ContractSnap

ContractSnap Privacy Policy

Last updated: 26 September 2026

ContractSnap is operated by YK Co. This policy explains how information is handled when you use the ContractSnap app and how to contact us about privacy. ContractSnap is currently designed for apartment property sale documents in Victoria, New South Wales and Queensland, with limited support for other Australian states.

When you request an analysis, the entire selected contract PDF passes through ContractSnap’s secure analysis gateway, operated using Cloudflare Workers, and is then sent to Google’s Gemini API. This includes personal information contained in the document. The gateway is configured not to store uploaded PDFs, prompts or generated analysis text in its database or application logs. Analysis history is saved on your device; Cloudflare’s and Google’s separate processing and retention practices also apply.

When you accept the Terms of Service at first launch, the app also records your permission for AI processing of PDFs you later choose to analyse. Accepting does not upload a document by itself. After you choose a PDF, analysis starts without another permission prompt. You can withdraw permission in Settings; the app will then block new analyses until you review the disclosure and agree again. If you decline, no contract is sent for analysis.

1. Information handled by the app

Contracts and analysis results

The app processes the PDF you select, not just the property details extracted from it. A contract may contain names, addresses, contact details, signatures, financial details and information about purchasers, vendors, agents, solicitors or other people. This information may concern you or someone else. The app does not automatically redact it before transmission.

Analysis results include property information, fees, levies, rates and contract conditions. The app also handles property details you enter or amend when preparing a report.

Local history and credits

The app stores recent analysis results, credit balances and credit transaction records on your device. You do not need to create a ContractSnap account to analyse a contract.

Support and technical information

If you email us, we receive your email address, message and any attachments you choose to send. Please avoid sending complete contracts or unnecessary personal information with support requests.

The current app does not integrate Firebase, RevenueCat or a third-party behavioural analytics SDK. It writes diagnostic messages to the device’s logging system; some error messages may include excerpts of analysis output. Service providers also receive network and technical information, such as an IP address, when the app connects to their services. Apple may make diagnostics available according to your Apple settings and its policies.

2. Why information is used

  • To analyse your selected contract and display a summary.
  • To find the property on a map and identify nearby amenities and transport.
  • To save recent analysis results and generate reports you choose to export or share.
  • To process purchases through Apple and manage analysis credits.
  • To respond to support requests, investigate faults and meet applicable legal obligations.

ContractSnap does not sell your contract content or use it for targeted advertising. The current app does not implement advertising tracking. Cloudflare’s and Google’s handling of submitted information is subject to their service terms and policies described below.

3. PDF uploads, Cloudflare and Google Gemini processing

Selecting a PDF in ContractSnap starts an online analysis. Before you select a file, review it and upload it only if you are authorised to share the document through ContractSnap’s Cloudflare analysis gateway and with Google Gemini. Google may process information outside Australia.

Only submit documents you are authorised to share with external processing services. Where appropriate, remove unnecessary personal or confidential information before selecting the PDF. If you do not want Cloudflare and Google to receive the document, do not submit it for analysis; online contract analysis requires that transmission.

Cloudflare provides ContractSnap’s gateway for validating an installation token, rate and credit controls, and relaying a consented analysis request. The gateway stores only limited security and credit-ledger records; it is configured not to store source PDFs, prompts or generated analysis results in its database or application logs.

ContractSnap uses the paid Gemini API through a Google Cloud project with an active billing account. Google processes the PDF and returns an AI-generated result. Under Google’s paid-service terms, submitted prompts, documents and responses are not used to improve Google’s products.

Paid processing does not mean zero retention. Google may retain prompts, document context and responses for abuse monitoring, security and required legal disclosures. Authorised Google personnel may review flagged content for policy enforcement. See Section 6 for retention details, the Gemini API terms and the abuse monitoring policy.

AI results may contain errors or omissions. They are an aid to initial understanding and do not replace a solicitor’s or conveyancer’s review.

4. Other service providers

Cloudflare analysis gateway

Cloudflare hosts the gateway described above. To administer device-specific credits, the app creates a random installation token, keeps it in this device’s Keychain, and sends it over HTTPS to the gateway. The gateway stores a hash of that token, credit transactions, analysis operation identifiers, PDF digests, timestamps and operation status. It may retain one-time challenge values for older app versions. It does not store a source PDF, prompt, property address or generated analysis result in its database or application logs. Cloudflare receives ordinary network and technical request information, such as an IP address, when it delivers the service. See Cloudflare’s Privacy Policy.

