Privacy Policy

Last updated: 29 September 2026

Shoot Manager is a mobile app for tracking photography and video shoots, payments, team payouts and expenses. This policy explains what information the app stores, why, who helps us process it, and how you can delete it. If you have any questions, email support@shootmanagerapp.com.

What we store

Your account

• Your name and email address.
• Your password, stored only as a one-way hash (bcrypt). We can't see it.
• Optionally, a company name and logo that you add on the Profile screen. The logo is shrunk on your phone before it's uploaded.
• Your settings, such as your shoot and expense types, "Hide amounts by default", and whether your company appears on client exports.

What you enter in the app

• Shoots: dates, client name, event, type, budget, whether it's paid, notes, team payouts and expenses.
• Clients: their names.
• Teammates: their names and, optionally, their role.

The app doesn't ask for contact details (phone numbers, emails or addresses) for your clients or teammates. Only enter information about other people that you're allowed to keep.

Password resets

If you use "Forgot password?", we email a 6-digit code to your account's email address. We store only a hash of the code, and it expires after 15 minutes.

Google Calendar (optional)

If you connect Google Calendar, you give Shoot Manager permission to manage your Google Calendar. We use it only to:

• find or create a calendar named "Shoot Manager" in your account, and
• add, update and remove one all-day event per shoot in that calendar. Each event contains the shoot's dates, client and event name, and your note.

We don't read, change or delete your other calendars or events. We store a Google refresh token and the ID of the "Shoot Manager" calendar with your account so the app can keep that calendar in sync. When you disconnect, both are deleted from our database. Events already added to your calendar stay there, and you can delete them yourself in Google Calendar. You can also remove Shoot Manager's access at any time from your Google Account permissions.

Shoot Manager's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is not used for advertising, is not sold, and is not read by people except where you ask us to for support, where it's needed for security, or where the law requires it.

On your phone

• Your sign-in token is kept in your phone's secure storage (Keychain on iOS, Keystore on Android).
• Reminders (for example "Shoot tomorrow" or "Payment not received") are scheduled as local notifications on your phone. They never include amounts, since they can appear on your lock screen. We don't use a push notification service.
• Excel and JSON exports and client summary images are created on your phone and only go where you choose to share or save them.
• The app asks for access to your photos only when you choose a company logo, and uses only the image you pick.

Technical information

When the app connects to our server, the server sees your IP address. It's used briefly, in memory, to limit repeated sign-in and password-reset attempts. It isn't saved with your account. Our hosting provider may keep standard server logs for a short time.

Why we use it

We use your information only to provide the app to you: to sign you in, save and show your data, send password reset codes, sync Google Calendar if you've turned it on, answer your support emails, and keep the service secure. We don't send marketing emails.

Who processes it

We use a few service providers to run Shoot Manager. They process data only on our behalf:

• MongoDB Atlas: the database where your account and app data are stored.
• Railway: hosts the app's server.
• Resend: sends password reset emails.
• Cloudflare: hosts this website and forwards emails sent to support@shootmanagerapp.com.
• Google: only if you connect Google Calendar, as described above. Support emails are also received in a Gmail inbox.

These providers may store data in countries other than yours. Data is sent between the app and our server over encrypted (HTTPS) connections.

How long we keep it

We keep your data for as long as you have an account. You can delete it at any time:

• Clear all data (Profile screen) deletes your shoots, clients and teammates and keeps your account.
• Delete account (Profile screen) deletes your account and all your data from our database straight away.
• If you can't access the app, see how to request account deletion.

Your rights

You can see and edit your data in the app, export it (Excel or JSON) from the Profile screen, and delete it as described above. Depending on where you live, you may also have the right to ask for a copy of your data, to correct it, to restrict or object to how we use it, and to complain to your data protection authority. To make a request, email support@shootmanagerapp.com from the email address on your account.

Children

Shoot Manager is a business tool and isn't meant for children under 16. We don't knowingly collect data from children.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. If a change significantly affects how your data is used, we'll also let you know in the app.

Contact

Email support@shootmanagerapp.com with any questions about your privacy.