ShotPlot
Privacy Policy
The short version
ShotPlot keeps your medication and injection records on your phone. We don't have accounts, servers that receive your health data, analytics, advertising SDKs or trackers, and we send your records to no AI service. Your data leaves your phone only when you export a backup, a CSV or a PDF report and choose where to send it, or when you turn on the optional automatic backup to your own Google Drive. Gux Digital cannot access that backup.
On this page
What the app stores, and where
- What you enter: medications, schedules, doses you log, injection sites and reactions, the dated notes you write, weigh-ins and a weight goal, your supply counts and refill notes, and your settings (including the body shape you choose for the map).
- Where: in a database on your device only. The app does not transmit this information to Gux Digital or to anyone else.
- Reminders: scheduled as local notifications on your phone. Notification text can include the medication's name, the dose, the suggested injection site and the instructions you typed for it (or, with Discreet reminders on, the app's name and at most a cadence word such as "Weekly dose due" — never a medicine, dose or site); you control what your lock screen shows through your phone's notification settings.
- Home-screen widgets (ShotPlot Plus, Android): if you add one, ShotPlot draws it on your phone — the time of your next dose and, unless the widget shows times only, the medicine and the injection site — and your phone's home-screen app shows it. Nothing is sent anywhere. With the app lock on, widgets show times only unless you turn names and sites on in Settings; with Discreet reminders on they always do. The widgets are marked to stay off the lock screen.
- App lock: if you turn on Face ID / fingerprint or a PIN, biometric checks are performed by your phone's operating system; the app never sees your biometric data. The PIN is stored hashed in the device's secure storage.
Exports you make
Backups (JSON), dose logs (CSV) and doctor-visit reports (PDF) are created on your device, and you choose where to save or send them. Whatever app or service you pick (email, cloud storage, messaging) receives that file under its privacy terms. Exports contain your full records; treat them like medical documents.
Automatic backup to your own cloud (optional)
Settings → Backup & export → Back up to Google Drive automatically signs you in with Google (Google's own sign-in screen; ShotPlot receives an access token limited to its own hidden app folder in your Drive, plus your account name to show in Settings) and then, whenever your data changed and at least an hour has passed, writes the same JSON backup you can export by hand into that hidden folder — one file per day for each phone. Without Plus, each phone's 2 newest copies are kept; with ShotPlot Plus, a copy for each of the last 30 days. Each file carries a few details as Drive file metadata beside its contents: when it was made, the app version and platform, how many medications, doses and weigh-ins it holds, the name of the phone that made it (as the phone calls itself, which may include a person's name), a random tag for that phone, and whether it was made with Plus. The folder is part of your Google Drive: it counts against your storage, Google's terms and encryption apply to it, no app but ShotPlot can read it (Google's Drive service holds it like any file of yours), and you can remove it from Google's Manage apps settings or with Delete all in the app. Gux Digital has no access to it: there is no ShotPlot server, and the app never sends your data anywhere but your own Drive. Restoring copies a backup back onto a phone you are signed in on. Switch it off any time; Disconnect also signs the app out of Google on that phone. The iPhone version will offer the same Google Drive backup once its Google sign-in is set up (not iCloud: Apple's rules do not allow an app to store personal health information there, and one provider lets a backup made on Android restore on an iPhone and back). Your phone's own device backup treats ShotPlot differently by platform: on iPhone, iCloud Backup includes ShotPlot's records like any app's; on Android, ShotPlot opts out of the device backup and phone-to-phone transfer entirely, so neither its records nor its settings go to Google that way — your medication and injection history leaves the phone only through the backups you make or switch on yourself.
Feedback and problem reports (optional)
Settings → About → Send feedback and Report a problem open your own email app with a draft addressed to us; nothing is sent until you tap send there. A problem report pre-fills a diagnostics block — app version and build, operating system and phone model, locale and time zone, whether Plus is active, how many medications, logs and weigh-ins the app holds (counts only, no names), and the app's short list of recent errors (the last few entries of a log of at most twenty, kept on your phone for this purpose). You can read and edit all of it in the draft. The app has no crash-reporting or analytics service; the only diagnostic data that ever leaves the phone is what you email us, and we use it only to answer you and fix the problem.
Files you import (optional)
Settings → Weight → Import weigh-ins from a file reads a CSV or Excel file you choose — typically the export of another scale app — on your device and copies the dates and weights it finds into ShotPlot's own database. The file is read once, in the app, and is not uploaded, kept or sent anywhere.
Apple Health and Health Connect (optional)
If you turn on Import weight from Apple Health / Health Connect (a ShotPlot Plus feature), the app asks your phone for permission to read body-weight readings only — nothing else — and copies new readings into its own database on your device, next to the weigh-ins you type. It writes nothing to Apple Health or Health Connect unless you also turn on Write weigh-ins to Apple Health / Health Connect, in which case the weigh-ins you type into ShotPlot are written there as weight readings (edits and deletes follow; readings that came from Apple Health or Health Connect are never written back). Either way the readings go nowhere: no server, no third party, no Gux Digital. Switch the import off in the app or revoke the permission in Apple Health / Health Connect at any time; readings already imported stay in the app until you delete them. Because ShotPlot can then hold health data that came from another source, it may count as a "personal health record" under the US FTC's Health Breach Notification Rule; since the data never leaves your phone there is nothing for us to breach, but we would notify you as that rule requires if we ever learned otherwise.
Purchases (ShotPlot Plus)
ShotPlot Plus is an optional one-time purchase made through Apple's App Store or Google Play. Apple or Google handle the payment under their own terms and privacy policies; ShotPlot never sees your card or payment details. To know whether you own Plus, the app asks the store, on your phone, and remembers the answer in the phone's secure storage (not in your backup file). No purchase information is sent to Gux Digital or to anyone else, and we use no third-party purchases or subscription SDK. Refunds are handled by Apple or Google. What Apple and Google collect about purchases in their stores is described in their privacy policies, not ours.
What we don't do
- No ShotPlot account or sign-in, and no email collection inside the app. (The optional Google Drive backup uses Google's own sign-in; the app then keeps the account's address on your phone so Settings can show which account the backup goes to.)
- No analytics, crash-reporting, advertising, attribution or purchases SDKs.
- No sale, sharing or use of health data for advertising — ever.
- No access to contacts, location, photos or the microphone.
Information we may receive outside the app
If you email support or leave a store review, we see what you send (your email address and message) and use it only to reply. App stores share aggregate, anonymized install and crash statistics with developers under their own policies (Apple's App Store and Google Play privacy terms), which we can't link to you.
Children
ShotPlot is for adults managing their own medications. It isn't directed at children under 13 and we don't knowingly collect information from them.
Your choices
- Delete anything in the app, or delete the app to remove all its data from your phone.
- Turn notifications, biometrics or the PIN on or off in Settings.
- Export a backup any time; restore it on a new phone.
This website (shotplot.io)
shotplot.io is a static site: it sets no cookies, runs no scripts, uses no analytics and loads nothing from third parties — each page is one HTML document plus its images. It is served by Cloudflare, which receives the request your browser makes (address, page, browser type) in order to answer it and handles that under its own privacy policy; we keep no request logs of our own. Mail to hello@shotplot.io is forwarded to a mailbox we read, and what you send is used only to reply to you.
Changes
If the app changes how it handles your data, we'll update this policy first, show the change in the app, and keep on-device-only as the default.
Contact
Gux Digital · hello@shotplot.io