Privacy Policy

Last updated: 6 November 2026 · Version 1

This policy explains what information Roof Stacks Yazılım Anonim Şirketi (“Roof Stacks”, “we”) processes when you use the OneSnap app for iOS and Android (the “App”) and this website, how we use it and who we share it with.

In short

  • Your photos, videos and files are scanned on your phone. None of them ever leave your phone or reach our servers.
  • In Gmail we read only header details such as sender, subject, date and size. We never read the content or attachments of your emails, and this information stays on your phone too.
  • You don't need an account.
  • Nothing is deleted without your confirmation. What you choose first goes to your phone's trash or to Gmail's Trash.
  • App analytics, ad measurement and personalised ads are on only if you allow them. You can change your choice from the settings icon on the home screen, under Privacy and preferences.
  • We don't sell your personal information.

1. Data controller

Roof Stacks is the data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU General Data Protection Regulation (“GDPR”).

Roof Stacks Yazılım Anonim Şirketi
MERSIS: 0735157008200001
Address: Atatürk Mahallesi, Ataşehir Bulvarı, Muhtar Hasan Sokak, Avrupa Office Ataşehir No:1, Kat: 29, 34758 Ataşehir/İstanbul, Türkiye
Email: apps@roofstacks.com

2. What stays on your phone

OneSnap's cleaning features run on your phone. The following is processed only on your phone and is never sent to us or to ad or measurement services:

Deleting always takes two steps: you choose, then you confirm on a separate screen. What you choose is moved to your phone's trash (Recently Deleted on iPhone) or to Gmail's Trash, where it can be restored for about 30 days.

3. Gmail and Google APIs

Email cleaning is optional. If you connect your Gmail account, you grant OneSnap the gmail.modify permission on Google's own sign-in page. With this permission:

Gmail data travels directly between your phone and Google. It never reaches our servers, is never read by a person, is never used for advertising, analytics or training AI models, and is never transferred or sold to anyone. The access token is kept in your phone's secure storage (the Keychain on iOS).

OneSnap's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time with Disconnect in the App's Settings, or on the third-party connections page of your Google Account.

4. Information we process

Purchases

OneSnap Pro payments are taken by Apple (App Store) or Google (Google Play). We never receive your card or payment details. To unlock and restore Pro, our purchase provider RevenueCat processes your purchase status, product, purchase and renewal dates, and an anonymous app user ID.

Usage and error information

Ad and measurement information (with your permission)

This website

The pages of this site use no cookies or analytics. Our hosting provider keeps standard server logs (such as IP address, browser type and request time) to operate and protect the service. If you fill in the Data request form, we receive your name, email address and request.

5. Why we use it

These permissions are optional; everything in the App works even if you say no. Measurement and ad services don't start until you answer. Which prompt you see depends on where you are:

Unless you allow it, we process usage events without identifiers, as aggregate statistics only. You can change your choice at any time from the settings icon on the home screen › Privacy and preferences › Ad and measurement preferences.

7. Rewarded ads

When your free clears run out, you can choose to watch an ad to earn more. We show no other kind of ad, and OneSnap Pro has no ads. Ads are served by Google AdMob and the ad networks it mediates. If you haven't allowed personalised ads, only non-personalised ads are shown; ad networks may still use limited technical information for frequency capping and fraud prevention. To confirm your reward, AdMob sends a verification record (transaction ID, reward and an anonymous user ID).

8. Notifications

The check-up reminder is a service notification; it is turned on with your phone's notification permission and sent at most once a week. Offers and news notifications need a separate opt-in; the checkbox starts empty and, without your opt-in, they are never sent. You can turn them off at any time under Privacy and preferences › Offers and news notifications.

9. Who we share it with

We share information only with service providers that run the App on our behalf:

ProviderPurpose
Google Firebase (Analytics, Crashlytics, Remote Config, A/B Testing, Hosting, Cloud Firestore)Usage statistics (identified analytics only with your permission), crash reports, remote settings and experiments, this website and data requests
Google AdMob and the ad networks it mediates (AppLovin, Unity Ads)Showing rewarded ads and verifying rewards; personalisation only with your permission
Google AdsAd measurement (only with your permission)
Apple (SKAdNetwork)Aggregate, non-identifying ad measurement (iOS)
RevenueCatPurchase verification and subscription status
Apple and GooglePayments, app distribution, notifications

We may also disclose information when required by law, to protect our rights or the safety of users, or as part of a merger or acquisition, in which case this policy continues to apply.

10. International transfers

Our service providers may store and process information on servers outside Türkiye, including in the European Union and the United States. For transfers from Türkiye we use the standard contracts published by the Turkish Personal Data Protection Board under Article 9 KVKK; for transfers from Europe we rely on the GDPR safeguards (standard contractual clauses or adequacy decisions).

11. Retention and deletion

There is no account, so there is no account to delete; this page explains how to remove your data, in short: disconnect Gmail, turn off permissions, uninstall the App and send a data request for anything left on servers.

12. Your rights

Under Article 11 KVKK you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used for that purpose, to know the third parties it is transferred to in Türkiye or abroad, to ask for correction if it is incomplete or inaccurate, to ask for deletion or destruction under Article 7 KVKK, to ask that these actions be notified to third parties, to object to a result against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.

If you live in the European Economic Area, the United Kingdom or Switzerland, you also have GDPR rights of access, portability, restriction and objection. If you live in the United States, you can opt out of the sharing of your personal information for advertising under your state's law. You can withdraw consent at any time; this doesn't affect earlier processing. You can complain to the Turkish Personal Data Protection Board or to the data protection authority where you live.

To exercise your rights, use the Data request form or write to apps@roofstacks.com. We reply free of charge within 30 days at the latest.

13. Age limit

OneSnap is intended for people aged 16 and over. We don't knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

14. Security

Data is encrypted in transit. The Gmail access token is kept in your phone's secure storage and can be used only on that device. Data requests are stored in a database closed to the public, accessible only to authorised staff. No method of transmission or storage is completely secure, but we work to protect your information.

15. Changes and contact

We may update this policy from time to time. We'll change the date at the top of this page and announce significant changes in the App. Questions: apps@roofstacks.com

The Turkish version of this policy is at Gizlilik politikası. If the two differ, the Turkish text prevails for users in Türkiye.