Privacy Policy
Effective date: July 1, 2025 · Last updated: July 1, 2025
ChromaSnap ("we", "us", or "our") is developed and operated by the Chromasnap Team.
This Privacy Policy describes how we collect, use, and protect information when you use
the ChromaSnap mobile application and related services.
By using ChromaSnap, you agree to the practices described in this policy. If you do not
agree, please discontinue use of the app.
1. Information We Collect
Account information
- Username (chosen by you at registration)
- Password (stored as a one-way cryptographic hash — we never store your plain-text password)
- Recovery email address (optional, provided voluntarily for account recovery)
Content you submit
- Photos and images you upload for colorization or animation processing
- Processed output images and video files
Billing and usage data
- Google Play purchase tokens and order identifiers used to verify in-app purchases
- Token/credit usage tied to your account for subscription enforcement
- Subscription tier and entitlement status
Technical and device data
- IP address (for rate limiting and abuse prevention)
- Basic request metadata (HTTP method, endpoint, timestamp) retained in server logs
2. How We Use Your Information
- To authenticate you and maintain your account session
- To process your photos and videos through our AI colorization and animation pipeline
- To verify and fulfill your in-app purchases and subscription entitlements
- To enforce usage limits and prevent abuse or fraudulent activity
- To allow you to recover access to your account via your recovery email
- To improve the reliability and performance of our service
3. Third-Party Services
ChromaSnap uses the following third-party services that may process your data:
-
Google Vertex AI — Your images are transmitted to Google's Vertex AI
infrastructure for colorization and animation processing. Google's
Cloud Privacy Notice
applies.
-
Google Play Billing — Purchase tokens are verified via Google Play's
billing API. Google's
Privacy Policy
applies to these transactions.
-
Google Firebase — Used for authentication support. Subject to
Firebase's Privacy Policy.
-
Cloudflare Turnstile — Used for bot and spam prevention during account
registration and sensitive actions. Subject to
Cloudflare's Privacy Policy.
-
Google Cloud Storage — Account data (including usage records) is stored
in encrypted Google Cloud Storage buckets within the Google Cloud Platform.
We do not sell your personal data to any third party. We do not use advertising SDKs or share data with ad networks.
4. Data Retention
- Account data is retained for the life of your account.
- Uploaded images and generated outputs are processed in memory and are not permanently stored after delivery, except where explicitly indicated (e.g., animated video results temporarily stored for retrieval).
- Server logs are retained for up to 30 days for security and debugging purposes.
- When you delete your account, your username, password hash, and usage records are permanently deleted.
5. Your Rights and Controls
- Account deletion: You can delete your account at any time from the app (Account → Danger Zone → Delete Account). This permanently removes your account data.
- Password change: You can change your password at any time from within the app.
- Recovery email: You can add, update, or remove your recovery email from your account settings.
- Data access requests: To request a copy of your stored data, contact us at the address below.
6. Data Security
We use industry-standard security measures including:
- All data in transit is encrypted via HTTPS/TLS
- Passwords are stored using a one-way cryptographic hash (bcrypt)
- Authentication tokens are short-lived JWTs with expiry enforcement
- Access to backend infrastructure is restricted by service-account credentials and IAM roles
No method of electronic transmission or storage is 100% secure.
We strive to use commercially acceptable means to protect your data but cannot guarantee absolute security.
7. Children's Privacy
ChromaSnap is not directed at children under the age of 13 (or 16 in the European Union).
We do not knowingly collect personal information from children. If you believe a child has
provided us personal information, please contact us and we will promptly delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the
"Last updated" date at the top of this page. Continued use of ChromaSnap after changes
are posted constitutes your acceptance of the revised policy.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights,
please contact us at:
Chromasnap Team
Email: yareddc@gmail.com