SnipRoll Privacy Policy

Updated: August 20, 2026  ·  Effective: August 20, 2026

1. Who We Are

This Policy is issued by Beijing Qijian Technology Co., Ltd. (“we,” “us,” or “our”) and applies to the SnipRoll App and related mobile features. The App supports vertical stitching of multiple images, long-image creation from screen recordings or videos, full-page web capture, cropping, annotation, enhancement, saving to Photos, system sharing, and membership management.

Beijing Qijian Technology Co., Ltd.
Email: support@nvper.com

2. Information We Process and Why

We process information lawfully, fairly, only as necessary, and in accordance with data-minimization principles. Features may differ by platform, region, and version. If you do not use a feature, the related processing generally is not triggered.

2.1 Images, Videos, and Screen Recordings

When you use multi-selection from Photos, long-image creation from videos or screen recordings, cropping, annotation, enhancement, saving, or sharing, the App accesses only the images, videos, screen-recording frames, file paths, or system photo-library asset identifiers you actively select. This information is used on your device for previewing, stitching, editing, exporting, and saving.

2.2 Full-Page Web Capture

When you enter a URL and use full-page web capture, the App visits the target page through the system WebView and creates the capture on your device. The URL you enter, page content, cookies, LocalStorage, or sign-in state may be processed by the target website and its service providers.

2.3 Membership and Purchase Status

To provide membership benefits, purchases, restoring purchases, and status display, the App stores necessary information on your device such as membership type, product identifier, entitlement status, expiration time, and the most recent server validation time. Product configuration, purchase validation, restoring purchases, subscription status, and refund-status synchronization are performed through the system marketplace capabilities currently available, such as Apple StoreKit, Google Play Billing, and Huawei IAP Kit, together with our NVPERPay service. During purchase or restoration, NVPERPay processes a randomly generated App user identifier, installation identifier, product identifier, platform, environment, and the marketplace validation data required for the corresponding platform, such as StoreKit signed transaction data, a Google purchase token, or HarmonyOS purchase data. This information is used only to validate purchases, prevent duplicate processing, and return membership entitlements. It is not used for anonymous usage analytics and does not contain the images, videos, web content, or editing results you import.

2.4 Feedback and Customer Support

When you contact us through Help & Feedback, email, or another support channel, we may process the issue description, contact details, device model, operating system version, App version, payment time, platform order information, screenshots, or diagnostic content that you choose to provide.

2.5 Device and Runtime Information

To maintain basic operation, adapt to system capabilities, troubleshoot issues, and complete on-device exports, the App may obtain device model, operating system version, permission status, error logs, export dimensions, and processing duration on the device.

2.6 Anonymous Usage Analytics

After you expressly consent through the first-launch privacy notice, the App uses our NVPERPay service to record 13 categories of basic lifecycle and purchase-funnel events, including App launch, session start or end, foreground or background transition, membership-page display, purchase tap or result, restore-purchase result, and entitlement-refresh result. It may also record six categories of coarse feature events covering first page display, feature entry and result, editing-tool use, export result, and support-entry actions. We use this information to understand feature use, release quality, and opportunities for improvement. Analytics may include a random App user identifier, random installation identifier, session identifier, platform, App version, build number, language, time zone, product period, feature category, and coarse result status. They do not include screenshots, images, videos, web page text, file paths, user input, search content, contact details, order numbers, transaction numbers, receipts, StoreKit signed transaction data, or exact payment amounts. If you decline analytics, you can still use core features and necessary purchase, restoration, and purchased-entitlement validation. You can also turn off “Anonymous Usage Analytics” in the App's Settings at any time. Turning it off ends the analytics session and clears unsent analytics events stored on the device.

2.7 Advertising Measurement and Attribution

The current version does not display third-party advertising in the App, and we do not sell your personal information. The official iOS release for mainland China includes the Ocean Engine integrated attribution SDK (BDASignalSDK 2.0.0), and the official HarmonyOS release for mainland China includes the Ocean Engine integrated attribution SDK (@bytedance_ads/app_convert 0.0.4). These SDKs match Ocean Engine advertising clicks with App activation, product interaction, and membership purchase outcomes so that we can measure and optimize our own promotional campaigns.

