Your inventory is private. This page explains, in plain language, how SnapList handles your photographs and data.
SnapList was built with Lovable, a platform that includes automated security scanning. During development and before each publish, Lovable runs security checks that review database access rules, scan dependencies for known vulnerabilities, and flag potential code-level risks. This helps catch issues like missing access controls or exposed secrets before they reach the live app.
Your photos and inventory data live in Lovable Cloud, which is powered by Supabase. This means your data is stored in private, encrypted cloud storage with daily backups.
When you open your library, your browser receives a temporary, time-limited access link. That link expires automatically after a set period, so even if someone saw an old link, it would no longer work.
We do not browse, sell, or share your data for any other purpose.
You can sign in with Google or with an email and password. If you use the app before signing in, your items are tied to your device. When you sign in later, those items are automatically linked to your account so you can access them on any device.
When you take a photo, it is sent to the Lovable AI Gateway, which uses Google Gemini models to generate a title, description, brand, category, and location for the item. This happens solely to build your inventory.
Your photos are processed according to the AI provider’s data handling terms and are not used to train or improve AI models.
Your item records are protected at the database level by row-level security rules managed inside Lovable Cloud (Supabase). Even if someone attempted an unauthorized query, the database would block access to any item that does not belong to them.
When you share an item or category with someone by email, the invitation is sent through Lovable’s email infrastructure. The recipient receives a private email with a link to view only what you chose to share. There are no public share links.
Permanently remove every photograph, item, category, and share tied to your account. This cannot be undone.
Your sign-in account is preserved — you can sign back in to an empty inventory at any time.
This page is maintained by the SnapList team to answer common questions about security and privacy. If you have a specific concern or vulnerability to report, please contact the team directly.