SnappyBox is operated by Design Farm in South Africa.
1. Who we are
SnappyBox is developed and operated by Design Farm, trading as SnappyBox. Design Farm is the responsible party for personal information it processes under South Africa's Protection of Personal Information Act 4 of 2013 ("POPIA").
Postal address: PO Box 222, Fountainbleau, Johannesburg, 2032,
South Africa.
Privacy email:
privacy@snappybox.app
2. Information in the SnappyBox app
SnappyBox does not require an account. We do not ask for your name, email address, password, or contact list to use the app.
Box names, item descriptions, quantities, notes, photographs, locations, and dates are stored locally on your iPhone. They are processed by the app on your device and are not transmitted to or stored on SnappyBox servers.
3. Camera and photo-library permissions
If you choose to add photographs, SnappyBox requests permission to use the camera and/or selected photo-library features. The permission is used only to let you capture or choose images for your local inventory. You control these permissions in iOS Settings and may withdraw them at any time.
4. iPhone and iCloud backups
Local app data may be included in your normal iPhone or iCloud backups depending on your Apple settings. Apple operates these backup services as an independent provider under its own terms and privacy policy. SnappyBox cannot access your Apple backups.
6. Purchases and App Store analytics
Apple processes the one-time in-app purchase, payment details, transaction records, taxes, refunds, and purchase restoration. We do not receive your full payment-card details.
We may use Apple's App Store Connect and App Analytics reports to understand downloads, purchases, crashes, and general app performance. Apple provides these according to its privacy settings and documentation. We do not use third-party advertising or behavioural-tracking SDKs in the app.
7. Information processed on our website
When you visit snappybox.app, normal hosting and security logs may process information such as your IP address, request time, browser type, requested page, and error information. This is used to deliver and secure the website and diagnose faults.
If you consent to analytics, Google Analytics may process information about pages viewed, approximate location, device and browser characteristics, referral source, session activity, and cookie or similar identifiers. We do not use Google Analytics for advertising or personalised advertising.
Google Search Console provides aggregate information about how the website appears in Google Search. It does not require us to place an analytics cookie in your browser.
9. Why we may process website information
Under POPIA, we process personal information only when a lawful justification applies, including:
- Consent for optional Google Analytics cookies and related analytics processing;
- Contractual necessity where processing is needed to provide a service you request;
- Legitimate interests in providing, securing, and troubleshooting the website, where permitted by POPIA; and
- Legal obligations where information must be retained or disclosed by South African law.
Under POPIA, we process personal information lawfully, minimally, for a defined purpose, and with appropriate safeguards.
10. Providers and international transfers
Website hosting providers may process technical logs on our behalf. With consent, Google processes website analytics. Apple independently processes App Store purchases, device backups, Messages delivery, and App Store services.
Some providers may process information outside South Africa. Where Design Farm controls such a transfer, it will take reasonable steps to ensure the transfer complies with section 72 of POPIA, including using appropriate contractual or legal safeguards where required. Provider privacy notices explain their own processing and safeguards.
11. Retention
We do not retain your local inventory. It remains on your device until you edit or remove it, delete the app, reset the device, or restore a backup.
Cookie consent is remembered for up to six months before we ask again. Google Analytics data will be configured for a retention period of up to 14 months where available. Security logs are retained only as long as reasonably needed for security, troubleshooting, and legal obligations.
12. Your privacy rights
Under POPIA, you may request access to personal information we hold about you, ask for correction or deletion where permitted, object to certain processing, withdraw consent, and lodge a complaint with the Information Regulator. Because inventory data stays on your device, you normally exercise control over it directly in the app or through your device and backup settings.
For website information we control, email privacy@snappybox.app. We may need to verify a request before acting on it.
13. Children's privacy
SnappyBox is not directed at children under 13, and we do not knowingly collect personal information from children through the app. A person under 18 should use SnappyBox only with the involvement of a parent or legal guardian. If you believe a child has provided information through the website, contact us so we can investigate.
14. Security
We use reasonable technical and organisational measures for the information we control. No device, transmission, or storage method is completely secure. Protect your iPhone with a strong passcode, keep iOS updated, manage backups carefully, and review exports before sharing them.
15. Changes to this Policy
We may update this Policy when the app, website, providers, or law changes. We will publish the updated version and revise its effective date. Material changes will receive additional notice where required.
16. Contact and complaints
Contact:
privacy@snappybox.app
Postal address: PO Box 222, Fountainbleau, Johannesburg, 2032,
South Africa.
You may also lodge a complaint with the South African Information Regulator. We would appreciate the opportunity to address your concern first.