Apple Maps and geocoding

The app uses Apple services to look up property addresses, display maps, and identify nearby amenities and transport. These queries concern the property in the analysis and may include its address or coordinates. Looking up a property address is separate from requesting access to your device’s current location and does not depend on granting that location permission. See Apple’s privacy information.

OpenStreetMap data through Overpass

To find nearby amenities, train stations and tram stops, the app may send the property’s coordinates, search radius and map query to the public Overpass services at overpass-api.de or overpass.kumi.systems. These requests do not contain the complete contract PDF. The service operator can also receive technical request information such as your IP address.

Apple purchases

In-app purchases use Apple’s App Store and StoreKit. The app receives purchase verification information needed to grant credits and keeps local credit records. ContractSnap does not receive your full payment-card details from Apple. Apple handles payment information under its own terms and privacy policy.

Exports and sharing

If you export or share a report, the destination app, storage provider or recipient you select receives that report. Its further handling is outside ContractSnap’s local history controls.

5. Storage and security

Requests to the ContractSnap analysis gateway, Gemini and the Overpass service use HTTPS. Saved analysis history uses iOS file protection. No method of transmission or storage provides an absolute guarantee of security.

The app reads your selected PDF for processing rather than maintaining a permanent library of original PDFs. While a server analysis is pending, it keeps a protected temporary copy in the app cache so an interrupted request can be retried with the same operation. The app deletes that copy as soon as the review is saved to local history; the small operation marker remains until the server confirms the charge or records the failure. If analysis fails before a review is saved, the app deletes the copy after the failure or expiry is confirmed. The cache is excluded from device backups and iOS may remove cached files. Your original file may remain in Files, iCloud Drive or another source you selected. Other local app data may be included in device backups according to your settings. Exported reports may remain in the destinations you choose.

6. Retention and deletion

  • Analysis history: the app keeps up to 40 recent analysis records. Older entries are removed as the limit is exceeded, and a new analysis for the same address replaces the existing history entry.
  • Deleting history: open Recent Contracts and swipe to delete an entry or use Edit. To remove all visible saved analysis records, choose Clear All Contracts and confirm Delete All.
  • Other local copies: history deletion does not delete your source PDF or exported reports. Manage source files and exports through their respective apps and services. Deleting the app removes its local app container; offloading the app can retain its data.
  • Gateway records: the Cloudflare gateway retains limited opaque installation, credit and request-status records while needed to protect the service, prevent fraud, administer credits, resolve issues and meet legal obligations. It does not retain the source PDF, prompt or generated analysis result in its database or application logs.
  • Google: deleting local history does not delete provider-held data. Google’s standard abuse-monitoring policy describes retention of specified request data for 55 days; applicable exceptions and service settings may affect retention. See the linked provider policies for details.
  • Support: correspondence is kept as needed to handle your request, follow-up issues and applicable legal obligations. Contact us to request deletion of information we hold.

7. Access, correction and privacy complaints

Contact admin@ykcompany.com.au to request access to or correction of personal information we hold, request deletion, or make a privacy complaint. Explain your request without attaching unnecessary personal information. We may need to verify your identity.

We aim to respond within 30 days. We will explain any information we cannot access or delete, including applicable legal retention requirements. We cannot remotely access or erase history held only on your device. A deletion request is subject to applicable law and is not a guarantee that every third-party copy can be erased.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC). Whether the OAIC can consider a complaint depends on its jurisdiction and the circumstances.

8. Overseas processing

Information sent to external services may be processed outside Australia. Cloudflare routes gateway requests through its network, and Google states that data may be stored or cached in countries where it or its agents maintain facilities. Overpass and Apple also process requests through their own infrastructure. The countries used for all processing, routing and backups have not been confirmed; Australian-only processing is not guaranteed. Contact us for available information about overseas recipients; provider policies describe their international processing practices.

9. Children’s privacy

ContractSnap is intended for adults aged 18 and over. If you believe a child has provided personal information to us, contact us so we can investigate and address information within our control. Documents submitted by adults may also contain information about other people, including children; avoid including unnecessary personal information.

10. Changes and contact

We may update this policy as the app or its service providers change. The date above identifies the latest revision. Material changes will be communicated through the app or website.

For privacy enquiries, contact YK Co at admin@ykcompany.com.au.