Privacy Policy
Last updated: September 24, 2026
This Privacy Policy explains how HolyShot (“we”, “us”, or “our”) collects, uses, stores, and protects your information when you use our mobile and web application (the “App”). By using HolyShot, you agree to the practices described in this policy.
1. Information we collect
Food photos and nutrition requests
When you take a photo of a meal or describe it in text, we process that image or text through our AI analysis service to return calorie and macronutrient estimates. Photos uploaded while signed in are stored securely in private cloud storage tied to your account.
Nutrition and fitness data
We collect and store the foods you log, calories, protein, fat, carbohydrates, sugar, and related wellness data. This data is stored locally on your device by default and, if you sign in, synchronized to our backend so it is available across your devices.
Account information
If you choose to sign in with Apple or another supported provider, we receive your name, email address, and a unique user identifier from that provider. We use this information to create and secure your account and to provide personalized features.
Purchase and subscription data
We use a third-party service (RevenueCat) to manage subscriptions, in-app purchases, and free-trial limits. This service collects purchase history, transaction identifiers, and a device identifier to validate entitlements and restore purchases.
Usage and diagnostic data
We may collect anonymous or account-linked information about how you interact with the App, such as feature usage, taps, and errors. This helps us improve performance, fix bugs, and prioritize new features.
Device and technical data
We may collect your device type, operating system version, the country of your App Store account, and a unique installation identifier to deliver core functionality, offer the purchase options that work where you are, and secure your account.
2. How we use your information
We use the information we collect to:
- Provide AI-powered food analysis and nutrition tracking.
- Authenticate your account and keep your data secure.
- Sync your food history across devices when you sign in.
- Process purchases, subscriptions, and free-trial limits.
- Improve app performance, reliability, and features.
- Communicate with you about your account, security, or support requests.
We do not sell your personal information. We do not use your data for third-party advertising.
3. How we share information
We share data only with trusted service providers who help us operate the App:
- Supabase — cloud database, authentication, and private storage for signed-in users.
- Google / Gemini AI — analysis of food photos and text descriptions to generate nutrition estimates.
- RevenueCat — subscription management, purchase validation, and free-trial enforcement.
- Apple — sign-in provider (Sign in with Apple) when you choose it.
- Google — sign-in provider for the coach dashboard when a coach chooses it.
Your coach, only if you choose. If you connect a coach (Profile → My coach) or send someone a diary link, that person can see your logged meals, calories and macronutrients, meal photos, and your nutrition goals; weight and target weight are shared only if you allow it. You can turn photos and weight off, disconnect your coach, or turn off a diary link at any time, and access stops immediately. Coaches in our partner program earn a commission on Premium purchases by the clients they invited, so your coach can see that a purchase was made — never your payment details.
We may also disclose information if required by law, to protect our rights, or to respond to a valid legal request.
4. Data storage and security
We use industry-standard security measures, including encryption in transit and access controls, to protect your information. Photos and signed-in data are stored in private cloud storage accessible only to your account. While we take reasonable precautions, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
5. Your choices and rights
Depending on your location, you may have the right to:
- Access, correct, or delete the personal information we hold about you.
- Export your food history.
- Withdraw consent for data processing where consent is the legal basis.
- Object to certain uses of your data.
To exercise these rights, contact us at the email address below. If you delete your account, we will remove your personal data within a reasonable time, except where we are required to retain it by law.
6. Children
HolyShot is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.
7. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the App after any changes means you accept the revised policy.
8. Contact us
If you have questions or concerns about this Privacy Policy or your data, please contact us at:
privacy@holyshot.app