Privacy policy

This page uses three terms:

• SnapCabin (also “we”): the people who make the Android app and run this website.
• Host: the person or business who installs SnapCabin on a tablet and runs it at an event. The host picks which third-party services to wire up and is responsible for telling their guests how the photos will be handled.
• Guest: someone who walks up to a tablet at an event and takes a photo.

When you use the app, it doesn’t open a connection to any server we control. The currently published build does not bundle analytics, crash reporting, advertising, or telemetry SDKs from third parties. We don’t have user accounts.

We do receive whatever you put in an email if you write to us. We may keep that email in our mailbox so we can follow up.

We may also see standard web server logs for this website (the marketing site and this privacy page), which is run on Vercel. Vercel’s privacy practices apply to those logs. We don’t use those logs to track individuals.

Unless the host turns on one of the optional integrations below, the items below stay on the tablet:

• Camera frames. The live preview is rendered on screen. Captured photos are written to app-private storage on the device.
• Audit log. When the app sends an email, it records a timestamp, the event name, the channel, the success status, and a masked recipient (for example, e***@example.com). The full recipient is not stored. The log stays on the tablet and can be cleared from the admin screen. It is capped at the most recent 500 entries.
• Admin settings. Event name, branding choices, Resend and Cloudinary credentials if the host enters them, kiosk preferences. Stored in the app’s private data area on the device.

On Android, app-private storage is not visible to other apps installed on the device. It can be read by anyone with physical access to the device and the right developer tools, which is why we recommend setting an admin PIN and turning on Kiosk Mode for events.

If the host has entered Cloudinary credentials and turned on the Cloudinary toggle, captured photos are uploaded to that host’s Cloudinary account so a QR code on the share screen can point at the hosted image (and so the link can be included as a fallback in the email body).

• The host is the data controller for their Cloudinary account.
• How long the photo stays online depends on the host’s Cloudinary settings. See Cloudinary’s privacy policy.
• SnapCabin doesn’t receive a copy of the photo or the upload URL.

If the host has entered Resend credentials and a guest taps the email button, the guest’s email address is sent to Resend along with the photo as a JPEG attachment so Resend can deliver the message. The request travels to Resend’s API over HTTPS.

• The full email address is not kept on the tablet beyond a masked entry (for example, e***@example.com) in the audit log described above.
• The host is the data controller for their Resend account. See Resend’s privacy policy.
• SnapCabin doesn’t receive the email address or the message contents.

• Camera. Needed to take photos. The live feed doesn’t leave the device unless the guest accepts and the host has enabled upload to Cloudinary.
• Internet and network state. Needed for Cloudinary uploads and Resend email delivery.
• Boot completed. So the tablet can relaunch the app after a power cycle. The host turns this on if they want it.
• USB host. Optional, used to detect a USB webcam if the host plugs one in.
• Microphone. Requested only when a USB camera is connected, and only because Android refuses to open a USB camera (an audio+video device) without it. SnapCabin never records, stores, or transmits audio. Built-in cameras never trigger this prompt.

Hosts can set SnapCabin as the Android Device Owner using ADB on a factory-reset tablet. When that’s active, the app uses Lock Task Mode to keep the tablet locked to the booth experience. This is configured locally on the device. No device data is transmitted to SnapCabin or to any third party as part of that setup.

SnapCabin is meant to be set up and run by adults. Guests who interact with the booth at an event may include people of any age, and the host is responsible for any guest under 13 who uses the booth. We don’t knowingly collect data from anyone under 13. Because the app does not send anything back to us either way, this is true regardless of the guest’s age.

If you took a photo at an event using SnapCabin and want it removed from the host’s photo storage, please contact the host directly (the event organizer, venue, or whoever set up the tablet). They control how long photos stay online. SnapCabin doesn’t have access to a host’s Cloudinary account and can’t delete photos there on your behalf.

If something material changes, we’ll update the “Last updated” date at the top of this page. The current version is always available at snapcabin.app/privacy.

Questions, corrections, or anything you think we’ve gotten wrong: hello@snapcabin.app.