ShotPlotPrivacy Policy
The short version
ShotPlot keeps your medication and injection records on your phone. We don't have accounts, servers that receive your health data, analytics, advertising SDKs or trackers. The only way your data leaves your phone is when you export a backup, a CSV or a PDF report and choose where to send it.
What the app stores, and where
- What you enter: medications, schedules, doses you log, injection sites and reactions, weigh-ins and a weight goal, inventory and refill notes, and your settings (including the body shape you choose for the map).
- Where: in a database on your device only. The app does not transmit this information to Gux Digital or to anyone else.
- Reminders: scheduled as local notifications on your phone. Notification text can include medication names; you control what your lock screen shows through your phone's notification settings.
- App lock: if you turn on Face ID / fingerprint or a PIN, biometric checks are performed by your phone's operating system; the app never sees your biometric data. The PIN is stored hashed in the device's secure storage.
Exports you make
Backups (JSON), dose logs (CSV) and doctor-visit reports (PDF) are created on your device and handed to your phone's share sheet. Whatever app or service you pick (email, cloud storage, messaging) receives that file under its privacy terms. Exports contain your full records; treat them like medical documents.
Automatic backup to your own cloud (optional, ShotPlot Plus)
Settings → Backup & export → Back up to Google Drive automatically signs you in with Google (Google's own sign-in screen; ShotPlot receives an access token limited to its own hidden app folder in your Drive, plus your account name to show in Settings) and then, whenever your data changed and at least an hour has passed, writes the same JSON backup you can export by hand into that hidden folder — one file per day, the last 30 days kept. The folder is part of your Google Drive: it counts against your storage, Google's terms and encryption apply to it, only ShotPlot can read it, and you can remove it from Google's Manage apps settings or with Delete all in the app. Gux Digital has no access to it: there is no ShotPlot server, and the app never sends your data anywhere but your own Drive. Restoring copies a backup back onto a phone you are signed in on. Switch it off any time; Disconnect also signs the app out of Google on that phone. The iPhone version offers the same Google Drive backup (not iCloud: Apple's rules do not allow an app to store personal health information there, and one provider lets a backup made on Android restore on an iPhone and back). Your phone's own device backup treats ShotPlot differently by platform: on iPhone, iCloud Backup includes ShotPlot's records like any app's; on Android, the device backup carries only ShotPlot's settings, not its records — your medication and injection history leaves the phone only through the backups you make or switch on yourself.
Feedback and problem reports (optional)
Settings → About → Send feedback and Report a problem open your own email app with a draft addressed to us; nothing is sent until you tap send there. A problem report pre-fills a diagnostics block — app version and build, operating system and phone model, locale and time zone, whether Plus is active, how many medications, logs and weigh-ins the app holds (counts only, no names), and the app's short list of recent errors (up to twenty entries, kept on your phone for this purpose). You can read and edit all of it in the draft. The app has no crash-reporting or analytics service; the only diagnostic data that ever leaves the phone is what you email us, and we use it only to answer you and fix the problem.
Files you import (optional)
Settings → Weight → Import weigh-ins from a file reads a CSV or Excel file you choose — typically the export of another scale app — on your device and copies the dates and weights it finds into ShotPlot's own database. The file is read once, in the app, and is not uploaded, kept or sent anywhere.
Apple Health and Health Connect (optional)
If you turn on Import weight from Apple Health / Health Connect (a ShotPlot Plus feature), the app asks your phone for permission to read body-weight readings only — nothing else — and copies new readings into its own database on your device, next to the weigh-ins you type. It writes nothing to Apple Health or Health Connect unless you also turn on Write weigh-ins to Apple Health / Health Connect, in which case the weigh-ins you type into ShotPlot are written there as weight readings (edits and deletes follow; readings that came from Apple Health or Health Connect are never written back). Either way the readings go nowhere: no server, no third party, no Gux Digital. Switch the import off in the app or revoke the permission in Apple Health / Health Connect at any time; readings already imported stay in the app until you delete them. Because ShotPlot can then hold health data that came from another source, it may count as a "personal health record" under the US FTC's Health Breach Notification Rule; since the data never leaves your phone there is nothing for us to breach, but we would notify you as that rule requires if we ever learned otherwise.
Purchases (ShotPlot Plus)
ShotPlot Plus is an optional one-time purchase made through Apple's App Store or Google Play. Apple or Google handle the payment under their own terms and privacy policies; ShotPlot never sees your card or payment details. To know whether you own Plus, the app asks the store, on your phone, and remembers the answer in the phone's secure storage (not in your backup file). No purchase information is sent to Gux Digital or to anyone else, and we use no third-party purchases or subscription SDK. Refunds are handled by Apple or Google. What Apple and Google collect about purchases in their stores is described in their privacy policies, not ours.
What we don't do
- No account, sign-in or email collection inside the app.
- No analytics, crash-reporting, advertising, attribution or purchases SDKs.
- No sale, sharing or use of health data for advertising — ever.
- No access to contacts, location, photos or the microphone.
Information we may receive outside the app
If you email support or leave a store review, we see what you send (your email address and message) and use it only to reply. App stores share aggregate, anonymized install and crash statistics with developers under their own policies (Apple's App Store and Google Play privacy terms), which we can't link to you.
Children
ShotPlot is for adults managing their own medications. It isn't directed at children under 13 and we don't knowingly collect information from them.
Your choices
- Delete anything in the app, or delete the app to remove all its data from your phone.
- Turn notifications, biometrics or the PIN on or off in Settings.
- Export a backup any time; restore it on a new phone.
This website (shotplot.io)
shotplot.io is a static site: it sets no cookies, runs no scripts, uses no analytics and loads nothing from third parties — each page is one HTML document plus its images. It is served by Cloudflare, which receives the request your browser makes (address, page, browser type) in order to answer it and handles that under its own privacy policy; we keep no request logs of our own. Mail to hello@shotplot.io is forwarded to a mailbox we read, and what you send is used only to reply to you.
Changes
If the app ever adds optional cloud features, we'll update this policy first, show the change in the app, and keep on-device-only as the default.
Contact
Gux Digital · hello@shotplot.io