Privacy Policy

The data controller is TT1 LAB LTD, registered in England and Wales (company number 17380270), registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Contact for privacy matters: [email protected]. We are registered with the Information Commissioner's Office (ICO) under registration number ZC215268.

• Your photos and report data live on your own device, in your browser's storage. We do not run user accounts and do not keep a copy of your finished report on our servers.
• The PDF you download may include a machine-readable copy of the same report inside that file, for your own later use in this app. We do not receive it. Keep the original downloaded PDF; a print-out or a copy saved by another app may not be the same file.
• When you use AI, the photo or text is sent through our host (Vercel) to Google's Gemini API, or if Google is temporarily unavailable to OpenAI's API. We do not keep that photo after the response is returned. Those providers have their own retention rules.
• Payments are handled by Stripe; we never see your card details.
• We set a small number of essential cookies so we can count AI uses and recognise a paid unlock. We do not use advertising cookies.
• The first free AI use in a new browser runs a silent Cloudflare Turnstile check so scripts cannot farm the free allowance. Most people never see it.

Photographs and report text. When you use AI photo analysis (including a re-analysis of one item, or a meter-reading photograph) or AI Polish, the photograph or text is transmitted to Google's Gemini API to generate drafts. If Google's service is temporarily unavailable, the same request is processed by OpenAI's API — the same data, for the same purpose, and nothing more. Legal basis: UK GDPR Art. 6(1)(b) (performance of a contract). Results are returned to your device and stored only there. The PDF you download from TenantSnap is generated on your device and may contain the photographs you included together with a machine-readable copy of the same report text. That file stays with you unless you choose to send it.

Location. If a photograph already contains GPS coordinates, those are read on your device and stored with that report entry. Photographs taken with the in-app camera usually have no GPS in the file, so — only if you allow it — the app may record this device's location at the moment of capture and store it with that entry, on your device only. Location is printed on the report where it was recorded. It is not sent to our servers or to the AI providers. If you decline the browser location prompt, those photographs simply show no location.

Payment data. When you buy a report unlock or an AI top-up, Stripe collects your card details directly — they never touch our systems. We receive a payment reference and status. Legal basis: contract, and legitimate interests in fraud prevention and record-keeping.

Purchase restore. If you ask us to restore a paid unlock, we look up that payment in Stripe using the email you type. We do not use that lookup to store a copy of your report or photographs. Legal basis: contract (to give you the purchase you already paid for) and legitimate interests in preventing abuse of the restore form.

Consent records. The timestamps of the confirmations you give at checkout (report review where required, and Consumer Contracts Regulations 2013 immediate-supply consent for the unlock and for each top-up), together with the Terms version you accepted, are stored on your device and attached to the Stripe payment record. Legal basis: legal obligation and legitimate interests in evidencing consent.

AI-allowance records. We store a count of successful AI photo analyses and AI Polish uses against a browser session and, after payment, against the Stripe session id — in a cookie on your device and in a counter database (Upstash Redis). These records are numbers and identifiers, not your photographs. Legal basis: contract (to deliver the allowance you bought or the free trial) and legitimate interests (preventing abuse).

IP address and technical logs. Our servers see the IP address of requests in order to apply rate limits (to stop automated abuse) and may log errors for reliability. Cloudflare Turnstile may also see a technical fingerprint of the browser on that first free AI check. We do not write your photographs into error logs. Legal basis: legitimate interests in security, availability and preventing misuse (Art. 6(1)(f)).

