Privacy Policy

1. Introduction

ShotCanvas ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have regarding your data.

This policy applies to all users of the ShotCanvas mobile application (iOS and Android) and any associated web services ("the Service"). By using ShotCanvas, you agree to the practices described in this Privacy Policy.

If you have questions about this policy or our data practices, please contact us at privacy@shotcanvas.app.

2. Information We Collect

2.1 Account Information

When you sign in to ShotCanvas, we collect the following via Firebase Authentication:

• Email address — used to identify your account and send important service communications
• Display name — sourced from your Google account, used to personalize your in-app experience
• Profile photo URL — sourced from your Google account, displayed in the app UI
• User ID (UID) — a unique, anonymized identifier generated by Firebase used to associate your data with your account
• Authentication tokens — short-lived tokens used to verify your identity when accessing your data; not stored persistently by us

We do not store your Google account password — authentication is managed entirely by Google's OAuth 2.0 infrastructure.

2.2 Design Drafts and Project Data

ShotCanvas stores the following user-generated data in Firebase Firestore (our cloud database) to enable cloud sync and cross-device access:

• Design draft metadata (draft name, template selection, device size, creation date, last modified date)
• Editor settings and configuration per draft (text, font, colors, layout positions, template parameters)
• Export history metadata (export dates and device sizes — not the exported images themselves)
• App preferences and settings (e.g., theme preference, default device size)

Screenshot images you work with are stored locally on your device and, in certain cases, in Firebase Storage associated with your account for cross-device sync. We do not access or inspect your screenshots for any purpose other than providing the Service to you.

2.3 Usage and Analytics Data

We use Firebase Analytics to collect anonymized, aggregated information about how the app is used. This may include:

• Feature usage events (e.g., "template selected," "export completed," "AI design generated") — these events do not contain your screenshots or personal content
• App session duration and frequency
• Device type, operating system version, and country (at a regional level)
• Crash reports and performance diagnostics via Firebase Crashlytics

Analytics data is used exclusively to understand how features are being used and to improve the Service. This data is not used to identify you personally and is not shared with third parties for advertising.

2.4 AI Feature Data (Gemini)

When you use AI-powered features (including AI design generation, headline writing, color extraction, and smart frame extraction), the following data may be transmitted to Google's Gemini AI API:

• Screenshots you have selected for AI processing
• Template preferences and design context you have provided
• App description or prompt text you enter for AI features

This data is transmitted solely for the purpose of generating AI outputs (e.g., layout suggestions, headlines, color palettes). The processing is governed by Google's Gemini API Terms of Service and Google's Privacy Policy.

We do not store the screenshots you send to the Gemini API beyond the duration of a single API request. Google may process and store this data in accordance with their own privacy policies. If you do not wish to transmit your screenshots to Google's AI systems, you can use ShotCanvas without enabling any AI features — all core editing functionality is available without AI.

2.5 Screen Recording Data (Android)

On Android, ShotCanvas offers an optional screen recording feature that captures your device screen to extract screenshots. This recording:

• Is initiated only when you explicitly tap the record button and grant the required permission
• Is stored temporarily in your device's local storage during processing
• Is not uploaded to our servers — all frame extraction processing occurs on-device
• Is automatically deleted from local temporary storage after frames are extracted

We never have access to your screen recording data. The recording stays entirely on your device.

2.6 Information We Do Not Collect

We do not collect:

• Your location data
• Your contacts or address book
• Biometric data of any kind
• Payment information (payments, if offered in the future, will be processed by Apple App Store or Google Play — we never see your payment card details)
• Data from other apps on your device

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Authenticating your account, syncing your drafts across devices, processing your screenshots, and delivering AI-generated design outputs
• Improving the Service: Analyzing aggregated, anonymized usage data to understand which features are valuable, where users encounter friction, and how to prioritize development
• Service communications: Sending you important information about your account, changes to the Service, security alerts, and this Privacy Policy — we do not send marketing emails unless you explicitly opt in
• Safety and compliance: Detecting, investigating, and preventing fraudulent or prohibited activity; complying with legal obligations
• Support: Responding to questions, bug reports, and support requests you submit to us

