Privacy Policy

We collect only what we need to provide the Service:

• Account information. When you sign in (via Google), we receive your name, email address, and profile identifier through Firebase Authentication.
• Content you provide. The App Store / Google Play links, app screenshots, brand colors, descriptions, and any social-proof details you upload or enter to generate screenshots.
• Generated assets. The screenshots and related outputs we create for you, stored so you can access and download them.
• Billing information. Payments are processed by Stripe, our payment processor. We receive transaction and subscription status (e.g. plan, credits, renewal state) but never see or store your full card number or payment credentials — those are handled directly by Stripe.
• Usage and technical data. Basic logs (e.g. requests, errors, approximate timing) used to operate, secure, and improve the Service.

• To authenticate you and provide access to the Service.
• To generate your screenshots — including sending your uploaded screens and app details to our AI providers for analysis and asset creation.
• To process payments, manage subscriptions, and enforce usage limits.
• To operate, maintain, secure, debug, and improve the Service.
• To communicate with you about your account, purchases, or support requests.

We do not sell your personal information, and we do not use your uploaded app content to train our own models.

To create your screenshots, the content you provide (such as your app screenshots and descriptions) is processed by third-party AI models, including Google's Gemini models, via their APIs. This processing happens solely to analyze your app and generate your assets. We do not use your content to train Shotly models.

We share data with trusted providers only as needed to run the Service:

• Google Firebase — authentication, database, and file storage.
• Google Gemini API — AI analysis and image generation.
• Stripe — payment processing and subscription billing.
• Vercel — frontend hosting.
• Railway — backend and worker hosting.

Each provider processes data under its own terms and privacy policy.

We retain your account information and generated assets for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated content at any time (see "Your rights" below). We may retain limited records where required for legal, tax, or security purposes.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at gabriel.mayersb@gmail.com. We will respond within a reasonable time and in accordance with applicable law (including the GDPR and CCPA where relevant).

We use only essential cookies and similar technologies required to keep you signed in and to operate the Service securely. We do not use advertising or cross-site tracking cookies.

We use industry-standard measures to protect your data, including encrypted connections and access controls through our providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal data.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, by notifying you.

Questions about this policy or your data? Email us at gabriel.mayersb@gmail.com.