Privacy Policy

ShotBox is a local-first screenshot organizer. It is designed so that your screenshots and the data extracted from them stay on your device by default. This policy explains what the app does with information and the few optional cases where data may leave your device — always with your action or consent.

1. Who we are

This app is provided by coddykit (“coddykit”, “we”, “us”). For any privacy question, contact coddy@coddykit.com.

2. What ShotBox does

ShotBox helps you organize your screenshots, extract their text on your device, search them, group them into collections, and turn details into actions (for example: copy text, open a link, add a calendar event).

3. Local-first processing

Scanning, text recognition (OCR), classification, search and collections all run on your device. There is no account and no login.

4. Photo library access

ShotBox requests access to your photo library only after you take an action (for example, tapping “Scan my screenshots”). Access is used solely to find screenshots on your device. ShotBox does not modify or delete your photos. On Android 13+, ShotBox requests the photo (image) scope only.

5. Screenshot detection

ShotBox examines your image assets to identify which ones are screenshots, using on-device heuristics (dimensions, filename, album/bucket and system metadata). It is designed to ignore regular photos and organize screenshots only.

6. On-device OCR

Text recognition runs on your device (Apple Vision / Android ML Kit, or an on-device fallback). Your screenshot images are not uploaded to perform OCR.

7. Local data storage

ShotBox stores the following locally on your device: extracted text, metadata (dimensions, timestamps, status), categories, tags, detected details, and suggested actions. Your original photos are not copied or moved by ShotBox.

8. Optional Smart AI Analysis

Smart AI Analysis is optional and off by default. It is used only if you turn it on and give explicit consent.

• When enabled, ShotBox may send sanitized extracted text plus safe metadata (counts, a category hint, dimensions) over HTTPS to the ShotBox AI service to improve titles, summaries, tags and search.
• Screenshot images, local image URIs and raw filenames are never sent.
• Sensitive spans (emails, phone numbers, URLs, prices, addresses, IBAN/card-like numbers, order/booking references, long IDs) are masked before sending. A final on-device privacy check blocks any request that would contain a screenshot, file path, filename, raw extracted text, or a raw email/phone/order value.
• AI output may be inaccurate; please verify important details. On-device analysis remains available without AI, and you can turn Smart AI off anytime.
• The sanitized text is used only to generate the improved metadata and is not used to build a profile of you.

9. Analytics

ShotBox may collect optional, anonymous usage analytics that you can turn off in Settings. Analytics events contain only event names, counts, durations, booleans and stable enums. Analytics do not include screenshot content, OCR text, filenames, URIs, URLs, emails, phone numbers, addresses, prices, order numbers, or booking references. Provider: Firebase Analytics.

10. Crash reporting

ShotBox may collect optional, anonymous crash diagnostics that you can turn off in Settings. Crash reports are not intended to include any user content; attached context is sanitized to exclude content. Provider: Firebase Crashlytics.

11. Purchases and subscriptions

ShotBox Premium is sold as an in-app subscription (monthly or yearly) or a one-time lifetime purchase, processed by the Apple App Store or Google Play and managed through RevenueCat (our subscription infrastructure provider).

• Payment is handled entirely by the App Store / Google Play — ShotBox never sees or stores your card or payment details.
• RevenueCat processes purchase metadata (an anonymous app user id, product id, purchase/renewal/expiration, platform, and store country) to determine whether your premium entitlement is active. See RevenueCat’s privacy policy for details.
• We do not link purchases to your screenshots or any personal content, and no screenshots, OCR text, filenames or URIs are ever sent to RevenueCat.
• You can restore purchases and manage or cancel your subscription anytime in your App Store or Google Play account.

12. Export and backup

Export and backup happen only after you explicitly act (tapping Export / Create Backup). Files are written to the app’s local storage and handed to your operating system’s share sheet — ShotBox uploads nothing. A local backup may include extracted text and metadata; it does not include screenshot image files.

13. Data deletion

You can delete everything ShotBox has indexed at any time from Settings → Local Data → Delete indexed data. This removes the screenshot index, analyses, collection memberships and scan history from the device. Your actual photos are not affected. Uninstalling the app removes its local data per your operating system’s behavior.

14. Data sharing

We do not sell your data and do not share personal data for advertising. The only outbound data flows are: (a) optional, anonymous diagnostics to the analytics/crash provider when you enable them; (b) optional Smart AI requests containing sanitized text when you enable and consent; and (c) purchase validation with the App Store / Google Play and RevenueCat when you buy or restore premium.

15. Children’s privacy

ShotBox is a general-productivity app and is not directed to children. It does not knowingly collect personal information from children.

16. International users

The app processes data on your device. If you enable Smart AI, sanitized text may be transmitted to our backend service, which may be located in another country. By enabling Smart AI you consent to that transfer for the purpose of generating improved metadata.

17. Changes to this policy

We may update this policy. Material changes will be reflected with a new “Last updated” date and, where appropriate, an in-app notice.

18. Contact

Questions about this policy: coddy@coddykit.com.