Privacy Policy
Shotori is a photo composition practice app. We keep almost everything on your device and collect only what we need to run the app. This policy covers the Shotori iPhone app and the Shotori web version.
1What we collect, why, and for how long
There's no sign-up or login, and we never ask for your name, email address or phone number inside the app. Here is everything Shotori processes:
| Anonymous usage statistics (optional) | What the name of an event (for example, "photo taken"), app version, platform, shooting mode, subject type, short values such as a score range, grade or lesson number, and a random number that is created fresh each time you open the app Why to count which features get used so we can improve the app Basis your choice. We ask on first launch and send nothing unless you tap Send Kept 14 days, then deleted automatically No advertising ID or device ID is included. When a request reaches our server, your IP address may be recorded in the server's access log for 14 days. We don't link it to the statistics or use it to identify you. |
|---|---|
| Purchase verification (iPhone app, all users) | What a random app user ID, your purchase history (product, purchase and expiry dates, App Store country), app version, and the IP address, device model, iOS version and language/region settings sent with each request Why to check whether you have Shotori Pass or the lifetime unlock and to restore purchases. The app checks this every time it opens, even if you've never bought anything, so renewals, refunds and purchases made on another device are applied Who our service provider RevenueCat, Inc. (United States) Kept while you use the app, or until you ask us to delete it Apple processes the payment itself. We never receive your card number or other payment details. |
| Advertising (iPhone app, free version) | What the free iPhone app shows ads from Google AdMob: a banner at the bottom of the photo report, the Fix screen and the Best-of and Battle results, and sometimes a full-screen ad when you close a report (at most once every two photo checks). There are no ads on the home screen, in Live Coach or the camera, in practice, or in the web version. Google's Mobile Ads SDK collects data directly from your device to serve and measure these ads: the app-scoped device identifier (IDFV), your IP address (used to estimate your general location, such as your country or city), the ads you see and tap, app launches and interactions with ads, and performance and crash diagnostics Why to show ads, limit how often you see them, measure them and prevent ad fraud, so the app can stay free Non-personalized only we ask Google for non-personalized ads, chosen from what's in the app and your general location, never from a profile of you. We don't use the advertising identifier (IDFA), so the app never shows the "Allow tracking" prompt. Ads are limited to content suitable for all ages (rated G) Who Google LLC (United States), under Google's Privacy Policy (see also how Google uses information from apps that use its services) Kept by Google under its own retention policy. We don't receive or store this data; we only see totals such as how many ads were shown Turn it off the weekly Ad-free plan or Shotori Pass removes all ads, and the app then stops requesting them. The web version shows no ads. |
| Web server logs (web version only) | What IP address, time, requested file and browser type Why to deliver the pages and keep the service secure Kept 14 days, then deleted automatically |
| Messages you send us | What your email address and what you write Why to answer you and handle privacy requests Kept 1 year after we close your request, then deleted |
Your photo scores are calculated on your device by fixed rules. They're practice feedback only and are never used to evaluate you or make decisions about you.
2Your camera, sensors and photos stay on your device
- Camera: we ask for access only when you tap Turn on camera or open Live Coach. In practice mode the camera feed (including ARKit plane detection) is used on your device to find the floor or table and match the lighting. In Live Coach it is analyzed on your device to coach your framing, and when you press the shutter the photo is kept in memory to score it. The feed is never recorded or uploaded, and a photo is saved only if you choose to save it. Try it without a camera doesn't use the camera at all.
- Motion sensors: used only to aim the scene on screen as you move your phone. Nothing is stored or sent.
- On-device photo analysis: when you score a photo or use Live Coach, Shotori looks at the picture with machine-learning models that run entirely on your device (people, pets and objects, body pose, face direction and expression, the horizon and other lines). The photo you pick, the camera feed and everything measured from them are never uploaded, never used to identify anyone and never used to train models. The one exception is the anonymous usage statistics described above, and only if you turned them on: they count the kind of photo (for example, person or food) and a score range (for example, 80–89), never the photo or the measurements. Nothing is kept once you leave the result, except what you choose to save to the album or your photo library and a few numbers per check (your score for each rule, no photo) for Your photo DNA. Picking a photo uses the system photo picker, which gives the app only the photo you choose; we don't read its location data. On the web, the models are downloaded once from our server like any other file of the page.
- Album and progress: your photos, scores, missions and course progress are saved inside the app only. Deleting the app deletes them too.
- Save to Photos and sharing: happen only when you tap them. Saving uses add-only access to your photo library, and sharing goes through the iPhone share sheet. Neither passes through our servers.
- Reminders: we ask once, after a couple of photo checks, whether you want a daily reminder. Reminders are scheduled on your device and never contain ads.
- Challenge links: a challenge or test link holds the scene, the score and the nickname you choose. It never contains your photo. Anyone you send it to can see those details, and when they open it in a browser, the link reaches our web server like any other page request.
3Deleting your data
- In the app: go to About › Erase data. This immediately erases your album, your scored photos, missions and course progress, paywall history and your statistics choice, and it can't be undone. Only your Shotori Pass status (active or not, expiry date) remains, because the app re-checks it with the App Store every time it opens. Your purchases stay with your Apple Account, so you can get them back with Restore purchases.
- One photo at a time: tap a photo under Your photos (or See all) and tap Delete. It's removed from Shotori everywhere, including the album and its numbers in Your photo DNA. Copies you saved to your Photos app or shared stay where they are.
- Delete the app to erase everything stored on your device.
- On our servers: usage statistics and logs are stored in daily files, and files older than 14 days are permanently deleted. To delete purchase-verification records held by RevenueCat, email us and we'll have them deleted. Support emails are deleted when their retention period ends.
