TurnSnap Privacy Policy

Last updated: May 19, 2026

1. Introduction

ClearStack Apps ("we", "us", "our") operates the TurnSnap mobile application. This Privacy Policy explains how we handle information when you use TurnSnap. TurnSnap is a turnover-proof reporting tool for short-let cleaners and the hosts they work with.

2. Information We Collect

2a. Information You Provide

When you use TurnSnap, you may provide:

  • Business information: business name, contact details, logo, VAT number, default payment URL
  • Property details: property nickname, address, host name + contact, fee, lockbox code (encrypted on your device only)
  • Job records: scheduled times, status, notes, voice memos
  • Before/after photographs and any captions
  • Optional: an Airbnb iCal feed URL

2b. Automatically Collected Information

  • Photo metadata: Photos include capture timestamp and an approximate GPS coordinate captured at job-start. GPS is stripped from the file before cloud upload by default (you can toggle this off in Settings).
  • Firebase Crashlytics (Google LLC): Crash logs, stack traces, device model, OS version, and app version are transmitted to Google to help us identify and fix bugs.
  • Firebase Analytics (Google LLC): App usage events, screen views, device information, and approximate location derived from IP address are transmitted to Google to help us understand how the app is used.
  • Append-only event log: Every photo add/delete, note edit, and status change is recorded with a timestamp and hash chain on your device (and optionally synced to our servers if you enable cloud backup).

2c. Purchase Information

Subscription status is verified by Google Play Billing. We store your subscription state and purchase token in Firebase Firestore (EU-West2, London region) so we can validate your subscription server-side. We do not collect, store, or have access to your payment card details.

3. Cloud Backup (Solo and Team subscribers only)

If you enable Cloud Backup in Settings (a Solo / Team feature):

  • Your jobs, properties, notes, and event log are synchronised to Cloud Firestore (EU-West2, London).
  • Your photos are uploaded to Cloud Storage (EU-West2, London). By default we strip EXIF GPS coordinates from the uploaded copy (your local copy keeps the GPS).
  • Each user's data lives in a per-user scope; Team workspace data lives in a per-workspace scope. Firestore Security Rules enforce this boundary.

If you cancel your subscription, your data remains read-only for 30 days. After 30 days of inactivity with no resubscribe, your photos are deleted from our servers. After 90 days, all metadata is deleted. You can request immediate deletion via Settings → Delete account.

4. Team Workspaces (£14.99/mo tier)

A Team workspace is shared between an owner (subscriber) and up to 4 invited workers. Each member's Firebase Auth UID is added to the workspace's memberUids array; this is what authorises read/write to the workspace data. Removing a worker (or the owner deleting the workspace) revokes their access immediately.

5. Sharing With Third Parties

We share data only with the following sub-processors, all bound by their respective privacy commitments:

  • Google LLC (United States) — Firebase Authentication, Cloud Firestore, Cloud Storage, Firebase Crashlytics, Firebase Analytics, Google Play Billing. Data at rest is held in europe-west2 (London). Authentication tokens transit US infrastructure under the EU-US Data Privacy Framework and the UK Extension. Firebase Privacy
  • Your chosen payment provider (Stripe, SumUp, PayPal, Revolut, GoCardless, Wise — whichever URL you paste into Settings). TurnSnap embeds the URL in your reports; we do not transmit your customers' payment data ourselves.

We do not sell, rent, or use your data for advertising.

6. Data You Photograph

TurnSnap is a tool for documenting property condition. Photos may incidentally include identifying information (faces, vehicles, possessions) belonging to your customers or their guests. You are the data controller for that incidental data; we act as data processor under your instructions. For Team-tier customers we offer a Data Processing Addendum at clearstackapps.com/dpa.

7. Permissions We Request

  • Camera: To photograph turnovers.
  • Location: To attach a GPS pin at job-start (approximate, device-derived).
  • Microphone: Only if you record a voice memo.
  • Notifications: Day-before turnover reminders.
  • Internet: Required for cloud backup, IAP, crash reporting, in-app updates.

8. Children's Privacy

TurnSnap is intended for working adults and is not directed at children under 16.

9. Your Rights

Under UK GDPR / EU GDPR you have the right to:

  • Access your data (Settings → Export all data exports a ZIP)
  • Rectify inaccurate data (edit in the app)
  • Erase your data (Settings → Delete account — 30-day SLA)
  • Object to processing and lodge a complaint with the UK ICO or your local DPA

10. Retention

  • Local data: stays on your device until you uninstall or delete
  • Cloud-synced data while you're subscribed: indefinite
  • Cloud-synced data after cancellation: photos deleted at 30 days inactivity, metadata at 90 days
  • Crashlytics / Analytics: governed by Google's retention defaults (90 days for personal data, longer for aggregated)

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be surfaced in the app on next open. Continued use after changes constitutes acceptance.

12. Contact Us

Questions or rights requests: support@clearstackapps.com or clearstackapps.com/contact.