ShotStrong Privacy Policy

Effective date: July 18, 2026

ShotStrong is built on one privacy principle: your health data is yours, and we never hold it. This policy explains exactly what the app touches, where it lives, and the one narrow thing that ever leaves your phone.

The short version

Your health records — protein, shots, weight, body composition, how you feel, strength tests — live on your device and, if you enable iCloud, in your own private iCloud database. ShotStrong operates no accounts and stores no health data on any server we control.
When you scan a plate, the photo alone is sent to our scanning service, analyzed, and immediately discarded. It is never stored, and it travels with no name — only a random device identifier.
We run no advertising, no trackers, and no third-party analytics on your health information. We never sell or share your data. Ever.

What the app stores, and where

Data	Where it lives	Who can see it
Protein entries, shot records, weight, body composition, check-ins, strength tests, reports	Your device; optionally your private iCloud (CloudKit)	Only you. Apple's CloudKit encrypts it under your Apple ID; ShotStrong has no server-side access to it.
Your protein number, schedule, phase	Same as above	Only you
Scan photos	Nowhere — processed in memory and discarded	Processed transiently (see below)
Anonymous device ID (random, e.g. "ss-…")	Your device + our scan gateway's rate-limit counters	Used only to authorize scans and enforce fair-use limits. Contains nothing about you.

Protein Lens: the one thing that leaves your phone

When you photograph a plate, the image is downscaled on your device and sent over an encrypted connection to our scan gateway, which forwards it to our vision provider (Google's Gemini API) to estimate protein. The gateway is stateless: the image is not written to disk, not logged, and not retained by us after the response is returned. We do not send your name, your health records, or anything else — only the image and the random device identifier. Per Google's API terms for paid services, prompts are not used to train their models.

If you never use the camera, nothing ever leaves your phone.

Apple Health

If you connect Apple Health, data flows both ways on your device only: weight and body composition come in; protein, water, and weight you record go out. Health data never touches ShotStrong servers. You can revoke access anytime in the Health app.

Subscriptions

Purchases are processed entirely by Apple. We receive subscription status (active / lapsed) tied to the anonymous device ID — never your Apple ID, name, or payment details.

What we never do

No selling or sharing of personal or health data — with anyone.
No advertising SDKs, no tracking, no fingerprinting, no data brokers.
No health data used for marketing, and none stored server-side.
No accounts, passwords, or email harvesting.

Deleting your data

Delete the app and its local data goes with it. Your iCloud copy is under your control: Settings → Apple ID → iCloud → Manage Storage → ShotStrong → Delete. Because we hold no server-side health data, there is nothing to request from us — you already have custody of everything.

Children

ShotStrong is intended for adults using prescription GLP-1 medication and is not directed at children under 13.

Changes

If this policy changes materially, the app will tell you plainly before the change applies. The current version always lives at this address.

Contact

Questions: freshvybz@gmail.com (DolphyTech).