept only for as long as needed for security purposes.

7. Your rights

Under the UK GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and to withdraw consent where processing is based on consent. You can exercise most of these rights from your profile settings (including deleting your account) or by contacting us.

If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to your local data protection authority.

8. Children

The Service is not intended for anyone under 13 years old. We ask for your date of birth at sign-up to enforce this. If we learn that we hold data about a child below the minimum age, we will delete it.

9. How we protect your data

We use technical and organisational measures to protect your data, including hashed passwords, CSRF protection, encrypted email delivery where configured, captcha and login rate limiting. No system is completely secure, but we work to protect your information and will notify you and the relevant authority of a data breach where the law requires.

10. Contact us

For any privacy request, email hello@snapvik.com or use our contact form. This policy is governed by the law of United Kingdom.