1. About ShotFrame
ShotFrame is a mobile application for photographers and cinematographers. It lets users search for visual references, organize them into inspiration boards, build structured shot lists with per-shot camera settings, and execute those lists on-set using an offline-capable checklist.
This Privacy Policy explains what information we collect, why we collect it, and how we protect it. By using ShotFrame you agree to the practices described here.
2. Information We Collect
| Category | What exactly | Collected? |
|---|---|---|
| Account | Email address (used to create and authenticate your account) | Yes |
| User content | Boards, board notes, shot lists, shot settings (lens, ISO, shutter, etc.), folders, shoot sessions, and shoot notes you create in the app | Yes |
| Search queries | Queries sent to the Unsplash image search — forwarded to Unsplash via our server; not stored on our servers. Your last 5 searches are cached locally on your device for convenience and are cleared on account deletion. | In transit / local cache |
| Device / analytics | Device identifiers, crash logs, usage analytics | No |
| Location | GPS or device location (location text in shot settings is entered manually by you) | No |
| Camera / microphone | Camera, microphone, or photo library access | No |
| Contacts / calendar | Address book, calendar, or any other device data | No |
| Payment | Credit card or billing information (ShotFrame has no paid features) | No |
3. How We Use Your Information
- Account management — your email is used to create your account, send password-reset emails, and handle email-change confirmations.
- Storing your content — boards, shot lists, and shoot sessions are stored in your account so you can access them across devices.
- Offline access — shot list data is cached locally on your device so you can use Shoot Mode without an internet connection.
- Image search — search queries are forwarded to the Unsplash API to retrieve results. We do not log or retain your search queries.
- Authentication emails — we send transactional emails (password reset, email-change confirmation) via Brevo (Sendinblue) on behalf of ShotFrame. No marketing emails are ever sent.
4. Third-Party Services
ShotFrame uses a small number of third-party services to operate:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Backend database & authentication | Email address, user-created content |
| Unsplash | Photo search results | Search query (no account data) |
| Brevo (Sendinblue) | Transactional email delivery | Email address (for delivery only) |
We do not share your information with any other third parties. We do not use advertising networks, sell data, or allow third-party tracking SDKs in ShotFrame.
5. Data Storage & Security
Your account data and content are stored on Supabase infrastructure hosted in the United States. All data is protected with Row Level Security (RLS) policies — meaning each user can only access their own data, enforced at the database level.
Your password is never stored in plain text. Authentication is handled by Supabase Auth using industry-standard hashing. All communication between the app and our servers is encrypted using HTTPS/TLS.
A local copy of your shot list data is stored on your device (SQLite) to enable offline Shoot Mode. This local database is deleted when you delete your account from within the app.
6. Data Retention
We retain your account information and user-created content for as long as your account is active. If you delete your account (see Section 7), all of your data — boards, shot lists, items, and sessions — is permanently deleted from our servers within a reasonable time frame.
We do not retain backups of deleted accounts beyond our standard database backup window (typically 7 days). After that window, deletion is irreversible.
7. Your Rights & Account Deletion
You have the right to:
- Access — view all content you have created in the app at any time.
- Correct — update your email address or password in Settings → Account Details.
- Delete — permanently delete your account and all associated data. Go to Settings → Danger Zone → Delete Account inside the app. This action is immediate and irreversible.
- Export — contact us at the address below to request a copy of your data.
If you are located in the European Economic Area (EEA), you may also have rights under the GDPR including the right to object to processing and the right to data portability. Contact us to exercise any of these rights.
8. Children's Privacy
ShotFrame is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will promptly delete that account and its data.
If you believe a child under 13 has created an account, please contact us immediately using the details in Section 10.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are significant, we will notify you by email (to the address on your account) at least 7 days before the changes take effect.
Continued use of ShotFrame after changes take effect constitutes your acceptance of the updated policy.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:
ShotFrame
GitHub: github.com/nhatminh23-03/ShotFrame
Open an issue or reach out via GitHub for privacy-related requests.