Privacy policy

shotmeal is an offline-first app. By default, every meal you log lives only on your device. We don't see it, can't see it, and don't want to.

What we collect, and when

• Nothing personal, if you never sign in. Apart from an AI estimate you ask for, the app only contacts our server for announcements (such as a maintenance notice), barcode lookups and — if you allow it — anonymous estimate corrections, none of which carry personal data.
• Your email and provider ID, if you sign in with Google, Apple, or a magic link. We use it solely to authenticate you on future sessions.
• Your meal photos, only when you use AI estimation or turn on cloud sync. For an estimate, the photo and any note you add are sent to our AI provider — OpenAI, with Google and Anthropic as backups — for that estimate only; they don't use it to train their models. With sync, photos are backed up to private storage so they appear in your web diary and, if you link accounts, to the people you linked with. Otherwise they never leave your phone.
• Your diary backup, if you turn on cloud sync. It's JSON your phone sends us and we don't analyse it; our server only reads the meals, calorie goals and the names of the people in your household out of it to show them to accounts you've chosen to link with.
• Your support requests and feature ideas, if you send one from Settings → Help & feedback: your messages, any screenshots you attach, and your app version, phone system and language, linked to your account so we can reply. Deleting your account deletes them.
• Anonymous estimate corrections, if “Help improve estimates” is on (Settings → AI; you can turn it off any time): when you save an AI estimate, the app sends each item's food name in English with the estimated and the saved amounts — no photo, meal name, account or device identifier. We use them only to make estimates more accurate.
• App usage, only if you allow it (asked once; Settings → AI → Usage measurement). The app then reports to Google Analytics for Firebase which screens and features you use, events like finishing onboarding, saving an AI estimate or starting a trial, and whether you installed after seeing one of our ads — with a random app-instance ID, rough location from your IP, and device and app version. Never your meals, photos, weight, name or email, and never your shotmeal account. We use it to improve the app and to measure our own ads in Google Ads; it is not used to personalise ads. Until you allow it, nothing is sent.
• Website cookies, only if you accept them (the banner on shotmeal.com; “Cookie settings” in the footer changes your choice). Then Google Analytics and Google Ads measure visits to shotmeal.com and clicks on the App Store / Google Play links, so we can tell which of our ads work. When you came from one of our ads, the Google Play link also passes that ad click on to Google Play, so the app can tell the install came from it. Not used to personalise ads. Decline and no cookies are set.
• Your weight history, only if you turn on weight tracking. You can type weigh-ins in, or let shotmeal read your weight — and nothing else — from Apple Health or Health Connect, for example what your smart scale's app saved there; shotmeal writes nothing there except, if you turn it on, the water you log (see below). Weigh-ins stay on your phone and are part of your backup if you turn on sync. We don't read or analyse them, never use them for advertising or share them with anyone, and they are never shown to accounts you link with.
• Your drinks, only if you turn on liquids tracking. They stay on your phone and are part of your backup if you turn on sync; they are never shown to accounts you link with. If you turn on "Save to Apple Health" / "Save to Health Connect", shotmeal writes there the amount of each drink that counts toward your water goal, as water — nothing else — and removes it again if you delete the drink.
• People you add, such as your children: their name, calorie goal and meals stay on your phone, and are part of your backup if you turn on sync. We never ask for their birth date, weight or height. If you use the goal calculator for an adult, those values are used on your phone to compute the goal and are never stored.
• Barcodes you scan. The number is sent to our server to look up the product; if we don't know it yet, our server asks Open Food Facts. Nothing that identifies you is attached, and product data we fetch is kept to answer the next scan faster.
• Request logs, including IP and user agent, retained for 30 days for security and abuse detection.

Linking accounts

If you link your account with another shotmeal account, each of you can see the other's household diary: meals, meal photos, nutrients, calorie goals and the names of the people in it — never weight, height, age or other body data. If you allow it, they can also add meals to your diary. Either of you can unlink at any time in Settings → Household; sharing stops immediately and meals still waiting to be delivered are deleted.

What we never do

• Sell your data.
• Train machine-learning models on your meals.
• Show ads in the app, or use your data to target ads at you.
• Send marketing emails — magic-link mail is the only mail we send.

Deleting your data

Open the app's Settings → Delete account, or visit shotmeal.com/delete-account on the web. We delete the row immediately; backups are purged within 24 hours.

Contact

Questions about privacy? Email privacy@shotmeal.com.