Privacy policy

Shotbox reads your screenshots on your phone, and the images never leave it. Some other data does leave your device so the app can work, be fixed when it crashes, and be paid for. This policy lists all of it.

On your device

When you open Shotbox, it imports your new screenshots and reads them with your phone's built-in text recognition (Apple Vision on iOS, Google ML Kit on Android). Shotbox stores a smaller preview image of each screenshot, the recognized text, and the details it finds — such as links, prices, dates, and addresses — only on your phone. Your original screenshots stay in your Photos library. Screenshot images never leave your device.

What leaves your device

Shotbox sends data to the services below. None of them receives your screenshots. Only cloud sync, which is optional and off by default, receives their recognized text. Like any service your phone connects to, each one receives your IP address when the app contacts it.

• Product analytics (PostHog, United States). Shotbox records how features are used:
  • Events: event names (for example, that an item was triaged), with details such as bucket identifiers, counts, durations, the kinds of information found (for example "date" or "link", never the value itself), error types, and your plan.
  • Domains: when you tap Open & Buy on a shopping link, the event includes the website's domain (for example, "example.com") but not the full link.
  • Device details: PostHog also receives your device model, operating system, app version, language, time zone, and screen size, and a random identifier created when you install Shotbox. The identifier is not linked to your name, email, or Apple or Google account.
  • IP address and approximate location: PostHog stores your IP address with each event, along with the approximate location it works out from it, such as your country and city.
  • Subscription events: RevenueCat also sends PostHog your trial and subscription events (for example, trial started, renewed or cancelled), with the product, price, currency, dates and the store's transaction IDs, under your random app user ID.
  • PostHog processes this data in the United States under Standard Contractual Clauses.
• Crash and performance reports (Sentry, United States). If Shotbox crashes or hits an error, it sends a report with the type of error, where in the app's code it happened, and device and app information, including a random installation identifier that isn't linked to your name or account. For errors in the app's own code, Shotbox removes error messages and logs before sending; crashes in the phone's native code are reported as the system records them. Shotbox also sends performance measurements, such as how long the app took to start, for a random sample of about 10%. Sentry stores your IP address with each report.
• Subscriptions (RevenueCat, Apple, Google). Your free trial and subscription are handled by the App Store or Google Play. Shotbox uses RevenueCat to check whether you have an active trial or subscription — which is what unlocks the app — and whether you can start a trial. RevenueCat receives a random app user ID and your store purchase records. Shotbox never sees your payment details.
• Shares and exports you choose. When you share or export an item — to WhatsApp, Apple Notes, Markdown, or another app — the text you chose to send goes to that app.
• Links you open. Opening a link takes you to that website, which receives your visit like any other.
• Google ML Kit (Android). Text recognition runs on your phone. Google's ML Kit library may send Google information about how the library itself performs, such as your device model, the app version, a per-installation identifier, and timing.
• Cloud sync, if you turn it on (Supabase, Germany). Pro subscribers can sign in and sync the text and details Shotbox found, never the images. Described in the cloud sync section below.
• Notion sign-in (Shotbox server on Vercel, Germany). If you connect Notion, your sign-in goes through a small Shotbox server, described in the Notion section below. It never receives your items.
• App updates (Expo, United States). Shotbox checks Expo's update service (EAS Update) for app updates and downloads them, so fixes reach you without a store release. The check sends your phone's platform, the app version, and a random identifier created when you install Shotbox, which isn't linked to your name or account. It never includes your screenshots, their recognized text, the details Shotbox finds, or anything else you keep in the app.

Google Sheets

You can send a receipt from Shotbox to a spreadsheet in your own Google account. It happens only when you ask for it, and these terms apply:

• What is sent: the merchant, date, amount and currency Shotbox finds on the receipt on your phone, plus a Shotbox reference ID and a duplicate-check code, so the same receipt is not added twice. Screenshot images and their recognized text are never sent.
• Your details go directly from your phone to Google. No Shotbox server is involved, and Shotbox's servers never receive or store your spreadsheet's content.
• Shotbox requests Google's "drive.file" permission only. It can access only files Shotbox creates. It cannot see your other Google Drive files.
• Your access token is kept in your phone's secure storage. Disconnecting Google Sheets in Shotbox deletes the token from your phone and revokes Shotbox's access with Google; your spreadsheet stays in your Google Drive. You can also revoke access at any time at myaccount.google.com/permissions.
• We do not sell data from Google, use it for advertising, or use it to train AI models.
• Shotbox's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Notion

From version 1.6, you can send items from Shotbox to Notion. It happens only when you ask for it, and these terms apply:

• Where it goes: your own Notion workspace. When you connect, you choose which pages Shotbox may use. Shotbox creates one database, named "Shotbox", under a page you share, and adds a row to it for each item you send.
• What is sent for each item: a title (your own note if you added one, otherwise the store name, the link's website, or the bucket and date), the bucket, the date of the screenshot, its first link, and the details Shotbox found in it, such as prices, dates, addresses, phone numbers, email addresses and contacts. Shotbox also sends a reference ID and a duplicate-check code, so the same item is not added twice.
• What is never sent: screenshot images, the text recognized in them, and sign-in or verification codes. Shotbox sends only the details listed above, never passages of your screenshots' text.
• Your items go directly from your phone to Notion. No Shotbox server is involved, and Shotbox's servers never receive or store your items.
• Shotbox reads only what it needs from Notion: the titles of the pages you share with it, so you can choose where its database goes, and its own "Shotbox" database, to check for duplicates.
• The sign-in server. Notion requires a private key, which can't be kept safely inside an app, to complete a sign-in. So the sign-in code goes through a small Shotbox server (Vercel, Frankfurt, Germany), which passes it to Notion and returns your access keys and your workspace's name. The server:
  • never receives your items or anything from your screenshots;
  • removes the account details Notion includes in its reply, such as your name and email address, so they never reach the app;
  • stores nothing;
  • logs one line per request (which step it was and whether it worked), never the code or your keys.
  It is also used to renew your access and to remove it when you disconnect. Like any service, it receives your IP address.
• Your access keys and your workspace's name are kept in your phone's secure storage. Disconnecting Notion in Shotbox removes Shotbox's access with Notion and deletes the keys from your phone; your "Shotbox" database stays in your workspace. You can also remove Shotbox at any time in Notion, under Settings › Connections.
• Notion handles what you send it under its own privacy policy.

Daily digest

From version 1.6, Shotbox can remind you once a day to look at your day. It is off until you turn it on. The reminder is scheduled on your phone and only says "Your Shotbox day"; the summary it opens is worked out on your phone when you open it. Nothing about your items leaves your device for it. Analytics record only that the digest was turned on or off, and that it was opened.

Optional account and cloud sync

Shotbox works fully without an account. An account exists only for cloud sync, which is for Pro subscribers and is off until you turn it on.

• Signing in: with Apple (on iPhone) or Google, from Settings › Account. We receive the email address Apple or Google shares (Apple can give a private relay address instead of your real one) and, from Google, your name. When you sign in, your subscription is linked to your account in RevenueCat, and our server asks RevenueCat to confirm it before sync can be turned on.
• What cloud sync stores (Supabase, on Amazon Web Services in Frankfurt, Germany): the text recognized in your screenshots and any corrections you made to it, the details Shotbox found (such as links, prices, dates and addresses), bucket assignments, and item information such as when the screenshot was taken, how it came into Shotbox, and whether you sorted it.
• What it never stores: your screenshots, their preview images, or anything that identifies the photos on your phone. Images never leave your device.
• Off by default: sync is off until you turn it on in Settings › Account, even with Pro. Without an account, or with sync off, nothing new is uploaded. Turning sync off keeps what was already uploaded until you delete it.
• Deleting: when you permanently delete items in Shotbox (Cleanup), their cloud copies are deleted too. Deleting your account deletes all of your cloud data at once (see below).
• We don't sell this data or use it for advertising.

What we never collect

Shotbox never sends your screenshots, or the text recognized in them, to any analytics, crash-reporting, or subscription service. You don't need an account to use Shotbox, and we never ask for your phone number. There is no advertising.

Keeping and deleting your data

• On your phone:
  • Trashing an item hides it but keeps it on your phone.
  • Cleanup permanently removes items from your Shotbox library.
  • Deleting the Shotbox app removes everything Shotbox stored on your phone.
  • If you turn on "Remove screenshots from Photos after import", Shotbox asks your phone to delete each original screenshot from Photos once it has been imported, and keeps only its smaller preview.
• Your account and cloud data: Settings › Account › Delete account deletes your account and all of your cloud data immediately and permanently. Everything on your phone stays as it is. You can also ask us by email (below).
• With our providers: analytics events, including the IP addresses stored with them, are kept for up to 1 year. Crash reports, including their IP addresses, are kept for up to 30 days.
• Deletion requests: you can ask us to delete this data by emailing help@shotboxapp.com or through our data deletion page. Analytics and crash data are stored under random identifiers that aren't linked to you, and the app doesn't show them. Tell us roughly when you installed Shotbox and your device model, and we'll do our best to find and delete your records. Uninstalling Shotbox stops all further collection.

Children

Shotbox is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has used the app, contact help@shotboxapp.com and we will remove any associated records.

Contact

Questions about privacy or your data? Email help@shotboxapp.com.

Last updated: October 2026