We use the following processors, each only for the purpose described:

• Vercel Inc. — hosts the TenantSnap website and API. Photo or text included in an AI request passes through this host in transit to Google or OpenAI; we do not operate TenantSnap as a photo-storage service on Vercel.
• Google LLC (Gemini API) — analyses the photos/text you submit for AI features, under Google's then-current Gemini API and privacy terms. We use a paid API connection. We do not use your photographs to train our own models. What Google retains, and whether it uses API inputs to improve its products, is governed by Google's terms for that API at the time of the request; we do not control Google's systems. See Google's Privacy Policy and Gemini API terms.
• OpenAI (OpenAI Ireland Ltd / OpenAI, L.L.C.) — used only as an automatic backup when Google's service is temporarily unavailable, to analyse the same photos/text for the same purpose. Under OpenAI's API terms, data submitted via the API is not used to train OpenAI's models. OpenAI may retain inputs for a limited period for abuse monitoring under its terms. See OpenAI's Privacy Policy.
• Cloudflare, Inc. (Turnstile) — a silent check on the first free AI use in a new browser, to stop automated scripts burning the free allowance. It does not receive your photographs. See Cloudflare's Privacy Policy.
• Upstash, Inc. — stores AI-allowance and rate-limit counters (identifiers and counts, not photographs) so limits work across our servers.
• Stripe Payments Europe / Stripe, Inc. — processes your payment. See Stripe's Privacy Policy.

We do not sell your data, do not use your photographs to train AI models ourselves, and do not share your data with landlords, agents or anyone else — sharing your finished report is entirely your choice, done by you.

Where these providers process data outside the UK (for example in the United States), the transfer is protected by the UK Extension to the EU–US Data Privacy Framework and/or the UK International Data Transfer Agreement / Addendum, as applicable.

We use only cookies that are strictly necessary to provide the service you asked for (Privacy and Electronic Communications Regulations). We do not use them for advertising or cross-site tracking.

• ps_sid (about 400 days) — records this browser's free-trial AI counts so the taster cannot be reset by refreshing the page. HttpOnly.
• ps_paid (about 90 days) — records that Stripe has confirmed a particular unlock or top-up, so we can apply the correct AI allowance. It does not store your card number. HttpOnly.
• ps_ok (same lifetime as ps_sid) — a tiny flag so the app knows this browser already passed the silent bot check and does not need to run it again. It holds no identity.

You can delete them by clearing this site's cookies; that may reset free-trial counts or mean the app no longer recognises a previous payment in that browser.

• Photos and report data: kept on your device until you delete them (by resetting the inspection in-app or clearing your browser data). We hold no copy of the report file. A PDF you download is yours; it may include a machine-readable copy of that same report inside the file.
• AI processing by us: we retain nothing after the analysis response is returned to your device. Google and OpenAI may retain the submitted photo or text for a limited time under their own terms (for example security or abuse review).
• Cookies and AI counters: for the cookie lifetimes above, then they expire. Redis counters use the same paid-grant window (about 90 days).
• Payment and consent records: retained by Stripe and in our accounting records for as long as tax and consumer law require (typically 6 years).
• Server error logs: kept for a short rolling window for reliability, then deleted.

Photographs of a home can incidentally capture personal things — post with names and addresses, documents, or people including children. You must be 18 or over to use the app. Do not photograph other people without a lawful basis or their agreement, and frame shots to avoid people and personal documents where you can. Photos never leave your device except for the AI round-trip described above.

Under UK GDPR you have the right to access, correct, delete, restrict and object to our processing of your personal data, and the right to data portability. Because almost all of your report data is stored on your own device under your control, most of these rights you can exercise yourself — deleting this site's browser data removes what we do not hold. You may object to legitimate-interest processing (for example IP rate limits); we will consider that against our need to run a secure service. For payment or consent records we hold, email [email protected]. We will reply as soon as we reasonably can, and in any event within one month, as required by UK data protection law (or longer if the request is complex). Most report data lives only on your device, so clearing this site's browser data is usually the fastest way to remove it.

You also have the right to complain to the Information Commissioner's Office — ico.org.uk/make-a-complaint or 0303 123 1113 — though we would appreciate the chance to resolve your concern first.

We will update this policy if our data practices change, and indicate changes via the version number and date at the top of this page. The current version applies from the date shown.