Privacy & Security

The short version

• Serials and photos stay on your phone. Firearm and component serial numbers and every photo you take are stored on your device only. They are never uploaded, and never sent to the AI.
• Anonymised before it syncs. Cloud records are labelled with a random identifier, never your name or email, and your account details are held separately from your logbook. It is anonymised, not anonymous.
• No ads, no trackers. No advertising SDKs, no analytics SDKs, no cross-site tracking. We do not sell your data or share your logbook for anyone else's use.
• Yours to take. Export your full database at any time, on any tier. Delete your account and synced records whenever you want.

What stays on your device, and what syncs

Shot Caddy is offline-first: the logbook works with no signal. Some things are deliberately kept off our servers entirely and are never uploaded:

• Firearm and component serial numbers
• Every photo you take, including captured target images

When signed in with signal, the rest of your logbook syncs to your account so it is current on all your devices — firearms and components, ammunition and handloads, counts and purchase details, notes, sessions, maintenance, preferences and your saved Analysis conversations:

• Firearms, components, accessories and loadouts
• Ammunition, handload recipes, batches, batch numbers and on-hand counts
• Purchase details and notes
• Range sessions and maintenance records
• App preferences
• Analysis conversations, unless you switch saving off in Options → AI & Analysis

Synced records are labelled with a random identifier rather than your name or email, and your account details are kept separately from your logbook contents.

What “anonymised” means here

Your synced records are labelled with a random identifier instead of your name or email, and your account details are kept in a separate place from your logbook contents. That is what we mean by anonymised.

It is not anonymous. You sign in with an email address, and the link between your account and that random identifier is held in the same database, which is how your records reach your other devices. We do not claim more than that.

Serial numbers and photos are a separate case: they never leave your phone, so there is nothing of theirs to anonymise.

What the AI features send

The Analysis module sends a redacted copy of your logbook through Lovable's AI Gateway to a third-party model so it can answer from your own records; the firearm, load and product lookups send only the product or firearm text you typed. No name, email or account identifier is attached to a request. We request a Google Gemini model; Lovable does not confirm which provider serves a given request, and inference takes place in the United States. Serial numbers, photos and identity fields are removed before anything is transmitted, and the request is made server-side rather than from your phone. Your free-text notes are not removed — they go with it, because they are much of what the analysis reads. The answers are estimates built from the data you entered, not published reference data. If you would rather nothing be transmitted, don't use the AI features; everything else works without them.

What we never do

• Sell or rent your personal data.
• Share your individual logbook contents with advertisers or data brokers.
• Ship advertising SDKs, analytics SDKs or cross-site tracking in the app.
• Build a personal profile of you based on your firearms or range activity.
• Upload a serial number or a photo.

Who we share with

Only the processors needed to run the service: our hosted database and sign-in provider, Stripe for payments on this site, Apple and Google for purchases made in the iPhone and Android apps with RevenueCat checking them, Google Maps and Google Weather to fill in where and in what conditions you shot, and our AI provider. Each one is named, with what it receives and why, in the Privacy Policy. We never see or store your card details.

Security in transit and storage

Data in transit is encrypted with TLS. Synced account data is stored with our hosting provider under access controls limited to what running the service requires. No system is perfectly secure, but we will notify affected users without undue delay if a breach affects their personal data.

Your choices

• Export: take your full database at any time, on any tier — including after you cancel.
• Delete: delete your account from inside the app, or email contact@shotcaddy.com and we will remove your synced data.

Contact

Questions about privacy or security, or a request about your data? Email contact@shotcaddy.com. We respond within 2 business days.