Privacy Policy
Last updated: 5 October 2026
Who we are
Snatched is operated by My Snatched Limited, a company registered in England and Wales (company number 17500103), registered office 22 Wycombe End, Beaconsfield, Buckinghamshire, HP9 1NB.
For data protection purposes My Snatched Limited is the data controller for the app at mysnatched.ai and the Snatched apps for iOS and Android. Contact: support@mysnatched.ai, or write to us at the registered office above.
Who Snatched is for
Snatched is for children aged 5 to 17. Every account needs a parent or guardian to approve it — not only accounts below the local age of digital consent, but all of them, everywhere. A child cannot use the app until that approval happens.
Accounts for children under 13 run as Snatched Jr, which has tighter rules around friends.
How we know how old a child is
A child tells us their age when they sign up, but we do not use that number. When the approval email reaches the parent, the parent is asked how old the child is, and it is the parent's answer the app uses — for whether the account is Snatched Jr, for who the child may be friends with, and for whether a parent is asked before each friendship. If the two answers differ, we tell the parent.
The parent may answer in one of two ways: an age in whole years, or the child's date of birth. The second is offered because an age in whole years slowly goes out of date — we would learn a child had turned 13 on the anniversary of the parent's answer rather than on their actual birthday — and because it lets Snatched wish a child a happy birthday.
If a parent gives a date of birth, we store it. We say that plainly rather than describing it as something smaller, because a date of birth is a stronger piece of information than an age: it is one of the details used to identify people. We use it for two things and nothing else:
- working out how old the child is today, which decides what the app lets them do;
- recognising their birthday inside the app, if and when we build that.
It is never used to advertise to a child, never shared with the shops we link to, and never sold. Giving it is optional — a parent who prefers to give only an age can, and the app works the same way.
Only a grown-up can set it. A child cannot enter or change their own age or birthday, and our servers discard any age or date that arrives from the app, whatever it claims. If you want it corrected or removed, email support@mysnatched.ai and we will do it.
If an account was approved before we began asking this question, it has no age on it. Such an account cannot use friend codes at all, and the child can ask us to email their parent the question. The answer still only ever arrives from the parent, through that email.
What we hold
On the device
Most of what Snatched knows stays in the app on the device and never reaches our servers: wardrobe items and their photographs, saved looks, try-on photographs, the profile, and styling preferences such as which suggestions were liked or skipped. Clearing the browser's data, or deleting the app, removes that copy.
In the account
So that things survive signing out and follow a child between devices, we keep on our servers: the child's first name, username, a one-way hash of the password (never the password), the age described above, the gender chosen for styling, the parent's email address, the wardrobe (names, categories, colours, brands and thumbnail images of the clothes), and styling preferences.
Photographs of the child are opt-in. Try-on photographs and saved looks that contain the child stay on the device unless a family switches on "Keep my saved looks across devices" in My Profile. That setting is off by default, and switching it off again deletes the copies from our servers. Style It illustrations — drawings, with no photograph in them — are kept either way.
Location is removed from every photograph
Phone cameras write the exact place a photograph was taken into the file. For a child that is usually their home or their school. Snatched strips it out on the device, before the photograph goes anywhere — including to the AI services below. If it cannot be removed, the photograph is refused rather than sent.
Looks shared with a friend
A child can send one look to one friend at a time and ask what they think. There is no group thread and no broadcast.
The whole exchange is deleted after 30 days — the picture, the note and the reaction together. It is deleted sooner, and immediately, if either child ends the friendship or blocks the other. The one exception is something that has been reported to us, which we keep until we have dealt with it, so that evidence cannot be destroyed by unfriending someone.
Closet sharing
If a child turns on closet sharing for a specific friend, a copy of their wardrobe items — names, categories, colours, brands and thumbnail images of the clothes — is stored so that friend can see them and suggest a piece. This is photographs of clothing, never photographs of the child. It is per friend, read-only, and turning it off for the last friend deletes the stored copy.
Automatically collected
Standard web server logs (IP address, browser type, pages requested) kept for security and diagnostics for up to 90 days.
Pictures made by AI, and how they are marked
Three features use AI on an image: Wear It alters a photograph of the child so they appear to be wearing a chosen garment; Anime me turns a photograph into a drawing; Style It draws an outfit with no photograph involved at all.
