DOC — KEYSTONE HSE / SNAGBACK PRIVACY NOTICE REV. 01 ISSUED 12·09·26 STATUS — APPLIES TO THE SNAGBACK ANDROID APP
Keystone HSERAMS · LOLER · COSHH
Book a walkthrough
§ SNAGBACK PRIVACY NOTICE

SnagBack Privacy Notice

Last updated: 12 September 2026.

This notice covers the SnagBack Android application, published by Keystone HSE Ltd. It is a separate notice from the one covering the Keystone HSE service at app.keystonehse.com, because SnagBack works quite differently: it has no account and no server. If you are looking for the Keystone HSE notice it is here.

1. The short version

The app collects nothing, transmits nothing and shares nothing. It has no accounts, no login, no analytics and no crash reporting, and it makes no network requests of its own. Everything you create stays in the app's storage on your own device until you choose to send a file, and when you do, it goes through an app you already have, such as WhatsApp or your mail client, to a recipient you choose. We are not in that path and we receive no copy.

2. Who publishes the app

The publisher is Keystone HSE Ltd, a private company incorporated in Jersey, registered number 166647. Registered office: 9 Grosvenor Terrace, St Helier, Jersey JE2 4QS. Keystone HSE Ltd is registered with the Jersey Data Protection Authority, registration number 104029.

For any question about this notice, contact privacy@keystonehse.com.

Because the app sends us no data at all, there is no processing of your personal data by us in connection with it, and so no controller relationship arises between you and us through your use of the app.

2a. Your position if you use it for work

Worth being plain about, because it is easy to miss: a snag list or a report you create may contain another person's name, their company and photographs taken at their place of work. That is your record, held on your device and sent by you. If you use the app for your business, you are the one responsible for that information under whichever data protection law applies to you, in the same way you are responsible for photographs you take on your own phone camera and email to somebody. We cannot assist with a request about it, because we do not hold it and have no means of reaching it.

3. What the app stores on your device

All of the following is held in the app's private storage on your handset, and nowhere else:

  • Your name and company, exactly as you type them when you first open the app. These are written onto the snag lists and reports you create, so that a recipient can see who raised them.
  • Your jobs, meaning a name and a site for each one, which you type. This is your own filing and it never travels with a file you send.
  • Your snag lists and reports, each stored as the finished PDF, together with the photographs in it and any mark-up you drew.
  • Your company logo, if you choose one.
  • Files you take in, when somebody sends you a snag list and you open it in the app.

None of this is encrypted by the app beyond the protection Android already gives an application's private storage, and none of it is backed up by us. If you lose the handset you lose what was on it, so send finished files to yourself or keep them in the job file.

4. Permissions the app asks for, and why

  • Camera. To photograph a snag, a fix or a site condition. Photographs are downscaled and kept in the app's own storage. The camera is only ever opened when you tap to take a picture.
  • Choosing and sharing files. To open a snag list somebody sent you, to choose a logo, and to hand a finished file to the app you want to send it with. This uses Android's own file chooser and share sheet, so you pick the file and the recipient, not us.

The app does not ask for location, contacts, microphone, calendar, call logs, SMS or background access, and it does not request permission to run in the background.

5. What we collect

Nothing. There is no server component to this app, no account system, no telemetry, no advertising identifier and no third party SDK of any kind embedded in it. We have no way of knowing that you have installed it, opened it or used it.

Two consequences worth stating, because they follow from the same fact. We cannot see your data even if you ask us to, which means we cannot recover a lost list for you. And we have no usage statistics, so we rely on people telling us what is wrong with it.

6. What happens when you send a file

When you send a snag list or a report, the app writes the PDF to a temporary location on your device and hands it to Android's share sheet. You then choose the app that sends it and the person who receives it. That app's own privacy terms apply to the transmission, and you should assume the recipient keeps the file.

The file itself contains what you put in it: the job and site you typed, your name and company, the items, the photographs, the mark-up, and the same details for anyone who has answered it. It also contains the same information in a machine-readable form so that the app at the other end can add a reply to it. There is nothing hidden in the file beyond that, and nothing in it reports to us.

7. The link and the code on the document

Each document carries our name, the address keystonehse.com/snagback and a QR code for the same address. It is one shared address printed on every document, never a code unique to a document or a recipient, so opening it tells us that somebody visited a page and nothing whatever about which file they were holding.

If you do visit that page, this website's own privacy notice applies to that visit, including how it handles analytics and consent: see Keystone HSE privacy, cookies and tracking.

8. Children

SnagBack is a tool for construction work. It is not directed at children and we do not knowingly hold any information about anyone, of any age.

9. Deleting your data

Because everything is on your device, you are in control of all of it. Delete an individual list in the app, or uninstall the app to remove everything it holds, including photographs and any logo you set. There is no account to close and no request to make of us, because we hold nothing to delete. If you would like that confirmed in writing for your own records, email privacy@keystonehse.com and we will confirm it.

10. If this ever changes

A future version of SnagBack, or a separate paid product alongside it, may add accounts and a server so that lists can be tracked across areas and trades. That would be a genuine change to everything above, and it would not be made quietly: this notice would be revised and dated before any version that behaves differently was published, and the app itself would have to ask you to sign in before any of your information left the handset.

11. Contact

Keystone HSE Ltd, 9 Grosvenor Terrace, St Helier, Jersey JE2 4QS.
privacy@keystonehse.com