Privacy · SnagFlag

What stays on your phone

Everything, by default. Projects, snags, photographs, your company details and logo, and every report you have generated live in a database on the device and nowhere else. Delete the app and it is gone, so keep your own copies of reports that matter.

What we receive, and only when you share

Tapping share on a report uploads that report so the link works in a browser. That upload contains:

The project: name, client name, site address, inspector, dates and reference.
The snags in it: number, title, area, trade, description, severity, status, who it is assigned to, and the dates.
The photographs attached to those snags, including any markup you drew on them.
Your company name, inspector name and brand colour, so the page matches the PDF.
An installation identifier: a random number generated on your phone when you first share. It is not derived from your device, your SIM or anything about you.

Anything you type into a snag ends up in the report you send. If you would not want it read by whoever you send the link to, do not put it in the description.

What we record about shared links

How many times a report link has been opened, and when it was last opened. This is the feature that tells you whether your client actually read what you sent.
When a link expires, and whether you have revoked it.

We do not record who opened it. There is no visitor log, no IP address stored against a view, and no identification of the reader.

Signing in to the dashboard

Opening your dashboard from the app creates a single-use code that expires in five minutes, then sets a cookie so the browser stays signed in for thirty days. The cookie holds your installation identifier and a signature, nothing else. It is used only to keep you signed in, never to follow you anywhere.

What we do not do

No analytics, no tracking pixels, no advertising and no third-party scripts of any kind. You can check the page source.
No selling, renting or sharing of your data. There is no arrangement under which that could happen.
No email address, password, phone number, ID number or payment details are collected by the app or this site.

One exception worth naming rather than hiding: the typeface on this site is served by Google Fonts, so loading a page tells Google your IP address. We are moving to serving it ourselves. It applies to this website only. The app does not do this.

Deleting things

Revoking a share link from the app stops it working immediately. To have everything associated with your installation removed from our side entirely, email us and say so. You will not be asked to justify it. Deleting the app removes everything held on the phone.

hello@snagflag.app

Plain English, not legal advice This page describes exactly what the software does today, written from the code rather than from a template. It has not been reviewed by a lawyer, and it is not yet a POPIA compliance statement. If you are relying on it contractually, ask us and we will get it properly reviewed.

Last updated 2026-09-09.