🛡️ Privacy First Philosophy

Privacy Policy

Effective Date: October 31, 2026

1. Local-First & Self-Hosted Architecture

SnapHaven is designed from the ground up as local-first software. When you run the SnapHaven server software on your computer, NAS, or home server, all media uploads (photos, videos, metadata) are transferred directly over your local network using mutual TLS (mTLS) encryption.

We do not collect, process, host, or inspect your photos or personal files. Your data remains exclusively on your devices under your complete control.

2. Mobile Application Permissions & Location Data

The SnapHaven Android application requests access to device Location data (including foreground and background location) solely to support optional Wi-Fi network filtering for automatic backup:

  • Purpose of Location Access: On Android (Android 8.1 and higher), the Android operating system enforces strict security controls that require apps to hold ACCESS_FINE_LOCATION and ACCESS_BACKGROUND_LOCATION permissions in order to obtain the connected Wi-Fi Network Name (SSID). SnapHaven uses this permission exclusively to read your currently connected Wi-Fi network name so that automatic background backups only execute when you are connected to your designated, trusted Wi-Fi networks (such as your home Wi-Fi).
  • No GPS or Geographic Tracking: SnapHaven does not access, monitor, log, or track your GPS coordinates, physical location, or travel history.
  • No Off-Device Transmission or Third-Party Sharing: Wi-Fi SSID verification is conducted strictly on-device in temporary memory. Your location data and network details are never transmitted off your device, never sent to external cloud servers, and never sold or shared with any third party, analytics provider, or advertiser.
  • Retention & Revocation: Location data is never stored or retained. You can disable Wi-Fi network restriction settings or revoke location permissions at any time via Android System Settings or within the SnapHaven app preferences without affecting manual sync functionality.

3. Website Data Collection

When visiting our website (snaphaven.app):

  • Beta Signups: If you voluntarily request Android Beta access, we collect your provided email address solely for sending Google Play Store testing invitations. We do not sell or share your email with third parties.
  • Bot Protection: We use Cloudflare Turnstile to protect signup forms from automated spam. This service verifies human users without tracking personal browsing history.

4. Code Signing & Security Transparency

SnapHaven server executables and installers are compiled directly from open-source source code via automated GitHub Actions CI/CD workflows. Every release includes SHA256 checksums so you can independently verify binary integrity.

5. Contact Information

If you have questions about this Privacy Policy or your data privacy, please open an issue on our official GitHub Repository or contact us at support@snaphaven.app.