Privacy Policy — Snap & Go

Infinite Financial Services LLC · Last updated: September 27, 2026

Este documento legal está disponible únicamente en inglés.

This Privacy Policy describes how Snap & Go ("the App"), operated by Infinite Financial Services ("IFS," "we," "us"), collects, uses, stores, and protects your information. This policy applies to all users of the App.

1. Information We Collect

Information you provide directly

  • Account information: email address (used for passwordless login)
  • Personal information: name, home address, phone number
  • Business information: business name, entity type, tax ID (EIN or SSN), business address
  • Financial data: expense amounts, dates, categories, notes, income records, mileage logs
  • Receipt images you photograph or upload
  • Bank statement PDFs you choose to upload for your bookkeeping records

Your business tax ID (EIN or SSN) is encrypted at the database level as soon as you enter it. The plaintext value is never retained after that point — it is not stored anywhere in readable form, and the App itself has no way to display or export the full number again afterward. Everywhere the App shows this information (in the App and in generated reports), it is masked to the last 4 digits, with one exception: an EIN (not an SSN) is shown in full on your generated Schedule C tax form specifically, since that is a legal requirement for filing.

Bank statements you upload are stored in the same private, access-controlled system as your other financial data and are used solely for bookkeeping reference — the App does not read, parse, or extract data from them. Because a bank statement reflects the full activity on an account, not just business-related transactions, we recommend reviewing what you upload if you use a personal or joint account for business purposes, and omitting or redacting any unrelated transactions you'd prefer not to share.

Bank account connections (optional)

If you choose to connect a bank account, Snap & Go uses Plaid Inc. ("Plaid"), a third-party financial data service, to establish that connection. This feature is entirely optional and currently offered to US-based users only — the App functions fully without it, using manual entry and receipt-photo capture instead. Snap & Go plans to require an explicit confirmation step before connecting a bank account, separate from your general acceptance of this Privacy Policy.

Current product status: this confirmation step is not yet live. Until it ships, choosing to connect a bank account within the App is treated as your consent to that connection under this Privacy Policy.

If you connect an account, we may receive:

  • Transaction data: amount, date, and merchant name
  • Basic account and financial-institution metadata (e.g. bank name, connection status)
  • A secure access credential issued by Plaid that lets us retrieve the above on an ongoing basis, for as long as the connection remains active

Snap & Go does not receive your online banking username or password at any point — Plaid handles authentication with your bank directly, outside of Snap & Go entirely.

Information collected automatically

  • Device information and app usage data necessary for the App to function
  • IP address, captured at the moment you accept our Letter of Understanding, Terms of Service, or Privacy Policy

This IP address is recorded solely as evidence of that acceptance and is not used for analytics, tracking, or any other purpose.

Location and country information

Snap & Go does not collect your GPS or precise location. The Android and iOS apps do not ask for location permission, and nothing is collected in the background.

Optional presence suggestions (off unless you turn them on). If you use the Living Abroad features and turn on Presence suggestions, the App checks at most once a day, only while it is open, which country your device appears to be in. It uses your device's time zone setting and, where your phone provides them, the country codes of the mobile network you are connected to and of your SIM card. It never uses GPS, Wi-Fi or Bluetooth scanning, or map coordinates.

When the App notices that country change, it stores the country code and the date with your account, so it can suggest trips to count toward the IRS physical presence or bona fide residence tests (Form 2555). Nothing is added to your records until you accept a suggestion.

This information is used only for those suggestions. It is not used for advertising or tracking, and it is not sold. It is stored with your other records by our database provider and shared with no one except the service providers that operate the App (Section 6).

You can turn Presence suggestions off at any time, and "Clear my detection history" deletes every country change the App recorded, on your device and in your account. The rest is deleted with your account data as described in Section 9.

2. How We Use Your Information

  • To provide the App's core functionality: expense tracking, mileage logging, income recording, and report generation
  • To generate tax-related reports (including Schedule C exports) based on the information you enter
  • To process receipt images using on-device optical character recognition (OCR) to extract merchant, amount, and date information
  • To communicate with you about your account (e.g. one-time login codes)
  • To improve and maintain the App
  • For connected bank accounts: to automatically match your bank transactions against expenses you've already entered, so you can avoid re-entering the same information twice, and to show you transactions we can't confidently match for your own review

We do not use connected-account information to make decisions about eligibility for credit, insurance, employment, housing, or other similarly significant decisions, and we do not use it for targeted advertising.