- Ad data: Google holds the data its ads SDK collects, and we can't access or delete it. You can reset the identifier the SDK uses (IDFV) by deleting Shotori and any other apps from us on the device, and you can make requests to Google through Google's Privacy Policy.
4Who we share data with
We don't sell your personal information, and we don't share it for cross-context behavioral advertising: the ads in the free app are non-personalized, and we don't use any tracking or third-party analytics SDKs. The free iPhone app includes Google's Mobile Ads SDK (see the table below). We use these companies:
| RevenueCat, Inc. | Role verifies App Store purchases, subscription status and restores Location United States Data the purchase-verification data described in section 1 When each time the app opens, and when you buy or restore, over an encrypted connection (HTTPS) RevenueCat's privacy policy: revenuecat.com/privacy |
|---|---|
| Google LLC (AdMob) | Role serves and measures the ads in the free iPhone app (non-personalized ads only) Location United States Data the advertising data described in section 1 (IDFV, IP address and the general location derived from it, ad views and taps, app interactions, performance and crash diagnostics), collected by Google's SDK directly from your device When while a report, the Fix screen or a Best-of or Battle result is on screen, and when a full-screen ad is loaded or shown. Never with Shotori Pass or the Ad-free plan, and never on the web Google may also use this data for its own purposes, such as preventing fraud and improving its services, as described in Google's Privacy Policy |
| Server hosting | Provider The Constant Company, LLC (Vultr, a US company). It only rents us server space and doesn't access or process our records Location Tokyo, Japan Data usage statistics (if you opted in) and web server logs Kept 14 days, then deleted automatically |
Apple handles payments under its own privacy policy. We may also disclose information if the law requires it, for example in response to a valid court order. If Shotori is ever transferred to a new owner, this policy will continue to apply to your information.
5Your privacy rights (including California)
Wherever you live, you can ask us what we hold about you and ask us to correct or delete it. You can also withdraw your consent to usage statistics at any time in About › Anonymous usage stats. The change takes effect right away.
If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you these rights. Residents of other US states with privacy laws, such as Virginia, Colorado, Connecticut, Utah and Texas, have similar rights.
- Know and access: the categories and specific pieces of personal information we've collected, where they came from, why, and who we disclosed them to.
- Delete and correct your personal information.
- Opt out of sale or sharing: we don't sell or share personal information, so there's nothing to opt out of. We also treat a Global Privacy Control signal as a valid opt-out request.
- Limit use of sensitive personal information: we don't collect any.
- No discrimination: we won't treat you differently for using any of these rights. Turning statistics off never changes what the app can do.
| Categories collected in the last 12 months | Identifiers: a random app user ID, IP address and, in the free app, the app-scoped device identifier (IDFV) read by Google's ads SDK Commercial information: purchase and subscription history Internet or other electronic network activity: anonymous in-app usage events (only if you opt in); ad views, taps and app interactions (free app, through Google's ads SDK) Geolocation data: general location estimated from your IP address (country or city level, never precise location), used for ads Device information: device model, iOS version, language and region settings, performance and crash diagnostics |
|---|---|
| Sources | Your device, the App Store (through RevenueCat) and Google's ads SDK |
| Business purposes | Providing the app and its purchases, showing and measuring non-personalized ads in the free app, security and fraud prevention, and improving the app |
| Disclosed to | The companies listed in section 4. We have not sold personal information or shared it for cross-context behavioral advertising in the last 12 months. |
How to make a request: email us at the address in section 11. Because Shotori has no accounts, we may ask for a few details to find matching records, such as the date and product of your purchase. You can use an authorized agent if you give them signed permission. We'll confirm your request within 10 business days and respond within 45 days. If we deny your request, you can appeal by replying to our answer.
6Children's privacy
Shotori is a general-audience app. It's not directed to children under 13, and we don't knowingly collect personal information from children under 13. Ads in the free app are non-personalized and limited to content rated for all ages (G). The app has no accounts, chat, messaging or public profiles. If you're a parent or guardian and think your child sent us personal information, for example in an email, contact us and we'll delete it.
7Cookies and tracking
The app doesn't use cookies, the advertising identifier (IDFA), tracking pixels or device fingerprinting, and it doesn't link your data with other companies' apps or websites for advertising, so it never shows the "Allow tracking" prompt. The only things sent automatically are the usage statistics (if you opted in), the purchase check each time the app opens and, in the free app, the ad requests Google's ads SDK makes while an ad is on screen or being loaded (non-personalized; see section 1). Because we don't track you across sites, we treat browser "Do Not Track" and Global Privacy Control signals as already respected.
8How we keep data safe
- All connections are encrypted with HTTPS. The app's code is bundled inside the app, and it never downloads code from a server to run.
- Only the operator can access the server and its logs. Payment-related keys are stored separately, never in the app or its source code.
- Records are deleted automatically when their retention period ends.
- We avoid collecting data in the first place: no accounts, no names, no photo uploads, no advertising ID (IDFA), and ads are never personalized.
9Where data is stored
Our server is in Japan, and RevenueCat and Google are in the United States. If you use Shotori from elsewhere, your information is transferred to and stored in these countries, protected as this policy describes.
10Changes to this policy
If we change this policy, we'll post the new version here and tell you in the app at least 7 days before it takes effect. If we ever plan to collect more data or use it in a new way, we'll tell you 30 days in advance and ask for your consent where required.
Effective date: October 13, 2026
11Who we are and how to reach us
Shotori is operated by Dalgeyre Bae ("we", "us").
Privacy questions and requests: Vegaspunter91@icloud.com
We reply within 10 business days.