Privacy Policy

1. Scope and who we are

This Privacy Policy applies to SnapType, LLC, a New Hampshire limited liability company (“SnapType,” “we,” “us,” or “our”), our website at snaptypeapp.com (the “Site”), and our software applications, SnapType (free), SnapType Pro, SnapType Pro 2, and SnapType EDU, on Apple iOS/iPadOS, and, where available, Android (each an “App,” together the “Apps”). We call the Site and the Apps together the “Services.”

This Policy works with our Website Terms of Use and the End User License Agreement (“User Agreement”) for the platform you use. Where this Policy and a User Agreement both address privacy, this Policy controls. For school deployments involving processing of student data on a school’s behalf, a separate Data Processing Agreement (“DPA”) governs and controls over this Policy to the extent of any conflict.

2. Our core privacy commitment: student work stays local

SnapType lets a student photograph a worksheet (or import a file) and then type, draw, highlight, or dictate answers onto it, with tools such as text-to-speech, colored overlays, and adjustable fonts. All of that activity happens on the student’s own device. The worksheets a student creates, the text they type, the images they capture, and the audio they dictate are stored locally on the device for the use of the person using the App.

• Personal information a student entered into a worksheet is not transmitted to us and is not used by us. It remains on the device.
• We do not build student profiles, track students across apps or websites, or use student information for advertising. Ever.

3. Information we collect

Because the Apps keep student work local, the information we actually receive is limited and comes mainly from our Site and from people who choose to contact us. This Section gives the complete picture.

3.1 Information you provide directly

3.2 Information collected automatically on the Site

When you visit the Site, our servers and analytics tools automatically collect basic technical information (“Log Data”): IP address, browser type and version, device and operating-system type, referring/exit pages, the pages you view, and the dates, times, and duration of visits. We use Log Data to operate, secure, troubleshoot, and improve the Site. We do not use the Apps to collect Log Data for tracking purposes.

3.3 Cookies and similar technologies (Site only)

Our Site uses cookies and similar technologies to make the Site work, remember your preferences, and understand usage. You can manage non-essential cookies through the cookie banner on the Site or your browser settings. If you block cookies, some parts of the Site may not work. The Apps do not use advertising cookies or cross-app tracking technologies.

3.4 Device permissions used by the Apps

To provide their features, the Apps may ask your device for permission to use certain functions. These permissions are used on the device to deliver the feature you requested; the resulting content stays local and is not sent to SnapType.

3.5 Information we do not collect

To be explicit: through the Apps we do not collect students’ names, contact details, photographs of students, precise geolocation, biometric identifiers, behavioral profiles, or education records. We do not knowingly collect this information, and we do not sell or rent personal information.

4. How we use information

We use the limited information described above to: provide, operate, maintain, secure, and improve the Services; respond to support and sales inquiries; send communications you have requested; understand and analyze Site usage; detect, prevent, and address security incidents and misuse; and comply with legal obligations and enforce our agreements. We do not use information for automated decision-making that produces legal or similarly significant effects, and we do not use personal information to train advertising profiles.

5. Legal bases for processing (EEA / UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

6. Optional integrations you control

The Apps can connect with other services only when you choose, so you can import or share your own worksheets:

• Google Drive and Google Classroom: import a worksheet you already have, or share a finished worksheet to your own account or class.
• Email, including Apple Mail: send a worksheet to a recipient you choose, individually or by batch/automatic emailing.

When you use an integration, information moves directly between your device and that third-party service, under your direction and within your account. We do not receive or store the contents of those files. Each integration is governed by that third party’s own privacy policy.

Google API Limited Use. SnapType’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google API access only to provide the features you request.

7. Children’s privacy (COPPA)

We take children’s privacy seriously. The Apps are designed so that no personal information is collected from any user, including children under 13, which means the federal Children’s Online Privacy Protection Act (“COPPA”) notice-and-consent obligations are generally not triggered by the Apps.

When a school makes the Apps available to students, the school may consent to the collection of students’ personal information on behalf of parents to the extent COPPA’s school-authorization framework permits, but in practice the Apps are built not to collect such information at all. We do not condition a child’s participation on disclosing more information than is reasonably necessary, we do not use any child data for behavioral advertising, and we honor requests from schools or parents to review or delete information. Our Site is intended for adults and is not directed to children. If you believe a child has provided us personal information (for example, in a support email), contact us at support@snaptypeapp.com and we will delete it.

