Shotodo Privacy Policy

Effective date: October 25, 2026

Shotodo (“the app”) is developed and published by Derva (“we”, “us”). This policy explains what information the app handles and where it goes. The short version: your screenshots never leave your iPhone, and we don’t keep your text.

What we collect

Nothing we keep about you. Shotodo has no accounts, no analytics, no telemetry, no crash reporting and no advertising. We never see your screenshots, your reminders, your events or your contacts.

Screenshots and text recognition

When you select a screenshot for analysis, text recognition (OCR) runs entirely on your device using Apple’s Vision framework. Your images never leave your iPhone.

On-device AI

On iPhones that support Apple Intelligence, Shotodo uses the on-device model built into iOS by default. In this mode the extracted text is processed on your iPhone and nothing is sent to any server.

Shotodo Cloud

On iPhones without on-device AI, Shotodo uses Shotodo Cloud, the AI included with your subscription. The app sends the extracted text only (never the image) and Apple’s signed record of your subscription to our service on Cloudflare (Cloudflare Workers AI). The text is processed to return the reminders, events and contacts it contains, and is not stored or logged. To enforce the daily limit, the service keeps a one-way hash of your subscription’s ID and a count of today’s analyses for 48 hours. Cloudflare’s handling is described in its privacy policy. If Shotodo Cloud is briefly unavailable, the app may send the same text to Groq as a backup (Groq privacy policy).

Your own AI provider

If you add your own API key for Groq, OpenAI, Anthropic, Google AI or xAI, the extracted text (never the image) goes directly from your iPhone to that provider, under its privacy policy: Groq, OpenAI, Anthropic, Google, xAI. We are not part of that transmission and receive no copy. Avoid analyzing screenshots containing information you would not send to your chosen provider.

API keys

API keys you add are stored in the iOS Keychain on your device. They are sent only to the provider they belong to, to authenticate your requests. They are never transmitted to us or anyone else.

Reminders, Calendar, and Contacts

The app writes to Apple Reminders, Calendar, and Contacts only with your permission and only when you tap Save on the confirmation screen. That data lives in Apple’s apps, under Apple’s privacy protections. Shotodo keeps no copy beyond your on-device history.

Analysis history

Your recent analyses (up to 200 items) (compressed thumbnail, extracted text, and results) are stored locally on your device so you can review them in the Activity tab. You can delete individual entries or clear the whole history at any time. This data never leaves your device.

Subscriptions

Subscriptions are processed by Apple through your Apple Account. We never see your payment details. Manage or cancel anytime in Settings › Apple Account › Subscriptions.

Children

Shotodo is not directed at children under 13 and does not knowingly process data from them.

Changes to this policy

If we change this policy, we will update this page and the effective date above. Material changes will be noted in the app’s release notes.

Contact

Questions? Email privacy@norderva.com.