3. Automated Matching and User Review

For connected bank accounts, Snap & Go uses an automated process to compare bank transactions against the expense records you have entered, based on amount, date, and merchant information where available.

The App never creates or files a report based on a bank transaction without either an automatic high-confidence match or your own explicit action — when our systems cannot confidently determine that a transaction corresponds to something you've entered, it is presented to you for review rather than acted on automatically. You remain responsible for reviewing this information and determining whether it is accurate and appropriate for your accounting, tax, financial, or business purposes.

4. How We Store and Protect Your Information

Your data is stored using Supabase, a third-party database and authentication provider, with row-level security policies restricting access to your own data. Receipt images are stored in a private, access-controlled storage bucket.

Data is encrypted in transit using TLS, and encrypted at rest using AES-256 encryption, consistent with Supabase's standard infrastructure security practices. We take reasonable measures to protect your information from unauthorized access, but no method of electronic storage or transmission is 100% secure.

Bank connection credentials issued by Plaid are stored using this same encrypted infrastructure, with an additional restriction: these credentials are accessible only to backend systems that need them to retrieve your transaction data — never to the app you interact with directly, and never to any Snap & Go employee through the ordinary course of using the App.

5. Data Sharing

We do not sell your personal information. We may share your information:

  • With service providers who help us operate the App (e.g. Supabase for data storage), under contractual confidentiality obligations
  • With Netlify, our hosting provider, and Resend, our email delivery provider, under the same contractual confidentiality obligations
  • With Plaid Inc., solely to establish and maintain a bank connection you've chosen to set up, and to retrieve transaction data on your behalf, under Plaid's own privacy policy and contractual confidentiality obligations to us
  • As required by law, subpoena, or other legal process
  • With your explicit consent (for example, if you choose to export and share your own reports)

If you are also a bookkeeping or tax preparation client of Infinite Financial Services LLC, IFS staff providing those services to you may access the business and financial information you enter into Snap & Go, solely to prepare or assist with your bookkeeping and tax filings. This access is limited to IFS personnel directly involved in providing those services to you, and is not used for any other purpose.

Where required by law — including under Internal Revenue Code Section 7216, which governs a tax return preparer's use and disclosure of tax return information — we will obtain your separate written consent before using or disclosing your tax return information for any purpose beyond preparing your return. That consent, where applicable, is provided to you as a distinct document at the time you engage IFS for tax preparation services, separate from this Privacy Policy.

6. Third-Party Connections (QuickBooks Online and Other Services)

QuickBooks Online (Intuit)

If you choose to connect a business to QuickBooks Online, you authorize the connection through Intuit's own sign-in (OAuth 2.0). We request only the two Intuit permissions the feature needs: "com.intuit.quickbooks.accounting" (access to that company's accounting data) and "openid" (to confirm that the sign-in completed). Snap & Go never receives your Intuit username or password, and does not request access to QuickBooks Payments, payroll, or your Intuit profile.

What we read from QuickBooks: your chart of accounts, customers, vendors, items, classes and locations, tax codes, and basic company information, so that your Snap & Go categories, customers and vendors can be mapped to the matching QuickBooks records. What we write to QuickBooks: the records you choose to push from Snap & Go — expenses (with the receipt image attached where you have enabled that option), income and deposits, invoices and payments, mileage and other journal entries, and contractor payments — each tagged with its Snap & Go reference so the same record is never created twice. Snap & Go does not pull your QuickBooks transactions into the App.

The access credentials Intuit issues to us (access and refresh tokens) are encrypted at rest with application-level encryption in addition to our provider's disk encryption. They are used only by our backend systems to call Intuit's API; they are never sent to the App on your device and are not visible to IFS staff. If you have assigned an IFS accountant to your business inside Snap & Go, that person can see the connection's status, counts, and mapped account names for your business only — never the credentials, and never the ability to send records to QuickBooks on your behalf.

You can disconnect QuickBooks at any time from Settings → Connections in the App. When you disconnect, we revoke our access with Intuit and delete the stored tokens immediately, and any records waiting to be sent are discarded. You may also revoke Snap & Go's access from within your Intuit account; we detect that on our next connection attempt and stop. Records already sent to QuickBooks remain in QuickBooks under Intuit's terms. The mapping and send history kept in your Snap & Go account (which Snap & Go record corresponds to which QuickBooks record, and when it was sent) remains part of your account data and is deleted with it under Section 9.

