FitShot — Privacy Policy

Effective date: 2026-09-13 · This policy describes FitShot version 2.0.0 for iPhone and iPad.

Your photos never leave your phone.

FitShot has no server and no account. Nothing is collected. Nothing is transmitted. Turn on airplane mode and everything still works — that is the proof, and you can run it yourself.

What FitShot stores on your phone

• Your daily progress photos, taken with your camera and saved in FitShot's own storage — never in your photo library, unless you share one there yourself.
• The weight you enter each day, and the dates.
• Your display name, if you choose to set one.
• Your settings: the lock time, the apps you picked for LOCK, and whether App Lock is on.

All of it stays on the device it was made on. At every launch FitShot asks iOS to keep the photo folders and the journal unreadable while the phone is locked (iOS "complete" file protection) and marks them excluded from iCloud and computer backups. VAULT shows the live backup status. The consequence is deliberate: your journal is not carried to a new phone by a backup — use Export Data to keep a copy.

What leaves your phone

Nothing. FitShot has no analytics, no crash reporting, no advertising, no tracking, no account system and no third-party SDKs that phone home. FitShot makes no network requests. This is checked by the app's own test suite against the list of software it is built from, and the same check drives the "What leaves this phone" panel inside the app.

Permissions, and what each one is for

• Camera — to take today's photo. FitShot never reads your photo library.
• Face ID / Touch ID — for the optional App Lock. iOS performs the check; FitShot only learns whether it passed, and never sees biometric data.
• Screen Time (Family Controls) — for the optional LOCK feature. You choose apps in Apple's own picker. Apple hands FitShot opaque tokens, not names: FitShot never learns which apps you chose, only how many, and it never transmits anything about them. You can revoke this at any time in Settings › Screen Time.
• Location — never requested. Photos taken in FitShot carry no location data.

Sharing and exports

Nothing leaves FitShot unless you send it. Export Photos and Export Data hand a file to the iOS share sheet, and you choose where it goes. Exported photos carry the day number and weight drawn onto the image.

Deleting

Delete Everything, in VAULT, removes every photo, thumbnail, export copy, weight and your name from the phone, and reports what it removed. Your lock time, App Lock preference and picked-apps selection stay until you change them.

Deleting the app removes everything it stored, with one small exception: the yes-or-no flag for App Lock lives in the iOS keychain, is marked this-device-only, and can survive a reinstall. It holds nothing but that yes or no.

Changes

If this policy changes, the new version is posted here with a new effective date and the app version it describes.

Contact

Questions about this policy: dubblakshay@gmail.com