Privacy Policy

Last updated: July 8, 2026

ShotDish ("we", "the app") analyzes restaurant menu photos against your diet profile using AI. This policy explains what we collect and why. We do not sell your data and we do not use advertising or third-party tracking.

What we collect

• Menu photos you submit. When you run a menu check, the photos are sent to our server and on to our AI provider for analysis. The resulting per-dish verdict is stored so it appears in your history; you can delete it.
• Your diet profile. The restrictions you toggle (and the optional free-text note) are stored on your device, sent with each menu check, and saved to your account so the profile follows you across devices. Deleting your account deletes it.
• Email address (optional). Only if you choose to sign in. It links your subscription and history across devices. The app works without an email as an anonymous guest.
• Device push token. Used solely to notify you when a menu check is ready.
• Minimal diagnostics. Basic, non-identifying request data to operate and secure the service (e.g. rate limiting).

Photos & the camera

ShotDish uses the camera or your photo library only when you start a menu check, and the Share Extension only receives images you explicitly share to it. Photos are sent over an encrypted connection (HTTPS) to our server and forwarded to our AI provider (Anthropic) solely to produce the per-dish verdict. The photos themselves are never stored on our servers — only the resulting verdict text is kept for your history. The one exception is when you explicitly tap Share on a result: that menu photo is then published at a public link (cdn.shotdish.com) that you create and control.

You can delete any check from your history in the app, and you can delete your account and all associated data at any time (see "Data retention & deletion" below). Crash reports (Sentry) never include photos.

AI processing

To produce a verdict, your menu photos and diet profile are processed by our AI provider (Anthropic). Images are processed to generate the verdict and are not used to train third-party models.

Subscriptions

Paid plans are handled by Apple via in-app purchase. We receive only the subscription status needed to unlock features; we never see your payment details.

Data retention & deletion

Verdicts (not screenshots) are retained in your history for 7 days on the free plan, 90 days on Basic, and until you delete them on Pro. You can delete individual checks at any time, and you can permanently delete your account and all associated data from inside the app: Account → Delete account. This removes your account, devices, and checks from our servers immediately.

Contact

Questions about privacy? Email support@beecrow.llc.