On iOS, after you agree to this Privacy Policy, the App may also call Apple AdServices to obtain a temporary Apple Ads attribution token and send that token, the internal random identifier for the current installation, and—if you already have a stable signed-in identity—your internal App user identifier to our NVPERPay service. This processing is used only to associate an Apple-platform attributed installation with the App installation and with payments and revenue validated by the marketplace and NVPERPay. It does not upload screenshots, images, videos, web page text, file paths, purchase credentials, IDFA, or contact details. The raw token is used only for the current binding request and a limited number of in-process retries. It is not added to the anonymous analytics queue, persistent logs, or long-term local storage. This capability does not depend on permission under App Tracking Transparency (ATT).

The Ocean Engine iOS SDK may process IDFV and other device identifiers, device model and hardware information, operating system and App version, IP address and network type, User-Agent, language, region, time zone, carrier, launch and session information, advertising click parameters, Click ID, callback parameters, cached deep links, campaign, ad group, creative information, product interactions, and purchase conversion results. IDFA is enabled only if you allow ATT tracking and remains disabled while ATT is denied, restricted, or not yet determined. The Ocean Engine HarmonyOS SDK may process OAID, ODID, and other device identifiers, device model and hardware information, operating system and App version, IP address, network type, network connectivity and Wi-Fi state, language, region, time zone, carrier, launch and session information, advertising click and attribution parameters, and purchase conversion results. Attribution does not upload images, videos, screen-recording frames, web page text, editing content, file paths, user input, contact details, order numbers, transaction numbers, StoreKit signed transaction data, Google purchase tokens, HarmonyOS purchase data, or other purchase credentials that you import or create.

On iOS, the App requests system authorization under App Tracking Transparency and starts attribution only after you have read and agreed to this Privacy Policy. On each subsequent cold launch, the App initializes the Ocean Engine integrated attribution SDK. ATT controls only the SDK's IDFA setting: IDFA is enabled if you allow tracking and disabled while tracking is denied, restricted, or not yet determined. Regardless of ATT status, the App may read the normalized IDFV and necessary attribution results actually supplied by the SDK, including Click ID, callback parameters, and cached deep links, send them through the proprietary activation and touchpoint interfaces of NVPERPay, a service operated by Beijing Qijian Technology Co., Ltd., and have NVPERPay call Ocean Engine's real-time attribution or conversion interface to measure activation and advertising effectiveness for our own App. Raw IDFV is not added to anonymous usage analytics, persistent logs, or long-term local storage. The App also uses Apple SKAdNetwork in parallel for anonymously aggregated activation and server-confirmed voluntary-purchase conversion values. This aggregate path neither replaces nor blocks real-time IDFV activation. Denying or restricting ATT does not affect core features.

On HarmonyOS, the App requests the system App Tracking permission (ohos.permission.APP_TRACKING_CONSENT) only after you have read and agreed to this Privacy Policy. The HarmonyOS Ocean Engine SDK is initialized and necessary attribution events are sent only if you grant that permission. If you deny permission or tracking is system-restricted, the App does not initialize the SDK, and core features remain available. The HarmonyOS version does not expose or forward Click ID, callback parameters, cached links, OAID, or ODID to Flutter or the NVPERPay attribution-touchpoint interface. A voluntary purchase precisely validated by NVPERPay sends only the event name purchase_verified and the internal product identifier. It does not send payment amount, order number, transaction number, account, device identifier, or purchase credentials. Restoring purchases, entitlement refreshes, historical callbacks, failures, cancellations, pending states, and product or marketplace mismatches do not generate a new purchase-conversion event.

Attribution information is transmitted over encrypted networks to Beijing Ocean Engine Network Technology Co., Ltd. or its affiliates and retained only for the shortest period necessary to complete attribution, statistics, campaign optimization, and legal obligations. Ocean Engine privacy information: https://www.oceanengine.com/extra/legal/.

2.8 System Permissions and Cookie-Like Technologies

Network access is used for full-page web capture, in-app purchases, restoring purchases, accessing app marketplace services, processing feedback that you initiate, and—after the consent described in this Policy—anonymous analytics and advertising attribution according to the corresponding system authorization state. After authorization, the HarmonyOS Ocean Engine SDK also uses network connectivity and Wi-Fi state to assist device recognition, network adaptation, and advertising attribution. Access to Photos, writing to Photos, system screen recording, system sharing, files, and cache is triggered by your actions. Except for the analytics and attribution processing expressly disclosed in this Policy, we do not set cookies or similar technologies for cross-site tracking or advertising profiles.

3. SDKs, Services, and System Capabilities

The table below lists SDKs, services, and system capabilities that the current version may integrate or call. Actual activation depends on platform, region, your privacy choices, and system permissions.