8. Schools and students (FERPA and state student-privacy laws)

Schools and districts are responsible for protecting student data under the federal Family Educational Rights and Privacy Act (“FERPA”), the Protection of Pupil Rights Amendment (“PPRA”), and a growing set of state laws, including California’s Student Online Personal Information Protection Act (“SOPIPA”) and New York Education Law § 2-d. Our commitments:

• No education records in the ordinary course. Because student work stays on the device and is not transmitted to us, we do not create, receive, or maintain FERPA “education records” in the ordinary course of providing the Apps.
• School official role. To the extent a school directs us to process student information on its behalf (for example, under a SnapType EDU deployment), we act as a “school official” with a legitimate educational interest, under the school’s direct control, and use that information only to provide the service and for no other purpose.
• No commercial use of student data. We do not sell student data, use it for targeted advertising, or build non-educational profiles, consistent with SOPIPA, NY Education Law § 2-d, and similar laws.
• Security and breach notice. We maintain reasonable safeguards and will notify the school without undue delay of any unauthorized access to student data we hold on its behalf, consistent with our contract and applicable law.
• Parents’ rights. We support schools in honoring parents’ rights to access, review, correct, or delete student information, and we point to the applicable state Parents’ Bill of Rights where one applies (e.g., NY § 2-d).
• Deletion and agreements. A school may ask us to delete student information held on its behalf, and we will do so unless legally required to keep it. We will sign a reasonable DPA, including the Student Data Privacy Consortium (SDPC) National Data Privacy Agreement and state exhibits, where a deployment processes student data on the school’s behalf.

9. How we share information

We do not sell personal information. We share the limited information we hold only as follows:

• Service providers / processors that help us run the Services (for example, website hosting/CDN, help-desk/support, email and newsletter delivery, and analytics) under contracts that limit them to performing services for us;
• At your direction, such as when you use an optional integration to send a worksheet to a service you control;
• Schools, where we process student data on a school’s behalf, with that school;
• Legal, safety, and compliance, when we reasonably believe disclosure is required by law or necessary to protect rights, safety, or the integrity of the Services; and
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to the recipient honoring this Policy and any notice required by law.

10. We do not sell or share personal information

SnapType does not “sell” personal information and does not “share” it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws. We do not use or disclose sensitive personal information for purposes that would require an opt-out. We honor browser opt-out preference signals (such as Global Privacy Control) where required by law.

11. Data retention

12. Data security

We use commercially reasonable administrative, technical, and physical safeguards to protect the limited information we hold, including encryption in transit (TLS), access controls on a need-to-know basis, and vendor due diligence. Our design choice to keep student work on the device is itself a strong privacy protection that minimizes the data exposed to any single point of failure. No method of transmitting or storing information is completely secure, however, and we cannot guarantee absolute security. Schools and districts can request our IT and Security Compliance materials for more detail.

13. Data breach notification

If we become aware of a breach affecting personal information we control, we will notify affected individuals and, where applicable, regulators without undue delay and within the timeframes required by applicable law (for example, within 72 hours of awareness under the GDPR, and as required by U.S. state breach-notification laws). Where we process student data on a school’s behalf, we will notify the school promptly so it can meet its own obligations.

14. International data transfers

We are based in the United States, with employees and contractors working abroad, and process information in the United States and abroad as necessary to operate the business and provide you the Services. If you access the Services from outside the United States, you understand that your information may be transferred to and processed in the United States. Where we transfer personal data from the EEA, the United Kingdom, or Switzerland, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and the Swiss addendum, as applicable.

15. Your privacy rights

15.1 California (CCPA / CPRA)

If you are a California resident, you have the right to know and access the personal information we collect, to request deletion or correction, to opt out of “sale” or “sharing” (we do none), to limit the use of sensitive personal information (we do not use it in ways that require this), and to be free from discrimination for exercising your rights. In the prior 12 months, we have collected the following categories of personal information, in each case for the business purposes described in this Policy:

California’s “Shine the Light” law: we do not share personal information with third parties for their own direct-marketing purposes.

15.2 Other U.S. state privacy laws

Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others as they take effect) have comparable rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling. We do not engage in those activities. You may also appeal a decision on your request as described in Section 15.4.

15.3 EEA, UK, and Switzerland (GDPR / UK GDPR)

If you are in the EEA, the UK, or Switzerland, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, and to data portability and to withdraw consent. Where we process information about Site visitors and people who contact us, SnapType is the controller; where we process information strictly on a school’s behalf, the school is the controller and SnapType is the processor. You may lodge a complaint with your local data protection authority.

15.4 How to exercise your rights

Email support@snaptypeapp.com with your request. We will verify your request (and an authorized agent’s authority, where applicable) and respond within the time required by law. If we decline a request, you may ask us to reconsider by replying to our response. Because the Apps keep data on your own device, you can also exercise the most direct control of all, deleting worksheets within the App or uninstalling the App.

16. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for responding to it, our Site does not currently respond to Do Not Track signals, but we limit tracking as described in this Policy and honor legally recognized opt-out preference signals where required.

17. Links to other sites

The Services may link to third-party websites and services we do not control. We are not responsible for their content or privacy practices, and this Policy does not apply to them. Please review the privacy policy of any third-party site you visit.

18. Changes to this Privacy Policy

We may update this Policy from time to time. When we do, we will post the new version here and update the dates above. If the changes are material, we will provide a more prominent notice, such as an email (if we have your address) or a notice on the Site. Your continued use of the Services after an update means you accept the revised Policy.

19. Contact us

Questions, concerns, or requests about this Policy or your information:

EEA/UK note: If an EU/UK representative is required under Article 27 GDPR, SnapType will designate one and list its contact details here.