Shotbloom
Shotbloom
Shotbloom (the "App") lets you log your injections and medications, injection sites, weight, body measurements, how you feel, notes and progress photos on your own device. This policy explains how the App handles information.
The App does not need an account, and we do not run our own server. Your health records and photos are never sent to us.
By using the App, you agree to the handling described in this policy.
The following is stored in the App's private storage, which other apps cannot read.
The App only receives photos you take with the camera or choose on your device's own screens. It never reads your photo library on its own.
The App connects to the internet only in these cases.
| Purchases | Google Play processes payment, and RevenueCat checks which plan you have (section 6). No health records are sent. |
|---|---|
| Backup | Only on Pro and only if you turn it on, to your own Google Drive (section 5). |
Logging, charts, the calendar, reminders, the app lock, CSV export and the report for your doctor (PDF) all work offline. The fonts for the PDF are included in the App.
Backup is optional and part of Pro. When you turn it on, your data is stored in a private area of your own Google Drive that only this App can use (the app data folder). The App uses the permission limited to that area (drive.appdata) and cannot read any other files in your Drive. Signing in with Google is used only for this backup.
Backups are encrypted (AES-256-GCM) with a key made from a passphrase you choose, before they leave your device. The key is not stored in the backup; it stays in your device's secure storage. We cannot access your Drive and we do not know your passphrase.
The latest 5 backups are kept, and older ones are deleted automatically.
Handles downloads, updates and payment for Pro. Google handles payment details; we never receive them. In-app review requests also use Google Play.
RevenueCat, Inc. checks your purchase with Google Play so the App knows whether you have Pro. It receives the purchase details from Google Play and a random ID made by the App. As with most online services, its servers also see your IP address and basic device information, such as the device model and operating system version. It does not receive your name, email address or any health record. See RevenueCat's privacy policy.
Used with your own account, only if you turn on backup (section 5).
Android may collect diagnostic data depending on your device settings. We do not control or receive it.
| Notifications | To remind you of your schedule. By default, reminders do not show medication names (you can change this in Settings). |
|---|---|
| Exact alarms and restart | To show reminders at the time you choose and keep them scheduled after the device restarts. |
| Fingerprint or face unlock | Only if you turn on the app lock. The App only receives "unlocked" or "not unlocked" from the device; it never receives your fingerprint or face data. |
| Internet | Only for the cases in section 4. |
Taking and choosing photos uses your device's standard screens. The App does not ask for location or contacts permissions.
The App is intended for adults and does not collect personal information from anyone.
No system is perfectly secure. Please protect your device against loss and theft.
We do not run a server, so your records are not transferred through us. Google Drive backups are stored in your own Google account under Google's terms, and Google Play and RevenueCat may process purchase details outside your country.
You can see, correct, export and delete everything the App keeps, inside the App. Because we hold none of your personal data, there is nothing for us to disclose or delete on request.
We may update this policy. We will announce important changes through an app update.
For questions about this policy, please use the contact page or the support contact on the store listing.