Privacy Policy · ShotsKit

This Privacy Policy explains how ShotsKit ("the App", "we", "us", "our") collects, uses, and protects your information. The App is developed by Pawel Dembski, trading as DeepSkyApps ("the developer"), and this policy applies to your use of the ShotsKit app for macOS.

If you have any questions, contact us at [email protected].

Summary: ShotsKit is a Mac app for composing App Store screenshots. Your projects, screenshots, and settings stay on your Mac. Nothing is uploaded unless you explicitly use an optional online feature described below. There is no ShotsKit account to create. We do not track you, we do not use advertising identifiers, and we do not sell your personal data.

1. Who is responsible for your data

The data controller for the App is:

Pawel Dembski (DeepSkyApps)
Contact: [email protected]

2. Information we collect

We only collect what the App needs to work. The categories below describe what may be collected depending on the features you use.

2.1 No account is required

ShotsKit has no sign-up, no sign-in, and no user profile. We do not collect your name, email address, or any other contact detail unless you choose to email us for support.

2.2 Content you create

Projects, imported screenshots, captions, templates, backgrounds, and export settings are saved as local .shotskit documents and supporting files on your Mac, in locations you choose. They are not uploaded to our servers, not backed up to our cloud, and not synchronized between your Macs.
The App runs in Apple's App Sandbox and reaches only the files and folders you select. macOS security-scoped bookmarks are stored so the App can reopen those locations on relaunch.
App preferences — such as the active AI provider, device-frame style, export defaults, recent documents, and your telemetry choice — are stored locally in macOS UserDefaults.

2.3 App Store Connect credentials (optional)

If you connect the App to App Store Connect, the issuer ID, key ID, and private key (.p8) you provide are stored in the macOS Keychain. They are never written into project files, never sent to us, and are used only to sign requests to Apple's App Store Connect API at api.appstoreconnect.apple.com. Screenshots you upload with this feature go directly from your Mac to your own App Store Connect account. We neither receive nor retain that content. You can remove the credentials from the App at any time.

2.4 AI features (optional, you initiate them)

Caption and translation features are only ever run when you ask for them, and you choose which provider handles them:

Apple Intelligence (on-device). Processing happens locally on your Mac using Apple's Foundation Models. No content leaves your device and no network request is made.
ShotsKit Cloud AI. An optional provider included with Pro, offered in versions of the App where it is enabled. When you select it and run a caption or translation, the rendered screenshot image (for captions) or your caption text (for translation) is sent to ShotsKit Cloud, a DeepSkyApps-operated relay, together with your pseudonymous RevenueCat app user identifier, which is used only to confirm your Pro entitlement and apply fair-use limits. ShotsKit Cloud passes the content to Anthropic's API to generate the result and does not store it. Anthropic states that inputs submitted through its API are not used to train its models by default.

Please avoid entering sensitive personal information you would not want processed by an external AI service.

2.5 Purchases

ShotsKit is free to compose with; exporting and delivery are unlocked by ShotsKit Pro, a one-time purchase with no subscription. Purchases are processed by Apple through the App Store. We use RevenueCat to manage entitlement status. RevenueCat receives a pseudonymous app user identifier and purchase/receipt information so we can unlock Pro features and restore purchases across your Macs. We do not receive or store your payment card details; those are handled entirely by Apple.

2.6 Anonymous usage data (opt-in, off by default)

If you turn it on in Settings, the App sends anonymous product-usage signals through TelemetryDeck — for example, which feature was used and the app version — to help us decide what to improve. Telemetry is disabled by default; a new install sends nothing until you explicitly enable it. No personal information, project content, screenshot images, caption text, or credentials are included, and the signals are not linked to your identity. You can turn it off again at any time in Settings.

2.7 Crash and performance data

We do not operate our own crash-reporting service. If you have opted in to share analytics and crash data with developers in macOS System Settings, Apple may provide us with aggregated, anonymized crash and performance reports through App Store Connect. This is controlled entirely by your macOS setting.

2.8 Tracking

ShotsKit does not use the advertising identifier (IDFA), does not track you across other companies' apps or websites, does not present an App Tracking Transparency prompt, and does not sell personal data.

3. How we use your information

We use the information above to:

Provide, maintain, and improve the App's features;
Generate the captions and translations you request;
Upload screenshots to your own App Store Connect account when you ask us to;
Process and manage purchases and restore entitlements;
Understand, in aggregate and only with your consent, which features are used;
Respond to your support requests;
Comply with legal obligations.

4. Legal bases for processing (EEA/UK users)

Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:

Performance of a contract: to provide the App, its Pro features, and purchase restoration.
Consent: for optional features such as anonymous usage data and the cloud AI provider. You can withdraw consent at any time.
Legitimate interests: to keep the App secure, prevent abuse of fair-use limits, and fix defects, balanced against your rights.
Legal obligation: where we must process data to comply with the law.

5. Third-party providers (processors)

We share data with the following service providers only to the extent needed to run the App. Each processes data under its own privacy policy:

Apple Inc.: App Store distribution, payments, and the App Store Connect API. Privacy policy
RevenueCat, Inc.: purchase and entitlement management. Privacy policy
TelemetryDeck: anonymous usage signals, only if you opt in. Privacy policy
Anthropic PBC: processing cloud AI caption and translation requests, only when you use ShotsKit Cloud AI. Privacy policy

We do not sell your personal information, and we do not share it with third parties for their own advertising.

6. International data transfers

Some of our providers are located outside your country, including in the United States. Where personal data is transferred internationally, we rely on the safeguards offered by those providers (such as Standard Contractual Clauses and equivalent mechanisms) to protect your information.

7. Data retention

Projects, screenshots, and preferences on your Mac remain until you delete them or uninstall the App.
App Store Connect credentials remain in your Keychain until you remove them in the App or delete the Keychain item yourself.
Cloud AI requests are processed to produce a result and are not stored by ShotsKit Cloud.
Purchase records are retained by Apple and RevenueCat according to their standard retention periods.
Anonymous usage signals, if enabled, are retained according to TelemetryDeck's standard retention period and cannot be traced back to you.

8. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you;
Correct inaccurate data;
Delete your data ("right to be forgotten");
Restrict or object to certain processing;
Port your data to another service;
Withdraw consent at any time.

Because ShotsKit holds no account and stores your work locally, most of this data is already in your hands: deleting a project, clearing your Keychain entry, or uninstalling the App removes it. For anything held by us or our providers, contact [email protected]. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).

California residents

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and correct your personal information, and to opt out of "sale" or "sharing." We do not sell or share your personal information as those terms are defined under California law.

9. Data security

The App is sandboxed by macOS, stores credentials in the system Keychain, and uses encryption in transit (HTTPS) for every network request it makes. No method of transmission or storage is completely secure, but we work to protect your data using reasonable safeguards.

10. Children's privacy

ShotsKit is a developer tool. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, note them in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

12. Contact us

If you have questions or requests regarding this Privacy Policy or your data, contact:

Pawel Dembski (DeepSkyApps), by email at [email protected], or via deepskyapps.com.