Privacy Policy

Last updated: April 12, 2026

Overview

ScreenKit (“we”, “our”, or “us”) is a web app that helps you create App Store and Google Play screenshots. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have.

If you have questions, reach us at support@screenkit.tools.

What we collect

Account information

When you create an account we collect your email address and a unique user identifier from our authentication provider. If you sign in with Google, we also receive your name and profile picture. We do not store your password — authentication is handled by Supabase.

Subscription data

If you subscribe to ScreenKit Pro, your payment is processed by Lemon Squeezy, who acts as Merchant of Record. Lemon Squeezy collects and processes your billing details (card, address, tax info) on our behalf. We receive and store a limited record of your subscription: plan, billing interval, status, and customer/subscription IDs. We never see or store your card number.

Project data

Your projects — including the screenshots you upload, your layouts, text, and element positions — are stored in our database so you can access them from any device you sign in on. This data is encrypted in transit (HTTPS), scoped to your user account only, and protected by row-level access rules on the database.

The editor, rendering, and export all run in your browser. Your images are never processed, transformed, or examined on our servers, and we never use your content to train AI models or for advertising. You can delete any project at any time from the dashboard, which removes it from our servers immediately. See the sub-processor list below for the infrastructure providers that host this data on our behalf.

Analytics

We use PostHog (EU region) to understand how people use ScreenKit. We collect anonymized usage events such as page views, button clicks, template opens, and exports. We identify these events against your user ID only after you sign in, so we can measure feature adoption and improve the product. We do not sell analytics data to third parties.

Log and device data

When you use the Service, our infrastructure providers automatically collect technical information such as your IP address, browser type and version, device type, operating system, approximate location derived from IP, referring URL, pages viewed, and timestamps. This data is used to keep the Service secure, prevent abuse, debug errors, and measure aggregate usage.

Cookies and similar technologies

We use essential cookies for authentication (session tokens from Supabase) and functional cookies for analytics (PostHog). We do not use third-party advertising cookies, and we do not track you across other websites.

Most browsers include a “Do Not Track” (DNT) feature. Because there is no industry consensus on how to respond to DNT signals, we do not currently respond to them. You can still opt out of analytics by using a browser extension or by contacting us at support@screenkit.tools.

How we use your data

  • To provide and maintain the Service (authentication, saving projects, billing).
  • To communicate with you about your account, subscription, and important changes.
  • To understand product usage and improve features.
  • To detect, prevent, and respond to security incidents and abuse.
  • To comply with legal obligations.

Legal basis for processing (EU / UK users)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

  • Performance of a contract — to provide the core Service you signed up for (authentication, saving projects, processing payments).
  • Legitimate interests — to keep the Service secure, prevent fraud, and measure aggregate usage in a way that does not override your rights.
  • Legal obligation — to retain invoice and tax records as required by law.
  • Consent — where we ask for it (for example, for non-essential analytics or marketing emails).

Sub-processors

We share personal data only with the following sub-processors, who are contractually bound to protect your data and use it only to provide services to us:

  • Supabase Inc. — authentication and database hosting. Data is processed in the region closest to our deployment.
  • Lemon Squeezy — payment processing, billing, and tax compliance (Merchant of Record). Lemon Squeezy collects your billing details directly and we never see your card number.
  • PostHog (EU region) — product analytics. Event data is stored on EU-region servers.
  • Vercel Inc. — hosting and content delivery for the Service.

We do not sell your personal data. We do not share data with advertising networks. This list was last updated on April 12, 2026.

International data transfers

Some of our sub-processors (Supabase, Lemon Squeezy, Vercel) may process data in the United States or other countries outside your own. When personal data is transferred out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) to ensure your data is protected to the standard required by EU law.

Security

We take reasonable technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), encryption at rest on our database provider, role-based access to production systems, and routine security reviews of our dependencies. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach that affects you, we will notify you as required by applicable law.

Data retention

We keep your account data as long as your account is active. If you delete your account, we remove your personal data from our systems within 30 days, except where we must keep it to comply with legal obligations (for example, tax and invoice records for paid subscriptions, which we retain as long as required by local law).

Analytics data is retained for up to 12 months before being aggregated or deleted.

Your rights

Depending on where you live, you may have the following rights with respect to your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on our legitimate interests.
  • Restriction — ask us to limit how we process your data.
  • Withdraw consent — where we rely on consent, you can withdraw it at any time.
  • Complain — lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at support@screenkit.tools. We will respond within 30 days.

California privacy rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion of your personal information, the right to correct inaccurate information, and the right to opt out of the “sale” or “sharing” of your personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. To exercise any California privacy right, email support@screenkit.tools. We will not discriminate against you for exercising these rights.

Business transfers

If ScreenKit is involved in a merger, acquisition, financing, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you (for example, via email or a notice on the Service) before your personal data becomes subject to a different privacy policy.

Children

ScreenKit is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will delete it promptly.

Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. If the changes are material, we will notify you by email or through a notice on the Service before the changes take effect.

Contact

For any privacy-related questions, or to exercise any of the rights above, email support@screenkit.tools.