HeroShot Privacy Policy
Effective date: October 26, 2026
This policy explains how HeroShot (“we”, “us”) handles information in the HeroShot app for iPhone and iPad (“the app”) and on the heroshot.app website, why, and the choices you have.
Your images, videos and creations are not sent to us. HeroShot has no accounts and no servers of our own. After you select “Get started” on the onboarding page, usage analytics is enabled by default and can be turned off in Settings. Analytics events are sent to Google, while your media and creations stay on your device, or in your own iCloud if you turn on sync.
1. Screenshots and recordings you import
You choose images and videos through the system photo picker. The app can only see the items you pick, not the rest of your photo library. Everything you import is processed on your device, including device mockups, animations, editing and removing the screen recording indicator. Nothing is sent to us.
2. Saving to Photos
If you save an export to Photos, the app asks for add-only access. This lets the app add images and videos to your library. It does not let the app read your library.
3. History and favorites
Your history and favorites are stored in the app’s storage on your device. Unless you turn on iCloud sync, they never leave your device, and deleting the app deletes them.
4. iCloud sync (optional, for members)
iCloud sync is off by default. If you turn it on, your history and favorites are stored in your private iCloud database through Apple’s CloudKit, so they can sync across your devices. This includes their source images and videos and their editing settings. This data belongs to your iCloud account, counts toward your iCloud storage, and is not accessible to us.
While sync is on, deleting a creation in the app also deletes it from iCloud and your other devices. You can turn sync off at any time in the app’s Settings. Turning it off does not delete what is already in iCloud. You can manage or delete that data in iOS Settings → [your name] → iCloud. Apple’s privacy policy applies to iCloud.
5. Purchases
Memberships are sold and processed by Apple through the App Store. We do not receive your name, Apple Account or payment details. The app checks your membership with Apple on your device.
6. Diagnostics from Apple
If you choose to share analytics with app developers in iOS Settings, Apple may share anonymous crash reports and usage statistics with us. Apple controls this setting and these reports.
7. Usage analytics and your control
Purpose: We use Google Analytics for Firebase to understand how often the app is used, how people create and save images and videos, and which membership entry points and plans lead to purchases. We use these results to improve features, export performance and the purchase experience.
Data: App opens, creation and export actions, export results and waiting times, estimated editing time, exported video duration and dimensions, membership entry points, plan selection and purchase results. The SDK also processes a randomly generated app-instance identifier and technical information such as app version, device and operating system information, and approximate region. Random workflow identifiers help associate related actions. These identifiers let us distinguish installations and associate actions from the same installation; they are pseudonymous identifiers, so we do not describe this data as completely anonymous.
When collection begins and how to stop it: The onboarding page lets you view this policy before selecting “Get started.” Analytics does not start before that action. After “Get started,” usage analytics is enabled by default and runs in the background. You can turn it off at any time in the app’s Settings under “Usage analytics.” A previous opt-out remains off after an app update or another onboarding action. Turning it off stops further collection and resets the SDK’s local analytics data; it does not automatically delete events already processed by Google.
Data we do not collect through analytics: Names, email addresses, imported images, videos, creation content, file names or paths, Apple/iCloud account identifiers, and payment card information. The app uses the Firebase Analytics Core SDK without advertising-identifier support, disables IDFV collection and advertising personalization, and does not use analytics to track you across other companies’ apps or websites.
Analytics events are transmitted to Google’s service, separately from your private iCloud storage. See Firebase Privacy and Security and Google’s Privacy Policy for Google’s processing practices. App Store purchase and financial reports remain managed by Apple.
8. When you contact us
If you email us, we receive your email address and anything you choose to include, such as screenshots or a description of a problem. We use it only to reply to you and to fix problems you report. Mail sent to [email protected] is forwarded by Cloudflare to a mailbox hosted by Google.
9. This website
heroshot.app does not use cookies, analytics or advertising. If you switch the page language, your choice is stored only in your browser. The site is hosted by Cloudflare, which processes technical information such as IP addresses and browser details to deliver the site and protect it from abuse.
10. How long data is kept
- Creations on your device: until you delete them or the app.
- Creations in iCloud: until you delete them from the app with sync on, or from iCloud settings.
- Analytics: event-level data is kept for no longer than 14 months under our Google Analytics settings, then deleted. Aggregated reports that cannot identify an installation may be kept longer.
- Support emails: for as long as needed to resolve your request, and deleted on request unless we need to keep them by law.
11. Where data is processed
Apple, Google and Cloudflare may process data in the United States and other countries. Each applies its own safeguards for international transfers, as described in its privacy policy.
12. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict its processing, to withdraw consent, and to complain to a data protection authority.
Because HeroShot has no accounts and analytics data uses random identifiers, we usually cannot link analytics data to you. The simplest way to stop analytics is to turn off “Usage analytics” in Settings. For any other request, contact us and we will respond within the time required by law.
Where EU or UK data protection law applies, we process analytics data based on our legitimate interest in understanding and improving HeroShot, and you can object at any time by turning off Usage analytics. We do not sell personal information or share it for cross-context behavioral advertising.
13. Children
The app is not directed to children. The optional analytics described above follows the user’s choice; we do not intentionally request children’s personal information.
14. Changes to this policy
If this policy changes, we will update this page and its effective date. If we make significant changes, we will also point them out in the app.
This policy is available in English and Simplified Chinese. If the versions differ, the English version prevails, unless the law where you live requires otherwise.
15. Contact
HeroShot · [email protected]