Privacy Policy for Snap2Plan

Last Updated: September 26, 2026

Introduction

Snap2Plan (“we,” “our,” or “the app”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our mobile application.

Who We Are (Data Controller)

Snap2Plan is developed and maintained by Miika Kettunen, an individual developer operating as Clarity Tools Lab, Finland.

For the purposes of the EU General Data Protection Regulation (GDPR), Miika Kettunen is the data controller for personal data processed in connection with this app.

Contact: kettunen.miika@gmail.com

Information We Collect

1. Information You Provide

Text and Images: When you use our AI-powered event extraction feature, you provide text or images containing event information. This data is processed to extract calendar events and reminders. Processing happens only when you actively choose to analyze content — never in the background.
Calendar and Reminder Data: When you save extracted events, we access your device’s Apple Calendar and Reminders apps with your permission. Your existing calendar contents are never sent anywhere.

2. Automatically Collected Information

Subscription Information: We collect information about your subscription status through RevenueCat to manage your Pro subscription. This uses an anonymous subscriber identifier — no name, email, or payment details.
Usage Data: We track usage locally to manage your 14-day free trial.

How We Use Your Information

We use your information to:

Process your text and images to extract events and reminders using OpenAI’s GPT API
Manage your free trial and Pro subscription
Save events and reminders to your device’s Apple Calendar and Reminders apps
Provide customer support

Performance of a contract (Art. 6(1)(b)): Processing the text and images you submit is necessary to provide the event extraction feature you chose to use. Managing your subscription status is necessary to provide the Pro subscription you purchased.
Legitimate interest (Art. 6(1)(f)): Responding to support requests and keeping the service secure and reliable.

Third-Party Services

Service	Purpose	Data shared
OpenAI	AI event extraction	Text and images you choose to analyze
Supabase	Secure proxy that relays the AI request	Request in transit only — not stored
RevenueCat	Subscription management	Anonymous subscriber ID and purchase status
Apple	Calendar, Reminders and in-app purchases	Processed on your device / by Apple

OpenAI

We use OpenAI’s GPT API to analyze your text and images. Your data is sent to OpenAI for processing. OpenAI’s data handling practices are governed by their Data Processing Addendum (DPA):

OpenAI DPA: https://openai.com/enterprise-privacy
OpenAI Privacy Policy: https://openai.com/privacy

Important: OpenAI does not use data submitted via their API to train their models. Your data is processed and then deleted according to OpenAI’s data retention policy.

Supabase (Infrastructure)

We use Supabase Edge Functions as a secure proxy for AI API requests:

Routes requests to OpenAI GPT
Stores API keys securely on server (not on your device)
All communications use HTTPS encryption
No user data is stored on Supabase
Supabase Privacy Policy: https://supabase.com/privacy
Supabase DPA: https://supabase.com/legal/dpa

RevenueCat

We use RevenueCat to manage in-app subscriptions. RevenueCat processes your purchase information and subscription status:

RevenueCat Privacy Policy: https://www.revenuecat.com/privacy
RevenueCat DPA: https://www.revenuecat.com/dpa

International Data Transfers

OpenAI, Supabase, and RevenueCat may process your data on servers located outside the European Economic Area (EEA), primarily in the United States. These transfers are protected by the EU Standard Contractual Clauses (SCCs) included in each provider’s Data Processing Addendum, and, where applicable, by the provider’s certification under the EU-U.S. Data Privacy Framework.

Data Storage and Retention

Local Storage: Events, reminders, and analysis history are stored locally on your device. We do not store this data on our servers.
AI Processing: Text and images sent to OpenAI are processed in real time and deleted according to OpenAI’s data retention policy (typically within 30 days, for abuse monitoring).
Supabase: No user data is stored; it only acts as a secure proxy for API requests.
RevenueCat: Subscription data is retained by RevenueCat for the duration of your subscription and as required by law.

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:

Right of Access (Art. 15): You can request information about the personal data we process.
Right to Erasure (Art. 17): Data stored on your device is deleted when you delete it in the app or uninstall the app. Subscription data held by RevenueCat is not removed by uninstalling — contact us and we will request its deletion.
Right to Rectification (Art. 16): You can correct inaccurate data directly in the app or in Apple Calendar and Reminders.
Right to Data Portability (Art. 20): You can export your calendar events and reminders using Apple’s standard tools.
Right to Object (Art. 21): You can object to processing by not using the AI extraction feature.
Right to Restriction (Art. 18): You can restrict processing by revoking Calendar, Reminders, or Photos permissions in your device Settings.
Right to Lodge a Complaint: You have the right to lodge a complaint with your national data protection authority. In Finland, this is the Office of the Data Protection Ombudsman: tietosuoja.fi.

To exercise any of these rights, contact us at kettunen.miika@gmail.com. We will respond within 30 days.

Data Security

We implement industry-standard security measures:

All communications with OpenAI and Supabase use HTTPS encryption
API keys are stored securely on Supabase server (not on your device)
No user data is stored on our servers
Payments are processed entirely by Apple

Children’s Privacy

Snap2Plan is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the “Last Updated” date at the top of this policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise your GDPR rights, please contact us:

Miika Kettunen (Clarity Tools Lab), Finland

Email: kettunen.miika@gmail.com

Data Processing Addendum (DPA)

For enterprise customers or users requiring a formal DPA, please contact us at the email address above. The sub-processors listed under “Third-Party Services” each provide their own DPA, linked above.

Summary

✅ Events and history stay on your device — we do NOT store your data on our servers
✅ Text and images are sent to OpenAI only when you choose to analyze them
✅ We do NOT sell your data to third parties
✅ OpenAI does NOT use your API data to train their models
✅ Transfers outside the EU are protected by Standard Contractual Clauses
✅ You have full GDPR rights, including the right to complain to a data protection authority