Your use of QuickBooks Online is governed by Intuit's Terms of Service and Privacy Statement (intuit.com/privacy). None of the other service providers listed below receives your QuickBooks data.

Other service providers (sub-processors)

We rely on the following providers to operate the App, each under contractual confidentiality and data-protection obligations, and each receiving only the data needed for its role:

  • Supabase — database, authentication, file storage and backend functions (hosted on Amazon Web Services in the United States)
  • Netlify — web hosting
  • Resend — transactional e-mail (for example, one-time login codes and account notices)
  • Stripe — subscription billing on the IFS website and, if you send invoices with online payment enabled, payment processing for those invoices under Stripe's own terms; Snap & Go never sees or stores full card numbers
  • Plaid — optional bank account connections, described in Section 1
  • Array — optional credit-score snapshot for the Buying Power feature, requested only when you ask for it and shared only with your explicit consent

We do not sell your personal information to any of these providers, and none of them may use your data for its own purposes.

7. Managing or Revoking a Bank Connection

Snap & Go's Banking screen includes an in-app Disconnect option for each connected bank.

To disconnect, open the Banking screen, tap Manage under your connected banks, and tap Disconnect next to the bank you want to remove. You also have an independent way to revoke access: Plaid provides consumer controls through the Plaid Portal (my.plaid.com), where you can view and revoke Snap & Go's access to your connected accounts directly.

Revoking a connection through Plaid's portal does not automatically delete information Snap & Go has already received and lawfully retained. That information continues to be retained in accordance with this Privacy Policy until you delete your account (see Section 9).

8. Your Rights and Choices

Depending on your state of residence, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your personal information, subject to our legitimate business and legal retention needs (see Section 9)
  • Export your data in a portable format
  • Opt out of the sale or sharing of personal information (note: we do not sell your personal information — see Section 5)
  • Not be discriminated against for exercising these rights

These rights may apply under state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), and similar laws in other states where applicable. To exercise any of these rights, contact us at support@ifscorporation.com. We will respond within the timeframe required by applicable law (generally 45 days, with a possible extension).

We may need to verify your identity before fulfilling certain requests, and some requests may be limited by our legal or contractual obligations (for example, tax recordkeeping requirements described in Section 9).

9. Account Closure and Data Retention

While your account remains active, we retain your data, including any connected-account data, to provide the App's functionality to you.

When you close your account through the App's account-closure feature, your account immediately becomes read-only: you can still sign in to view and export your records, but you cannot add or change anything. We keep your data in this read-only state for 12 months from the date of closure, and you may reopen your account at any time during that period. The closure date and the scheduled deletion date are shown to you when you close the account, repeated in a confirmation e-mail, and shown each time you sign in during the read-only period.

At the end of the 12 months, your expenses, income records, receipts, mileage logs, bank statement uploads, connected-bank-account transaction data, third-party connection credentials and mapping data, and business profile information are permanently deleted from our systems. This deletion is irreversible — we do not retain a copy after it runs.

If you want your data deleted before the 12-month period ends, contact us at support@ifscorporation.com. We will verify your identity and check that no legal or contractual retention obligation applies (for example, records IFS is required to keep because IFS prepared your tax return, or records subject to an open dispute or legal hold); we then permanently delete your data and confirm by e-mail. Security and connection audit logs — which record events such as connecting or disconnecting a service, not the content of your records — may be retained for up to 24 months for security, support and dispute-resolution purposes.

Tax-record retention: closing your account, or having your data deleted from Snap & Go, does not satisfy your own recordkeeping obligations. The IRS generally recommends that business owners keep tax-related records for at least three years from the date a return is filed, and longer in some circumstances, independent of any single software tool. We recommend exporting or saving copies of any records you may need (for example, via the Reports or QuickBooks export features) before closing your account. Where IFS has prepared your tax return as a separate service, IFS retains the return and its supporting records for the period required of tax return preparers by law, separately from your Snap & Go account and under the engagement terms for that service.

10. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this policy will reflect the most recent changes. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

Infinite Financial Services LLC
Miami, Florida, USA
E-mail: support@ifscorporation.com