Privacy policy
Who is responsible
Florian Ludwig
Email: support@snackmark.app
In short
- Snackmark has no accounts, no ads, no analytics and no tracking.
- Your receipts are processed on your iPhone. Images and PDFs never leave it.
- Only if you turn on cloud classification is the text of your receipt item lines sent through our server to TypeSafe AI in the US. It is off by default.
Processing on your iPhone
Snackmark reads your receipts with Apple's on-device text recognition and classifies the items with Apple's on-device language model. Your highlight corrections are stored on your iPhone so that Snackmark can reuse them on the next receipt. You can delete them one at a time or all at once in Settings under "Remembered corrections"; deleting the app deletes them too. We never receive any of this data.
Cloud classification (optional, off by default)
If you turn on "Use TypeSafe Jev" in Settings, Snackmark sends the text of your receipt item lines (for example "Apple juice 1.29") through our server to TypeSafe AI, Inc. in the United States, which decides which lines are food or drink. The text passes through the infrastructure of Cloudflare, Inc., which runs our server (see "Server logs"). Cloud classification is voluntary: without it Snackmark works fully with classification on your iPhone. Images, PDFs, the merchant's name and address and other receipt details stay on your iPhone.
- Our server passes the text on and neither stores nor logs it.
- TypeSafe processes the text on our behalf as our processor under its data processing addendum (Art. 28 GDPR). Its privacy policy states that it does not train or fine-tune models on this text. It keeps data "as long as necessary taking into account the purpose of the Processing" and names no fixed period.
- Transfer to the US: safeguarded by the EU standard contractual clauses (controller to processor, Module 2) that are part of TypeSafe's data processing addendum (Art. 46(2)(c) GDPR). US authorities may still be able to access data under US law.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- You can withdraw your consent at any time by turning the setting off. Snackmark then classifies on your iPhone only. Processing before the withdrawal remains lawful.
Device check and usage limits
When cloud classification is on, Snackmark proves to our server that requests come from a genuine copy of the app, using Apple's App Attest service. For this, our server stores a random key ID, the matching public key and a signature counter for your device. It also counts how many items each key ID sends per day, to enforce daily limits; old counts are deleted automatically with the first request of a later day. The key ID is not linked to your name, Apple ID or receipts. The device check is a prerequisite for cloud classification; without it only classification on your iPhone is possible.
Legal basis: our legitimate interest in preventing abuse and keeping costs bounded (Art. 6(1)(f) GDPR). We delete these records when the beta ends.
Server logs
For security and technical troubleshooting, our server provider Cloudflare logs the IP address, approximate country, the device key ID and authentication proof, the requested URL and the time and result of each request. These logs contain no receipt content and are deleted automatically after a few days. Cloudflare, Inc. processes this data on our behalf under its data processing agreement. Cloudflare bases transfers to the US on its certification under the EU-US Data Privacy Framework and, as a fallback, on standard contractual clauses. Legal basis: legitimate interest in security and troubleshooting (Art. 6(1)(f) GDPR).
Apple, App Store and TestFlight
Apple handles downloads, purchases and app updates under its own privacy policy. If you test Snackmark through TestFlight, Apple shares with us your name and email address as given in your invitation, installation and session counts, crash reports and any feedback you send through TestFlight. We use this to run the beta and fix bugs (legitimate interest, Art. 6(1)(f) GDPR).
If you email us, we use your address and message only to answer you (Art. 6(1)(f) GDPR, or (b) where a contract is involved). Mail to snackmark.app is handled by Apple (iCloud Mail). We delete it when it is no longer needed.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to withdraw consent at any time. Write to support@snackmark.app. We cannot link a key ID to you. Deleting the app removes the key ID from your iPhone, after which the record on our server can no longer be linked to any device. You may also complain to a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing we base on our legitimate interest (device check, server logs, TestFlight, email). Write to support@snackmark.app.
There is no automated decision-making, including profiling, with legal or similarly significant effect (Art. 22 GDPR). Item classification is a suggestion you can change at any time.
Changes
We update this policy when the app changes. The date at the top shows the current version.