Privacy Policy
Effective [effective date]
Snapshot is run by Kura Apps ([legal business name]). This policy explains what we collect when you use Snapshot, why, who can see it, and the choices you have. We wrote it to match how the app actually works.
What we collect
- Your account: your name, email address and password. We store only a scrambled (hashed) version of your password.
- What you put in a Snapshot: for example a name, a description, allergies, conditions, medications, routines, preferences and emergency contacts. This can include information about children and health. You decide what to add, and every field is optional.
- Care sessions: the caregiver's name and, if you add it, their phone or email, plus the times and sections you choose.
- Care updates: the notes, meals, medications and other updates a caregiver logs during a session.
- Security information: the IP address and browser type used to sign in or open a care link, kept so we can stop misuse and investigate problems. These records never include what was written in a Snapshot or a care update.
- Payments: if you upgrade, our payment processor (Stripe) handles your card. We never see or store card numbers.
What we don't do
- We don't sell your information or share it for advertising.
- We don't use advertising or analytics trackers.
- Notifications only say what kind of update happened (for example "Sarah recorded medication"), never the details.
Who can see your information
- You, when signed in.
- Caregivers you share with, through a private link, only for the time window you set and only the sections you tick. The link stops working when the session ends, expires or you revoke it. Caregivers see only their own session's updates.
- People in your Care Circle (Plus and Family plans), whom you invite yourself.
- Service providers that run Snapshot for us: Vercel (hosting), Supabase (database), and Stripe (payments, once switched on). They may only use your information to provide their service to us.
- Authorities, only if the law requires it.
Children
Snapshot is for adults. Parents and guardians may add information about children in their care. We don't knowingly let children under 13 create accounts. If you believe a child has signed up, contact us and we'll delete the account.
Health information
Snapshot helps families share care notes. It isn't a medical record, a healthcare provider or medical advice, and we don't claim to be covered by HIPAA. Please only add the health details a caregiver needs.
How we protect it
Everything travels over encrypted connections and is encrypted where it's stored. Care links use long random codes that we store only in scrambled form. Every request is checked on our servers, so one person can never open another person's Snapshot by changing a link.
How long we keep it
We keep your information while your account is open. On the Free plan, care history older than 7 days is hidden; it becomes visible again if you upgrade. When you delete a Snapshot or your account, its information is deleted from our database right away and from backups within [backup retention period]. Security records are kept for up to [security log retention period].
Your choices and rights
- See and change your name on the Account page, and edit or delete any Snapshot at any time.
- Delete your account and everything in it from the Account page.
- Ask us for a copy of your information, or ask anything about this policy, at [privacy contact email].
Depending on where you live, you may have further rights under your state's privacy law. We honor them for everyone.
Cookies
We use only the cookies Snapshot needs to work: one keeps you signed in, and one lets a caregiver's phone keep using a care link during the session. No advertising or tracking cookies.
Changes and contact
If we change this policy in an important way, we'll tell you in the app before it takes effect. Questions: [privacy contact email], [mailing address].