4. Sharing and Disclosure

We do not sell your personal information to third parties, and we do not use images, videos, web page text, editing content, or purchase credentials for advertising profiles. Except with your separate consent or active instruction; as necessary to complete in-app purchases, restore purchases, or process feedback; to perform the Ocean Engine advertising measurement disclosed in this Policy after you agree to the Policy and according to the system authorization state of the corresponding platform; to respond to laws, regulations, and regulatory requirements; or in legally recognized circumstances such as merger, division, dissolution, or acquisition, we do not share, transfer, or publicly disclose your personal information.

5. Data Security

We use safeguards appropriate to an on-device processing tool, including system permission controls, on-device processing, encrypted transmission, access minimization, and controls on necessary logs. Please use care when handling screenshots, videos, and exports that contain personal information, chat records, order information, or a web account's signed-in state, and avoid sharing them with untrusted recipients.

6. Your Rights

The current version does not require sign-in or provide separate account registration. You can turn off first-party anonymous analytics for NVPERPay at any time under “Settings — Anonymous Usage Analytics” in the App. That switch controls only first-party usage analytics and does not alter the Ocean Engine SDK initialization and attribution processing described in this Policy. You can also withdraw system permission in iOS under “Settings — Privacy & Security — Tracking” or in the corresponding HarmonyOS App Tracking permission settings. If iOS ATT is denied, restricted, or withdrawn, the App disables IDFA for the Ocean Engine SDK but, while you continue to agree to this Privacy Policy, continues to process IDFV, necessary attribution touchpoints, launch, session, and activation information within the scope disclosed here, uses our proprietary NVPERPay service for real-time activation attribution for our own App, and uses Apple anonymous aggregate attribution in parallel. Withdrawing ATT is not the same as withdrawing consent to attribution processing under this Privacy Policy. If HarmonyOS App Tracking permission is denied, restricted, or withdrawn, the corresponding Ocean Engine SDK is not initialized. Data already processed or sent cannot be recalled through withdrawal. If you wish to withdraw consent to attribution processing under this Policy, you can stop using and uninstall the App or contact us at support@nvper.com. Withdrawal does not affect processing lawfully performed based on consent before withdrawal. You can also manage local information by deleting on-device data, clearing cache, withdrawing other system permissions, or uninstalling the App. Turning off analytics or denying system App Tracking does not affect necessary purchase, restoration, or purchased-entitlement validation. If you have provided information through membership services, email, or support channels, you can contact support@nvper.com to request access, correction, or deletion. We will respond within 15 business days after receiving your request.

7. Data Retention

The current version primarily processes and stores images, videos, editing drafts, export results, cache files, membership status, and basic preferences locally on your device. NVPERPay purchase validation, entitlement, anonymous analytics, and attribution-touchpoint records are stored in China for the shortest reasonable period necessary to provide services, handle disputes, perform security audits, and meet compliance obligations. Ocean Engine attribution information is processed by the relevant provider for the shortest period necessary to complete attribution, statistics, campaign optimization, and legal obligations. The on-device queue of unsent first-party analytics events is cleared when you turn off Anonymous Usage Analytics. The App's own temporary attribution, idempotency, and limited retry state is not cleared merely because ATT is denied, restricted, or withdrawn; it stops and is cleared only when you withdraw consent to attribution processing under this Privacy Policy or uninstall the App. Raw IDFV is not written to persistent logs or long-term local storage. Information that you voluntarily provide through support or email is lawfully stored and processed in China and retained for as long as necessary to resolve the issue, handle disputes, and conduct compliance audits. You can delete relevant local data by deleting exports, clearing the App's cache, using system settings, or uninstalling the App.

8. Protection of Minors

The App is intended primarily for general users capable of independent judgment and is not specifically directed to children. Minors should use it only with the consent and guidance of a guardian. Guardians should supervise a minor's importing, editing, saving, and sharing of images and any paid purchases.

9. Updates to This Policy

We may update this Privacy Policy in response to changes in features, laws and regulations, platform rules, or business operations. For material changes, we will ask you to review them through an in-App notice, announcement, or another reasonable method and will state the new updated and effective dates at the top of this page.

10. Governing Law

This Policy is governed by the laws of the People's Republic of China. If this Policy conflicts with mandatory provisions of law or regulation, those mandatory provisions control.

11. Contact Us

Personal information processor: Beijing Qijian Technology Co., Ltd.
Email: support@nvper.com