Last updated: 16 August 2026
This policy explains what personal data SnagRight collects, why we collect it, and what rights you have over it. It applies to the SnagRight mobile app and to snagright.app.
In short: we collect the email address you sign up with, the snagging data you create, and basic technical information needed to run the service. We do not sell your data, we do not use it for advertising, and your snagging records are visible only to you.
SnagRight is operated by Project Prepared Ltd, a company registered in England and Wales.
Project Prepared Ltd is the data controller for personal data processed through SnagRight.
| Data | Why | Legal basis |
|---|---|---|
| Email address and password | To create and secure your account | Performance of a contract |
| Project and snag records — descriptions, room and trade, status, developer responses | The core function of the app | Performance of a contract |
| Photographs you take, and the GPS coordinates attached to them | To evidence and locate defects | Performance of a contract |
| Company name and logo, if you add them | To brand your exported reports | Performance of a contract |
| Subscription and purchase status | To provide the features you have paid for | Performance of a contract |
| Technical logs — error reports, timestamps | To keep the service working and diagnose faults | Legitimate interests |
We do not collect your name, address or telephone number unless you choose to put them into a project or send them to us. We do not use analytics or advertising trackers.
SnagRight records GPS coordinates against photographs so that defects can be found again on site, and optionally converts them to a what3words reference. Location is captured only when you take a photograph, never in the background. If you decline location permission the app remains fully usable and photographs are stored without coordinates.
Purchases are handled by Apple through the App Store. We never see or store your card details. We receive only confirmation of what was purchased and when.
We use a small number of processors to run the service. Each acts on our instructions and may not use your data for their own purposes.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and photograph storage | London, United Kingdom (eu-west-2) |
| RevenueCat | Subscription and purchase management | United States |
| Anthropic | AI report enhancement, where you choose to use it | United States |
| Apple | App distribution and payment processing | Ireland / United States |
About AI enhancement. This feature is optional and runs only when you tap it on a specific snag. When you do, that snag's description is sent to Anthropic to be rewritten more clearly. Photographs, your email address and your other snags are not sent. Anthropic does not use data submitted through their API to train their models. If you would rather nothing left your device for this purpose, simply do not use the feature — every other part of the app works without it.
Transfers to the United States are made under the UK International Data Transfer Addendum to the European Commission's standard contractual clauses.
We will disclose data to law enforcement or other authorities only where we are legally required to do so.
Your account, snags and photographs are stored in the United Kingdom. SnagRight also keeps a copy on your device so that it works without a signal on site; that copy is removed when you delete the app.
Under the UK GDPR you have the right to:
To exercise any of these, email enquiries@snagright.app. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Data is encrypted in transit and at rest. Access to your records is restricted at the database level so that only your account can read them. Passwords are stored hashed and are not readable by us. No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of the data.
SnagRight is not intended for children and we do not knowingly collect data from anyone under 16.
If we make a material change we will update the date above and, where the change significantly affects you, tell you in the app or by email.