4. How We Share Your Information

We do not sell your personal information. We do not share your data with advertisers or data brokers. We share your information only in the following limited circumstances:

• Service providers: We use Google Firebase (Authentication, Firestore, Storage, Analytics, Crashlytics) as our infrastructure provider. Google processes data on our behalf under a data processing agreement. We do not use any other third-party services that receive personally identifiable information.
• AI processing: As described in Section 2.4, screenshots and design prompts you submit to AI features are sent to Google's Gemini API. This is done at your explicit request when you use those features.
• Legal compliance: We may disclose your information if required to do so by law, court order, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety, investigate fraud, or respond to a government request.
• Business transfers: If ShotCanvas is acquired by or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Storage and Security

5.1 Where Your Data Is Stored

Your account information and design draft data are stored in Google Firebase, with data centers located in the United States. By using ShotCanvas, you consent to the transfer of your data to the United States, which may have different data protection laws than your country of residence.

5.2 Security Measures

We implement industry-standard security measures to protect your information, including:

• Firebase Security Rules that ensure only you can read or write your own data
• All data transmissions are encrypted using TLS 1.2 or higher
• Data at rest is encrypted by Google Firebase infrastructure
• Authentication via OAuth 2.0 — we never store passwords

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5.3 Data Retention

We retain your account information and design drafts for as long as your account is active. If you delete a draft, it is permanently deleted immediately. If you delete your account, all associated data (account info, drafts, uploaded images) is deleted within 30 days.

Aggregated, anonymized analytics data (which does not identify you) may be retained longer for statistical purposes.

6. Your Rights and Choices

6.1 Access and Portability

You can access and review all your design drafts and account information directly within the ShotCanvas app. If you would like a copy of your data in a machine-readable format, contact us at privacy@shotcanvas.app and we will provide it within 30 days.

6.2 Correction

You can update your display name and profile information through your Google account settings. If other data we hold about you is inaccurate, contact us at privacy@shotcanvas.app.

6.3 Deletion

You can delete individual drafts and uploaded images at any time within the app. To delete your entire account and all associated data, go to Settings → Account → Delete Account within the app, or contact us at privacy@shotcanvas.app. Account deletion is permanent and cannot be undone.

6.4 Opt Out of Analytics

You can opt out of analytics data collection in Settings → Privacy → Analytics within the app. Opting out will not affect any functionality of the Service.

6.5 AI Features

All AI-powered features are entirely optional. You can use ShotCanvas's full template editor and export features without enabling AI. Simply don't use the AI design generation, AI headline, or smart frame extraction features if you prefer not to transmit screenshot data to Google.

6.6 European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to object to processing of your personal data
• The right to restriction of processing
• The right to lodge a complaint with your local supervisory authority

Our legal basis for processing your personal data is your consent (provided by agreeing to these terms), and the necessity of processing for the performance of the contract (i.e., providing the Service to you). Contact privacy@shotcanvas.app to exercise any of these rights.

6.7 California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to non-discrimination for exercising your privacy rights. We do not sell personal information. To make a request under the CCPA, contact privacy@shotcanvas.app.

7. Children's Privacy

ShotCanvas is not directed to children under the age of 13 (or under 16 in the EEA), and we do not knowingly collect personal information from children. If you believe a child under the applicable age has provided us with personal information, please contact us at privacy@shotcanvas.app and we will delete that information promptly.

8. Third-Party Links and Services

The Service may contain links to third-party websites or services (such as Apple App Store or Google Play). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through ShotCanvas.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via an in-app notification and/or email at least 14 days before the changes take effect

Your continued use of ShotCanvas after the effective date of the updated Privacy Policy constitutes acceptance of the changes. If you do not agree to the updated policy, please stop using the Service and delete your account.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ShotCanvas — Privacy Team
Email: privacy@shotcanvas.app

We will respond to all privacy-related inquiries within 30 days.