Privacy policy
Last updated 22 October 2026. Applies to the Snimka app for Android and iOS and to this website.
Who is responsible
The controller of any personal data described here is BitAlloc d.o.o., Ulica Križnog puta 90, 10000 Zagreb, Croatia (OIB 51729437531), reachable at info@bitalloc.com. We have not appointed a data protection officer; the company is below the thresholds that require one. Full company details are in the Impressum.
The short version
Snimka has no account, no analytics and no advertising. Your photos and videos stay with you: on your phone and, if you set up a backup, on your own server. They never come to us. Three small things can leave your phone: a photo's location when you open its details, a random Snimka Pro ID and purchase status to our purchase provider, and a crash report, only if you choose to send one. This policy explains each.
What the app accesses on your device, and why
- Photos and videos: to show, organise, search and edit your library. On Android you can grant access to all media or to a selection; on iOS, full or limited access. Snimka only ever sees what you grant.
- Location stored in photos: where a photo carries a location in its metadata, Snimka shows it in the photo's details.
- Biometrics: the Locked collection opens with your fingerprint or face through the system's own prompt. Snimka never sees biometric data; it only receives the system's yes or no.
- Edits and settings: saving an edit writes a new file into your library, or replaces the original only when you choose so. Unfinished edits and your preferences are kept in the app's private storage on your phone.
- Local network: only for backup, to find and reach the server you set up.
- Notifications (Android): to show backup progress and tell you when a backup needs attention.
Snimka asks for each permission when it is first needed and works without the ones you decline, with the matching feature unavailable. None of this data is transmitted to us or to anyone else, except as described below.
Photo locations
When you open the details of a photo that carries a location, Snimka passes only that photo's coordinates (latitude and longitude, no image and no other data) to your phone's location service, which may look them up online:
- iPhone: Apple's geocoding and map services (CoreLocation and MapKit) receive the coordinates to return a place name and a map image, under Apple's privacy policy.
- Android: the system geocoder receives the coordinates to return a place name. On most phones it is provided by Google Play services, under Google's privacy policy; some phones use another provider or none.
- Open in Maps: if you tap it, the coordinates are handed to the maps app you choose.
We do not receive these coordinates. The lookup happens only when you open a photo's details, and only for photos that already contain a location. Legal basis: our legitimate interest in showing you where your own photo was taken (GDPR article 6(1)(f)). You can avoid it by not opening the details of located photos, or by removing location data with your phone's tools.
Snimka Pro and purchases
Snimka Pro is bought through the App Store or Google Play. Apple or Google take the payment and process your payment details as the seller, under their own privacy policies. We never see your name, email or payment details.
To know whether Pro is active and to show the plans and prices, Snimka uses RevenueCat, Inc. (USA) as our processor. When the app starts, it sends RevenueCat a random ID created on your phone (the “RevenueCat ID” shown in Settings), the app version, your device's operating system and store country, and, after a purchase, the store's purchase record. RevenueCat returns whether Pro is active. The ID is not linked to your identity, and it is never combined with crash reports.
Legal basis: the contract, if you buy Pro (GDPR article 6(1)(b)); otherwise our legitimate interest in showing current plans and restoring purchases you made (article 6(1)(f)). RevenueCat keeps purchase records for as long as needed to provide Pro and to meet our accounting obligations. To have them deleted, email us your RevenueCat ID.
Crash reports
If Snimka crashes, it asks the next time you open it whether to send the report. Nothing is sent unless you say yes, or unless you turn on “Send crash reports automatically” under Settings › Privacy, which you can turn off at any time.
A report goes to Firebase Crashlytics (Google LLC, USA), our processor. It contains the error and where in Snimka's code it happened, the app version, device model, operating system version, free memory and storage, and a random installation ID. Before anything leaves your phone, Snimka removes file names and paths, photo and video names, server and network addresses, and email addresses from it. A report never contains your photos, your location or your RevenueCat ID.
Legal basis: your consent (GDPR article 6(1)(a)), which you can withdraw in Settings. Reports are kept for 90 days, then deleted.
Backup to your own server
With Snimka Pro you can back up your photos and videos to a shared folder on your own NAS or computer. Snimka copies them directly from your phone to that server over your network. We do not receive, see or store your photos, the server's address or your sign-in details.
The server's password stays on your phone, in its secure storage (the iOS Keychain, or encrypted with the Android Keystore). To find servers on your network, Snimka asks for local network access and looks for file-sharing announcements on your Wi-Fi. Nothing about them leaves your phone.
Transfers outside the EU
RevenueCat and Google process data in the United States. These transfers are covered by the EU Standard Contractual Clauses in each provider's data processing terms and, for Google, also by the EU–US Data Privacy Framework.
When you write to us
If you email info@bitalloc.com, we process your email address and what you write in order to answer. Legal basis: our legitimate interest in handling your request, or the contract if it concerns a purchase. We keep support correspondence for 24 months after the last message, then delete it.
Beta testing
If you join a test version of Snimka through TestFlight or Firebase App Distribution, Apple or Google process your email address to deliver the builds, under their terms. We see the email addresses of the testers we invited and nothing else.
Analytics and advertising
None. Snimka contains no analytics or advertising and does not track you across apps or websites. Crash reports, above, are only sent with your yes.
This website
This website sets no cookies and runs no analytics. It is hosted by GitHub Pages (GitHub, Inc.), which processes the IP address of each request in its server logs under GitHub's privacy statement; we receive no visitor data.
Children
Snimka is a general-audience gallery, not directed at children. It collects no more from children than from anyone else, as described above.
Your rights
Under the GDPR you may ask us for access to, rectification or erasure of your personal data, restriction of or objection to its processing, and a copy in a portable format. For data handled by Apple or Google as described above, their own privacy policies explain how to exercise your rights with them. You have the right to lodge a complaint with a supervisory authority, in Croatia the Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. We make no decisions about you by automated means.
Changes
If this policy changes, the new version is published here with its date. A change that affected your data would be shown in the app before it took effect.