Privacy Policy

1. Your captures and recordings stay on your Mac

The SnapZal app processes and stores your captures, recordings, edited images, history, and settings on your Mac. Nothing leaves your Mac until you export or share it yourself.

Capture and recording files and the state of your stack and history are stored in ~/Library/Application Support/SnapZal. Originals of edited captures, annotations, and video thumbnails are kept in the same folder, and captures you close from the stack are deleted after the period you choose (7 days by default). Files you export with the “Save” button go to the folder you choose (Desktop by default).

Text recognition (OCR) runs on your Mac with macOS Vision.

The SnapZal app currently has no features that connect to the internet. It does not check for updates or send usage statistics or error reports. If we add a feature that connects to the internet, such as update checks or signing up and signing in, we will add what it processes to this policy and tell you before it takes effect.

2. Permissions the app uses

SnapZal uses the following macOS permissions only when a feature needs them. You can turn them off at any time in System Settings › Privacy & Security.

• Screen & System Audio Recording: used to capture and record your screen. If the permission is missing, SnapZal shows a guide the first time you capture. System audio is recorded only when you turn on “System Audio” in the setup panel.
• Recording confirmation on macOS 15 or later: the first time you record, macOS asks whether SnapZal may access your screen and audio directly. Recording continues after you choose Allow, and macOS may ask again from time to time.
• Microphone: SnapZal asks only when you turn on “Microphone” in the setup panel, and records your microphone only in recordings where it is on. If you decline, SnapZal records without the microphone.
• Desktop folder: the “Save” button uses the Desktop by default, so macOS asks once the first time you save there. You can change this under Settings › Save Location in the menu.

3. What we process and why

• Launch notification sign-up: your email, how you plan to use SnapZal (optional answers), and whether you agreed to receive news. We use it to tell you when SnapZal launches and, if you agreed, to send news. Legal basis: your consent.
• Purchases: Paddle, the seller of record, processes your payment. We receive your name, email, country, product, order or subscription ID, and payment status from Paddle to provide your license and support. We never receive card numbers or other payment details. Legal basis: performing our contract with you.
• Questions: your email address and message, to answer you. Legal basis: our legitimate interest in responding.
• Website visits: snapzal.com uses no cookies and no analytics. Our host, Cloudflare, may process access logs such as IP address, browser name and version, and request time for security and reliable operation. Legal basis: our legitimate interest in a secure website.

4. How long we keep it

• Purchase records: kept for 5 years (contracts, cancellations, and payments) and 3 years (complaints and disputes), as Korean e-commerce law requires.
• Launch notification only: deleted promptly after we send the launch notification.
• News consent: kept until you withdraw your consent.
• Questions: kept for 1 year after we answer, then deleted.
• Access logs: kept for our host's retention period.

5. Sharing

We do not sell or share your personal data with third parties, except where the law requires it.

Paddle processes payments as the seller of record under its own privacy notice (paddle.com/legal/privacy).

6. Service providers and international transfers

We use the following providers, which store data outside Korea. Data is sent over the network when you visit the website, sign up for the launch notification, or email us, and kept for the periods in section 4. If you do not want your data transferred, do not sign up for the launch notification or email us, or ask us to delete data you already sent.

• Tally BV (Belgium): runs the launch notification form and stores responses on servers in Europe. Email, intended use, news consent
• Cloudflare, Inc. (United States): hosts, delivers, and protects the website. Access logs (IP address, browser name and version, request time)
• Google LLC (United States): receives and stores emails you send us (Google Workspace). Email address, message

7. Deletion

When the retention period ends or the purpose is fulfilled, we delete the data without delay in a way that cannot be recovered. Data we must keep by law is stored separately and only for the required period.

8. Your rights

You can ask to access, correct, or delete your data, restrict or object to its processing, get a copy of it, or withdraw your consent at any time by emailing hello@devbrothers.ai. We respond without undue delay. Launch and news emails always include a way to unsubscribe. You can also complain to your local data protection authority.

9. Security

Only our representative can access personal data, admin accounts use two-factor authentication, and the website is encrypted in transit with HTTPS.

10. Privacy contact

Junhyuk Choi (Representative), hello@devbrothers.ai

11. Privacy complaints in Korea

In Korea, you can also contact these organizations about a privacy complaint:

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

12. Children

The Service is not directed at children under 14, and we do not knowingly collect personal data from children under 14.

13. Changes to this policy

We will post changes to this policy on this page at least 7 days before they take effect.