Privacy policy

Shotbox is built privacy-first. Your screenshots are processed on your device and stay there. This policy explains exactly what happens to your data.

On-device processing

Everything starts and stays on your device. When you take a screenshot, Shotbox reads it using your phone's built-in text recognition (Apple Vision on iOS, ML Kit on Android). The screenshot image, its thumbnail, the recognized text, and any extracted details such as links, prices, and addresses are stored only in Shotbox's local database on your phone. Image bytes never leave your device. Deleting the app removes all of this on-device data.

What leaves your device

Shotbox uses privacy-respecting product analytics to understand which features are used. Only anonymous events leave your device: an event name (for example, "item moved to to_buy") and a bucket identifier. We never send your recognized text, your extracted values, or any personal identifier. These anonymous events are processed by PostHog on US-based infrastructure under Standard Contractual Clauses (SCCs) for international data transfer.

Pro sync (optional, off by default)

If you subscribe to Shotbox Pro and explicitly turn on sync, Shotbox can back up your recognized text and extracted details so you can search across devices. Sync is opt-in and off by default. When you enable it, only recognized text, extracted details, and metadata are sent. Images are never synced. Synced content is stored in Supabase's Frankfurt region (eu-central-1).

No third-party analytics on screenshot content

We never send your screenshot content to any third-party analytics service. Analytics see anonymous events only, never your recognized text, your extracted values, or your images.

Retention and deletion

On-device data lives until you delete the item or uninstall the app. Anonymous analytics events are retained by our analytics provider for up to 365 days. Pro sync content is retained while your subscription's sync is active. You can request deletion at any time by emailing privacy@shotboxapp.com, or through our data deletion page.

On request we delete your anonymous analytics events and, for Pro users, your Frankfurt-stored synced content. Cloud data is purged within 7 days. Your on-device data is always under your control: delete items in the app, or uninstall to remove everything stored locally.

Children

Shotbox is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has used the app, contact privacy@shotboxapp.com and we will remove any associated records.

Contact

Questions about privacy or your data? Email privacy@shotboxapp.com.

Last updated: May 2026