A try-on is designed to look real, so we say that it is not:
- A plain notice sits under every AI picture in the app.
- When a picture leaves Snatched — saved to the camera roll, sent to a friend, emailed to a parent, or shared to another app — a caption is written into the picture itself, along with a marker that software can read. It says the picture was made by AI, and it travels with the file even if someone screenshots it.
- If the marking cannot be applied, the picture is not sent.
This is what the EU AI Act, Article 50, asks for.
Things Snatched will not do with a photograph
- Underwear and swimwear are never applied to a photograph of a child. Those categories exist in the wardrobe, but the try-on refuses them, and the refusal is enforced on our servers as well as in the app.
- We use only models that keep the child's own face. We do not use models that regenerate a face.
- We do not reshape, slim or "beautify" anyone's body.
- We do not use face recognition, face matching or face search, and we do not use photographs to identify anyone.
Keeping children away from strangers
- There is no way to search for a user. No directory, no username lookup. Friends are added only with a short code or QR code shown in person.
- Children more than 3 years apart in age cannot become friends. This cannot be overridden.
- Below the age of 12, each friendship needs that child's own parent to approve it.
- There are no public profiles, no social feed, no follower counts and no likes.
- Any child can block or report another. Reports about safety reach a named person within 24 hours, including at weekends.
Who we share with
We do not sell personal information. We share only what a feature needs, with:
- fal.ai — virtual try-on, anime and illustration generation
- Fashn.ai — virtual try-on image processing
- Anthropic — outfit suggestions, identifying an item from a photo, and a safety check on every AI picture before it is shown
- Netlify — hosting and data storage
- Resend — sending the emails a parent receives
Photographs of the child reach the first two, and photographs of clothing reach the third. The third also sees each AI-made picture of the child once, before it is shown, for one purpose: to check the picture is appropriate for a child. A picture that fails that check is never shown, saved or shared. Each processes data on our instructions.
How long we keep things
| What | How long |
|---|---|
| The account and its wardrobe | Until it is deleted |
| A look sent to a friend | 30 days, then deleted entirely |
| Security records | 90 days |
| Server logs | Up to 90 days |
| Backups | 14 days |
| A deleted account | Switched off at once; erased after 7 days |
Photographs sent for AI processing are held by those providers only as long as needed to return a result, under their own retention policies.
Backups
We take a daily backup so that a mistake on our side cannot lose a child's wardrobe. It is kept for 14 days and then deleted. It contains no photographs of anyone — a second copy of a child's photograph sitting in another place is a worse risk than the one the backup protects against. Style It illustrations are included, because they are drawings and cannot be recreated once lost.
Security records
We keep a short record of security-relevant actions — signing in, a failed sign-in, adding or removing a friend, a parent confirming an age, a parent asking to see or delete data. Each entry holds the account's internal reference, what was done, when, and a one-way fingerprint of the network address. It never holds photographs, messages, wardrobe items, ages or email addresses. These are kept for 90 days.
If a parent has an account erased, these entries are stripped of anything identifying rather than removed, so a security investigation remains possible and nobody can erase the evidence of an attack by deleting the account they attacked.
Advertising
We do not show behavioural advertising to any user, and we do not build advertising profiles. Styling preferences are used to suggest outfits, never to target advertising.
Some links to retailers earn us a commission. Nothing is ever bought inside Snatched — items open on the retailer's own website, where an adult completes any purchase. See our Affiliate Disclosure.
Your rights
You may have the right to access, correct, delete, restrict or port personal data, and to object to processing.
A parent can do all of this themselves, at any time, without asking us. Go to mysnatched.ai/parent and enter the email address that approved the account. We email a link — one per child, if you have more than one — that shows everything we hold and lets you have it deleted. Deletion switches the account off straight away and erases everything permanently after seven days, with a link to undo it in the meantime.
For anything else, email support@mysnatched.ai. You also have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office, ico.org.uk.
International transfers
Our providers operate in the United States and elsewhere. Where personal data leaves the UK or EEA we rely on appropriate safeguards, including Standard Contractual Clauses with the UK Addendum.
Changes
We update the date at the top of this page when this policy changes, and give prominent notice in the app for significant changes.