OfficeSnap is an iOS app that turns a casual selfie into a studio-grade professional headshot or a passport/visa-spec ID photo. To do that, you upload a photo of a face. We treat that photo as the sensitive data it is. This policy explains, in plain language, exactly what we collect, why, how long we keep it, who processes it on our behalf, and the rights you have.
The single most important fact: the face photo you upload is deleted from storage the moment your generation finishes — whether it succeeds or fails. It is never kept past the generation, and it is never written to any log. Your photos are never sold and never used to train any AI model.
The data controller is Jindong Chen, the sole independent developer of OfficeSnap. You can reach us at support@officesnap.app.
A photo of a face is special-category personal data under Article 9 of the GDPR. We process it only with your explicit, in-app consent, given before you upload, under Article 9(2)(a). You can withdraw that consent at any time by deleting your account in the app (Settings → Delete account), which removes all your data and generated outputs. If you do not consent, the app cannot generate a result, because the photo is essential to the service.
We use your information to deliver the service and nothing more:
Legal bases (EU/UK, GDPR Article 6 and Article 9):
Your photos are never sold, and they are never used to train any AI model.
Before generation, each uploaded photo is screened by an automated moderation system to block unsafe or prohibited content. This automated screening can prevent a particular image from being processed. It does not produce legal or similarly significant effects on you. If a safe image is wrongly blocked, contact support@officesnap.app and a human will review it.
We rely on a small set of trusted service providers to operate OfficeSnap. All are US-based and are covered by Standard Contractual Clauses (EU 2021/914), the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework where applicable.
| Service | Data it receives | Tracking? | Purpose |
|---|---|---|---|
| Cloudflare | Photos, generated outputs, device id, IP | No | Hosting, storage (R2), database (D1), and request routing via Workers |
| Replicate | The photo only, for the duration of generation | No | Runs the gpt-image-2 model that generates your result |
| OpenAI | The input image (Moderation API) | No | Screens the input for safety; retains no images |
| Google AdMob | Device id and IDFA, only after ATT consent | Yes, only after ATT consent | Rewarded ads ("watch an ad for +1 credit") |
| PostHog | Pseudonymous events (screen views, taps); no identity | No | Product analytics |
| Sentry | Crash stack traces, app version, anonymous device id | No | Crash reporting and diagnostics |
| Apple | In-App Purchase receipt; optional Apple Sign In identifier and email | No | Purchase validation and optional sign-in |
We do not use Stripe, Printify, or RevenueCat. AdMob is the only sub-processor that performs any tracking, and only after you grant the ATT prompt.
OfficeSnap does not track you across other apps and websites unless you allow it. The IDFA is only collected if you tap "Allow" on the iOS App Tracking Transparency prompt, and it is used solely to deliver the AdMob rewarded ad. If you decline, the app still works fully — you simply will not see tracking-based advertising. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.
OfficeSnap is operated from the United States, and your data is stored and processed in the United States by the sub-processors listed above. Data is encrypted in transit (TLS) and at rest.
Uploaded face photo: deleted from storage at job completion — on success or failure. It is never kept past the generation and is never written to any log.
Under the GDPR, UK GDPR, and the CCPA, you have the right to:
To make a request, email support@officesnap.app with "DSAR" in the subject line. We respond within 30 days. The data controller is Jindong Chen.
You also have the right to lodge a complaint with your local data protection authority. In the EU, find yours via edpb.europa.eu; in the UK, the Information Commissioner's Office at ico.org.uk.
Because OfficeSnap is operated from the United States, data from the EU, UK, and elsewhere is transferred to and processed in the US. These transfers are protected by Standard Contractual Clauses (EU 2021/914), the UK International Data Transfer Addendum, and the EU-US Data Privacy Framework where applicable, together with encryption in transit and at rest.
The website officesnap.app sets no cookies and uses no browser trackers or analytics whatsoever.
We protect your data with encryption in transit (TLS) and at rest, and we minimise what we keep — most notably by deleting your uploaded photo the instant the generation completes. No system is perfectly secure, but we work to keep your data safe and to retain as little of it as possible.
OfficeSnap is not directed to anyone under 16. The app requires you to confirm you are 16 or older before use. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact support@officesnap.app and we will delete it.
We may update this policy as the app evolves. When we do, we will revise the "Last updated" date above and, for material changes, surface a notice in the app.
Questions about this policy or your data? Email support@officesnap.app (Jindong Chen, OfficeSnap).