Privacy Policy
Last updated 19 August 2026
Snapsack is a packing-list app. This policy describes what it stores, why, and who can see it. It is short because the app collects very little.
What is collected
- Your sign-in identity. An email address, or an identifier provided by Apple or Google if you sign in with them. If you use Sign in with Apple and choose to hide your address, Snapsack only ever receives Apple's relay address.
- The content you create. Your templates, trips, and the items in them, including whether each item is packed and who marked it packed.
- Invitations you create. The invite codes you generate, when they expire, and how many times they have been used.
There is no analytics package, no advertising, and no third-party tracking. Snapsack does not collect your location, contacts, photos, or device identifiers for advertising.
Who can see your lists
Only people you share with. Every list records the accounts that own it, and the server refuses reads and writes from anyone else. Sharing happens one way: you generate an invite code and give it to someone. There is no user directory and no way to search for another person in the app, so nobody can find you or request access.
An invite code works like a key — anyone holding it can join the list it belongs to, until it expires, is used up, or you revoke it. Send codes only to people you intend to share with.
Where the data lives
On Amazon Web Services in the US East (N. Virginia) region, using Amazon Cognito for sign-in and Amazon DynamoDB for storage. Data is encrypted in transit and at rest. A copy is also cached on your own device so the app works without a connection.
Who it is shared with
Nobody. Your data is not sold, rented, or shared with advertisers or data brokers. It is disclosed only to the people you invite, to Amazon Web Services as the hosting provider, and where legally required.
How long it is kept
Lists you delete are marked deleted and stop appearing in the app, then are removed permanently in a later cleanup. To delete your account and everything in it, email privacy@snapsack.app from your account's address and it will be erased.
Your choices
You can request a copy of your data, correction of it, or its deletion, at privacy@snapsack.app. If you are in the EEA or the UK, the legal basis for processing is performance of a contract — running the service you asked for.
Children
Snapsack is not directed at children under 13 and does not knowingly collect their information.
Changes
If this policy changes materially, the updated date above will change and the new version will be posted here before it takes effect.