Privacy & Security

The short version

• Serials and photos stay on your phone. Firearm and component serial numbers and every photo you take are stored on your device only. They are never uploaded, and never sent to the AI.
• Synced under a pseudonym. Cloud records are labelled with a random identifier, never your name or email, and your account details are held separately from your logbook.
• No ads, no trackers. No advertising SDKs, no analytics SDKs, no cross-site tracking. We do not sell your data or share your logbook for anyone else's use.
• Yours to take. Export your full database at any time, on any tier. Delete your account and synced records whenever you want.

What stays on your device, and what syncs

Shot Caddy is offline-first: the logbook works with no signal. Some things are deliberately kept off our servers entirely and are never uploaded:

• Firearm and component serial numbers
• Every photo you take, including captured target images

If you sign in and sync, the rest of your logbook is stored in your account so it appears on your other devices — firearms and components, ammunition and handloads, counts and purchase details, notes, sessions, maintenance, preferences and your saved Analysis conversations:

• Firearms, components, accessories and loadouts
• Ammunition, handload recipes, batches, lot numbers and on-hand counts
• Purchase details and notes
• Range sessions and maintenance records
• App preferences
• Analysis conversations, unless you switch saving off in Options → AI & Analysis

Synced records are labelled with a random identifier rather than your name or email, and your account details are kept separately from your logbook contents.

What the AI features send

The Analysis module and the firearm, load and product lookups send a redacted copy of your logbook through Lovable's AI Gateway to a third-party model so it can answer from your own records. We request a Google Gemini model; Lovable does not confirm which provider serves a given request, and inference takes place in the United States. Serial numbers, photos and identity fields are removed before anything is transmitted, and the request is made server-side rather than from your phone. Your free-text notes are not removed — they go with it, because they are much of what the analysis reads. The answers are estimates built from the data you entered, not published reference data. If you would rather nothing be transmitted, don't use the AI features; everything else works without them.

What we never do

• Sell or rent your personal data.
• Share your individual logbook contents with advertisers or data brokers.
• Ship advertising SDKs, analytics SDKs or cross-site tracking in the app.
• Build a personal profile of you based on your firearms or range activity.
• Upload a serial number or a photo.

Who we share with

Only the processors needed to run the service: our hosted database and sign-in provider, Stripe for payments on this site, Apple and Google for in-app purchases, Google Maps and Google Weather to fill in where and in what conditions you shot, and our AI provider. Each one is named, with what it receives and why, in the Privacy Policy. We never see or store your card details.

Security in transit and storage

Data in transit is encrypted with TLS. Synced account data is stored with our hosting provider under access controls limited to what running the service requires. No system is perfectly secure, but we will notify affected users without undue delay if a breach affects their personal data.

Your choices

• Offline mode: use the app without ever creating an account.
• Export: take your full database at any time, on any tier — including after you cancel.
• Delete: delete your account from inside the app, or email contact@shotcaddy.com and we will remove your synced data.

Contact

Questions about privacy or security, or a request about your data? Email contact@shotcaddy.com. We respond within 2 business days.