This Privacy Policy describes how Viceryl Software LLC (“we,” “us,” or “our”) collects, uses, and shares information when you use the Snickerdoodle: Social mobile application (the “App” or “Snickerdoodle”). Snickerdoodle is a private social media application that allows users to share text posts, photos, and videos with friends — and, where the user chooses, with friends of those friends — within the App.
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.
When you create an account, we collect:
We use a third-party authentication provider to manage account creation and sign-in. The provider processes this information on our behalf.
The App allows you to create and share content with friends you have connected with inside the App and, if you choose, with people who share a friend with you (“friends of friends”). This content includes:
Photos and videos you upload may contain metadata embedded by your device, such as the time the photo was taken, camera information, and in some cases location coordinates (EXIF data). This metadata may be stored and shared along with your content. If you do not want this metadata included, you can disable location tagging in your device’s camera settings before capturing the photo or video.
Content you share is visible to friends you have connected with in the App. For each post you can also allow friends of those friends to see it; new posts allow this unless you change the setting for the post or your account default in Post Visibility. Content is never made public. However, friends who can view your content may be able to save, screenshot, or otherwise capture it, and we cannot control what they do with it once shared.
To keep the App safe, everything you upload — photos, videos, and text (including posts, comments, messages, your display name, and conversation names) — is automatically screened by content-moderation technology when you submit it. Content that is flagged by this screening, or that another user reports, may be viewed by our staff as part of a moderation review — including messages that are otherwise visible only to your friends.
The App is offered as a paid subscription. Subscription payments are processed entirely by Apple (App Store) or Google (Google Play). We do not collect, see, or store your credit card number, billing address, or other payment details.
We do receive limited information from Apple and Google to grant you access to paid features, including:
This information is used solely to determine which features you are entitled to use within the App.
If you enable push notifications, we collect the push notification token issued for your device and a random device identifier the App generates, so notifications can be delivered to the right device. These are deleted when you request account deletion.
Each time you open the App while signed in, we also record the device type (for example the phone model), its operating system and version, and the version of the App installed on that device. We use this to know which App versions are still in use and to help you if you contact support. This information is deleted with your account.
Once you’re signed in, the Snickerdoodle app does not track you: it contains no advertising trackers, and nothing you do in the App after signing in is measured for analytics. Before you sign in, the App uses HeyCatch (heycatch.ai) to measure, anonymously, which of its introductory screens (welcome, pricing, membership-code entry and sign-in) are viewed and which buttons on them are tapped, so we can see how people get started. For this it records your device type, operating system, App version and approximate location derived from your IP address, and stores a random identifier on your device. This measurement stops as soon as you sign in and is never linked to your account: the identifier is discarded when you sign in. It does not happen at all if your device’s region or time zone is in the European Economic Area, the United Kingdom or Switzerland.
We also measure visits to our websites, www.snickerdoodlesocial.com and www.vicerylsoftware.com, which this Privacy Policy also covers. All of the measurement described in this section is used only to promote Snickerdoodle itself. We never use it to market other companies’ products or services, and we never share it with anyone for that purpose.
On both websites we count page views using Microsoft Azure Application Insights. For each page view we record the page address (with any invitation or gift codes removed), the page you came from, your browser and operating system, your approximate location (country and city, derived from your IP address), and how long the page took to load. Your IP address itself is not stored, and this counting stores nothing on your device. We keep these statistics for 90 days.
On www.snickerdoodlesocial.com we also use HeyCatch (heycatch.ai), a marketing analytics service, to understand how visitors find us and which pages and campaigns work. It records the pages you view, the page or link that brought you there (including any campaign tags in the address), the buttons and links you click, your browser, operating system and device type, and your approximate location derived from your IP address. Invitation, gift and account-security codes are removed first, and HeyCatch does not run on invitation, QR-code or account-security pages. To recognize repeat visits, HeyCatch stores a random identifier in a cookie or in your browser’s local storage. We use this information only to market our own App; we do not use it to show you ads elsewhere, and we do not sell it.
If you visit from the European Economic Area, the United Kingdom or Switzerland, HeyCatch stays off and stores nothing on your device until you accept it in the notice shown on the website. You can decline, and you can withdraw your consent at any time by clearing this website’s cookies and site data in your browser, after which you will be asked again. Elsewhere, we rely on our legitimate interest in marketing our App; you can stop HeyCatch by blocking cookies and site data for www.snickerdoodlesocial.com in your browser.
We do not collect:
We use the information we collect to:
We do not sell your personal information. We share information only in the following limited circumstances:
Your name or display name and the content you choose to share are visible to friends you have connected with in the App. Where you allow a post to be seen by friends of friends, that post, your name or display name, and your profile photo are also visible to people who share a friend with you, and such people can find you by name in order to send you a friend request.
We share information with third-party service providers who help us operate the App. These providers are contractually obligated to protect your information and use it only to provide services to us. Our service providers include:
We may disclose information if required to do so by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
We may also suspend deletion of an account where we have a legal obligation to preserve it (for example, a valid law-enforcement preservation request or pending litigation). In such cases the account remains in a deletion-pending state until the preservation obligation is lifted, at which point the deletion proceeds.
