Privacy Policy

Shotodit
Effective Date: March 21, 2026

1. Introduction

Shotodit is committed to protecting your privacy. This Privacy Policy explains what information is handled when you use the app and how it is managed in compliance with major global privacy laws, including:

• EU General Data Protection Regulation (GDPR)
• Australian Privacy Principles (APPs) under the Privacy Act
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
• California Consumer Privacy Act as amended (CCPA/CPRA)
• Brazil’s General Data Protection Law (LGPD)
• and similar regulations worldwide

2. Information We Collect

A. Data Processed Only on Your Device (Never Transmitted)

• Photos and videos you capture or import
• Edits, filters, LUTs, effects, and AI-generated enhancements

All of this content remains 100% local on your device and is under your sole control.

B. Permissions Requested and Their Purposes

• Camera — to take new photos or videos inside the app
• Photos / Media — to access and edit existing files from your gallery
• Storage — to save edited files to your device

These permissions are optional and can be revoked at any time via Android settings.

C. Data Handled by Third-Party Google Services

• Google Play Asset Delivery (PAD)
  On-demand download of creative assets (LUTs, effects, filters, etc.). Only minimal non-personal technical data is sent (e.g. device type, OS version, app version) to deliver the correct asset pack. No media content is transmitted.
• Firebase Crashlytics
  Sends crash stack traces, device metadata (model, OS version, CPU, memory info), and a random Installation UUID (for crash counting — contains no personal information). No photos, videos or identifiable content are included.
• Google Ads (AdMob)
  Collects device/advertising identifiers (e.g. Android Advertising ID), IP address (approximate location), app interaction data and diagnostic information for ad serving, performance measurement and fraud prevention.

We do not collect names, email addresses, precise locations, contacts or other directly identifiable personal data ourselves.

3. How We Use Information & Legal Bases

• On-device data → solely to provide camera, editing and AI features
• Crashlytics data → to identify and fix crashes / improve stability (legitimate interests / reasonable purposes)
• Ad-related data → to display ads and measure performance (consent for personalized ads where required; legitimate interests otherwise)

Processing is based on contract necessity (core features), consent (where applicable), or legitimate interests under GDPR, LGPD, APPs, PIPEDA and equivalent laws.

4. Sharing of Information

Your photos, videos and edits are never shared with us or any third party.

Limited technical data is shared only with:

• Google LLC (for Play Asset Delivery, Crashlytics, and AdMob)

See Google’s Privacy Policy: https://policies.google.com/privacy

We do not sell personal information (no “sale” under CCPA/CPRA or equivalent laws).

5. International Data Transfers

Any data sent to Google (US-based company) may be transferred outside your country, including to the United States. Google applies safeguards such as Standard Contractual Clauses for such transfers (GDPR Art. 46). For details see Google’s privacy documentation.

6. Data Storage, Security & Retention

• Local media and edits → stored only on your device; removed on uninstall or data clear
• Crash and advertising data → retained according to Google’s policies (encrypted in transit and at rest; limited retention periods)

Reasonable technical and organizational security measures are applied (GDPR Art. 32, APP 11, PIPEDA Principle 4.7).

7. Your Privacy Rights

Depending on your location, you may have rights such as:

• Access, rectification, erasure / deletion, restriction of processing
• Object to processing (including legitimate interests)
• Withdraw consent (where used)
• Data portability
• Opt-out of sale/sharing of personal information (CCPA/CPRA) or personalized advertising
• Lodge a complaint with your data protection authority (e.g., EU DPA, OAIC in Australia, OPC in Canada)

How to exercise rights:

• Revoke permissions, reset Advertising ID, clear app data, or uninstall via Android settings
• Manage personalized ads in your Google account or device settings
• Contact us (see section 10) for other requests — we will respond within legally required timeframes (e.g., 1 month under GDPR, 45 days under CCPA)

8. Children

Shotodit is a general-audience app and not directed at children. We do not knowingly collect data from children under applicable age thresholds. Parents and guardians should supervise use.

9. Changes to This Privacy Policy

We may update this policy from time to time. The updated version will be posted here with a new effective date. Your continued use of Shotodit after changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy questions, rights requests, or complaints, please use the contact email or address listed on our Google Play Store page.