Privacy

Your phone holds your work. We hold a copy once you share.

SnagFlag keeps your projects, snags and photographs on your phone. Nothing leaves the device until you first do something that needs us: share a report, open your dashboard, or add a phone. From then on the app also backs your work up to us each time you open it, so a lost or replaced phone can get it back. There is no account to create, so there is no name, email address or password for us to hold.

What stays on your phone

Everything, until you share. Projects, snags, photographs, your company details and logo, and every report you have generated live in a database on the device. Your company details and logo travel only with a report you send, and are kept on that report so the page matches the document. Delete the app before it has ever contacted us and it is all gone, so keep your own copies of reports that matter.

What we receive, and when

The first time you share a report, open your dashboard or add a phone, your phone registers with us and is given a secret it uses to prove it is yours from then on. That registration sends:

Sharing a report uploads that report so the link works in a browser. That upload contains:

Once your phone has registered, it also backs up. Each time you open the app it sends us any project, snag, photograph, party or stage that has changed since the last time: the same rows a report carries, without the company details and without a report. This is what lets you get your work back onto a new phone. It only starts once the phone has registered, so a phone that has never shared a report, opened the dashboard or added a phone sends us nothing.

Anything you type into a snag ends up in the report you send. If you would not want it read by whoever you send the link to, do not put it in the description.

What we record about shared links and phones

We do not record who opened a report. There is no visitor log, no IP address stored against a view, and no identification of the reader. Cloudflare, which serves this site, counts requests per address for one minute to slow down anyone guessing links; that count is not kept.

Signing in to the dashboard

Opening your dashboard from the app creates a single-use code that expires in five minutes, then sets a cookie so the browser stays signed in for thirty days. The cookie holds your account identifier and a signature, nothing else. It is used only to keep you signed in, never to follow you anywhere.

What we do not do

Two things worth naming rather than hiding. The typeface on this site is served by Google Fonts, so loading a page tells Google your IP address; that applies to this website only, and the app does not do it. And this site and the app's portal run on Cloudflare, which sees the address of every connection the way any host does.

Withdrawing and deleting

A share link cannot yet be withdrawn from the app. To withdraw a link, email us and it is switched off the same day. From your dashboard you can remove a phone from your account, after which it can neither upload nor restore.

To delete your account: in the app, Settings, then Delete my data on snagflag.app; or from your dashboard, Delete this account. Either removes everything we hold for the account at once, every report link you have sent, the backed up projects and photographs, the PDFs, and every phone on the account, and it cannot be undone. Your phones keep their own copies; deleting the app removes those. If you no longer have the app or a signed in dashboard, email us the address printed under the QR code on any report you sent, and we delete the account it belongs to. You will not be asked to justify it.

hello@snagflag.app

Plain English, not legal advice This page describes exactly what the software does today, written from the code rather than from a template. It has not been reviewed by a lawyer, and it is not a POPIA compliance statement. If you are relying on it contractually, ask us and we will get it properly reviewed.

Last checked against the code on 2026-09-12.