If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer.
We retain your account information and content for as long as your account is active.
When you request account deletion through the App, you are signed out on that device, we stop sending push notifications to your devices, and your account is scheduled for deletion. A 30-day grace period then runs, during which your content remains visible to your friends and you can recover the account by signing in again and cancelling the deletion. After the grace period ends, the deletion is finalized: we permanently remove your profile, posts, comments, messages, friend links, reactions, blocks, and uploaded media, and we delete your authentication identity. If you no longer have the App installed, you can request deletion from our account deletion page.
We do not anonymise your content with a placeholder name; we delete it. As a consequence, conversation threads and comment chains that other users participated in may show gaps where your messages or comments used to be. We chose this approach because, when you ask for your content to be deleted, we believe it should actually be deleted.
A small set of records is retained after deletion, only as needed to meet a legitimate purpose:
When content is flagged by our automated screening or reported by another user, we keep a moderation record: a copy of the flagged text or a reference to the flagged media, the screening outcome, and the decision our staff made on review. We keep these records while they are needed for review, enforcement, and appeals. If you report someone else’s content, we record your report; we do not reveal your identity to the person you reported.
Moderation and report records are deleted along with your account, except where we must preserve them for the legal or safety reasons described below. They are not included in the data-download archive described in the Your Privacy Rights section.
We may retain account information, content, and related records—and may suspend or preserve an account instead of deleting it—where reasonably necessary to investigate or prevent fraud, abuse, or unlawful activity, to protect the safety of our users or the public, to cooperate with law enforcement or respond to legal process, or to comply with mandatory reporting obligations. In such cases we retain only the information relevant to that purpose, for as long as the purpose requires, after which it is deleted.
During the 30-day grace period your content remains visible to other users while we wait to see whether you cancel the deletion. This window also gives law-enforcement preservation requests time to land if any are coming. At the end of the grace period, deletion completes as described above.
If a user has died or can no longer manage their account, a family member or legal representative may ask us to close it. We act only on a verified request—proof of death or of legal authority, plus the requester’s identity—as described on our support page. On a verified request we lock the account immediately and, if closure is requested, delete it after the grace period described above; a representative of an incapacitated user may instead ask us to pause the account without deleting it. We do not provide anyone with access to the account, and we do not release its posts, photos, messages, or other content to a representative or estate except where required by a court order or other legal process. The retention rules above apply in the same way.
We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (HTTPS/TLS) and reliance on established cloud-provider security infrastructure for stored data.
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
The App is not intended for anyone under the age of 16. We do not collect your date of birth; instead, creating an account includes an affirmation that you are at least 16 years old.
If we learn that an account belongs to someone below the minimum age, we will promptly close the account and delete its information, except where we must preserve certain records for the legal or safety reasons described in the Data Retention section.
If you are a parent or guardian and you believe your child below the minimum age has provided us with personal information, please contact us at the email address below so we can take appropriate action.
For users between 16 and 18 (or the age of majority in their jurisdiction), we recommend that a parent or guardian review this policy and supervise the use of the App.
Our standards and procedures for preventing, detecting, and responding to child sexual abuse and exploitation (CSAE), including the hash-matching we apply to uploaded media and our reporting obligations to the National Center for Missing & Exploited Children (NCMEC), are described in our Child Safety Standards.
Regardless of where you live, you can:
When you delete your account, we will delete your information as described in the Data Retention section above. In limited cases we may retain or preserve certain information—for example, where necessary to investigate abuse or unlawful activity, cooperate with law enforcement, or comply with mandatory reporting obligations.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to:
To exercise these rights, contact us at the email address below.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and its UK equivalent give you the right to:
These rights are not absolute. In particular, the right to erasure does not apply where we are required or permitted to retain data—for example, to comply with a legal obligation, for the establishment, exercise, or defense of legal claims, or to investigate fraud, abuse, or unlawful activity. In such cases we may decline a deletion request to the extent permitted by law.
Our legal bases for processing your data are: (a) the performance of our contract with you to provide the App; (b) your consent, where applicable; and (c) our legitimate interests in operating, securing, and improving the App, including preventing fraud and abuse.
You can request a copy of your data directly from the App: open Profile → Privacy & Data → Download my data. We will prepare a ZIP archive containing one JSON file per category of records (profile, devices you have signed in from, posts, comments, messages, friends, reactions, user blocks, reports you have filed, and subscription status) plus your photo and video files as served by the App (original-resolution camera files are not retained and are not included). JSON and standard image and video formats are widely supported; you can open the archive in any standard tool. References to other users in your data show only the other user’s display name — no contact information or account identifiers.
If you cannot access the in-App download for any reason, you can request your data by emailing support@snickerdoodlesocial.com. We will respond within 30 days, as required by UK GDPR Article 12.
We are based in the United States. If you use the App from outside the United States, your information will be transferred to, stored, and processed in the United States, as necessary to provide the Service under our contract with you and, where required, subject to other appropriate safeguards under applicable law.
Our service providers (Google, Apple) may also process data in countries outside your country of residence.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email before the changes take effect. The “Last Updated” date at the top of this policy indicates when it was last revised. Your continued use of the App after the effective date of any updated policy constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: