Privacy Policy
Last Updated: 2026-02-08
1. Introduction
ShotDay ("we", "our", "the App") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information.
2. Information We Collect
Information You Provide
- Account information (email, name) when you sign up
- Weight records
- Fasting records
- GLP-1 injection records (medication type, dosage, injection site, side effects)
- Protein intake records
- Goal settings (target weight, fasting schedule, protein goals)
Information Collected Automatically
- Device information (device model, OS version)
- App usage analytics (anonymized)
- Crash reports (anonymized)
Health Data (with your permission)
- Heart rate data from Apple Health (HealthKit) or Google Health Connect
- This data is accessed only with your explicit consent
- Used solely for Zone 2 exercise monitoring within the App
3. How We Store Your Data
| Data Type | Storage | Details |
|---|---|---|
| Health records | Local (device) | Your device only |
| Account info | Firebase Auth | Encrypted, Google Cloud |
| Cloud backup | Firebase Firestore | Premium users only, opt-in |
| Analytics | Firebase Analytics | Anonymized, no personal data |
Local-First Architecture: All health data is stored on your device by default. Cloud backup is optional and available only for Premium subscribers.
4. How We Use Your Information
We use your information to:
- Provide App functionality (tracking, reminders, reports)
- Send notifications you have enabled (injection reminders, fasting alerts)
- Generate weekly reports and insights
- Improve the App (anonymized analytics)
- Process subscription payments (via App Store/Play Store)
We do NOT:
- Sell your personal data to third parties
- Share your health data with advertisers
- Use your data for purposes other than described above
5. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Firebase Auth | Authentication | Email, auth tokens |
| Firebase Firestore | Cloud backup (Premium) | Encrypted health data |
| Firebase Analytics | App improvement | Anonymized usage data |
| Firebase Crashlytics | Crash reporting | Anonymized crash data |
| RevenueCat | Subscriptions | Purchase status, no health data |
| Google AdMob | Ads (free users) | Device ad ID, no health data |
| Apple HealthKit | Heart rate (iOS) | Read-only, stays on device |
| Health Connect | Heart rate (Android) | Read-only, stays on device |
6. Advertising
- Free users see ads served by Google AdMob
- AdMob may use your device's advertising ID for personalized ads
- Health data is NEVER shared with AdMob
- You can opt out of personalized ads in your device settings
- Premium subscribers see no ads
7. Data Retention
- Your data is retained as long as you use the App
- Upon account deletion, all data is permanently removed within 30 days
- Anonymized analytics data may be retained for App improvement
8. Your Rights
- Access: View all your data within the App
- Export: Export your data via Settings > Data Export
- Delete: Delete your account and all data via Settings > Account > Delete Account
- Modify: Edit or correct your records at any time
- Revoke: Revoke HealthKit/Health Connect permissions in device settings
9. Children's Privacy
ShotDay is not intended for use by children under 17. We do not knowingly collect personal information from children.
10. Data Security
- Data encrypted in transit (TLS/SSL)
- Firebase security rules for cloud data
- Local data protected by device security (passcode, biometrics)
- No plain-text storage of sensitive information
11. International Data Transfers
If you use cloud backup, your data may be transferred to Google Cloud servers outside your country. Google Cloud complies with applicable data protection regulations.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be notified via the App. Continued use after changes constitutes acceptance.
13. Contact Us
For privacy-related questions or data requests: pixellogic.app@gmail.com