Privacy policy
Last updated: October 25, 2026
Snipl (snipl.app) is operated by OnieLabs. This page explains what we collect, what we do not, and who else may handle your data.
What we collect
Your email address and sign-in details, your first name and, if you give it, your last name (if you sign in with Google, the name and profile picture link Google shares with us), your settings (such as currency), the latest date found in the statements you uploaded and the day of your latest upload (dates only), whether you asked for the monthly reminder email and when you agreed, the subscriptions you confirm (name, amount, the amount before its latest price change, billing cycle, dates including the day it first appeared, category and whether you hid or cancelled them), a daily count of how many statement analyses you ran and how much AI capacity they used (no content), and reports you send about a wrong cancel link (service name only).
What we do not collect or keep
Your statement file stays in your browser. We do not store your statement or the transaction lines taken from it, and we do not write them to our logs. We never ask for bank or card passwords.
AI processing
Snipl recognizes popular services on your device, so those lines are not sent anywhere. We use AI only for the lines we cannot identify ourselves. When you press the button, the cleaned transaction lines (merchant name, amount, date and currency) of services we do not already recognize are sent to Anthropic, which provides the Claude API, so they can be analyzed accurately. According to Anthropic's published policy, which we checked on October 19, 2026, Anthropic may retain these inputs and outputs for up to 30 days. Nothing is sent before you press the button.
Analytics and error tracking
We count basic events, such as a page view or a completed upload, without transaction content, using PostHog (no session recording, no heatmaps). We use Sentry to see crashes; error reports are stripped of messages, request data and personal details before they leave your browser or our server.
Service providers
We use Supabase for sign-in and database, Vercel for hosting, Resend to send the optional reminder email, Anthropic for AI analysis, Google if you choose Google sign-in, PostHog for event counts and Sentry for crash reports. Some of these providers process data outside Canada, including in the United States. Each handles data only to provide its service to us.
Your choices
You can hide any subscription, export your data, turn the monthly reminder email on or off, or delete your account in Settings. Deleting your account removes your saved subscriptions, settings, usage counts and reports.
Contact
Questions about privacy: privacy@snipl.app.
Changes
If this policy changes, we will update the date above and, for meaningful changes, tell signed-in users.