Privacy Policy

ShootFlow is run by Operator legal name (ABN ABN). Our postal address is Postal address.

For anything about privacy, email privacy@shoot-flow.com. For everything else, email support@shoot-flow.com.

This policy covers:

• this website;
• the mailing list you can join from it;
• the ShootFlow app for iPhone and iPad, including the test builds we send through Apple's TestFlight.

For each one it says what is collected, what it's for, where it goes and how to have it removed.

The site is hosted on Squarespace. Our pages add no analytics, ads or third-party scripts of their own, and our fonts are built into the page. Squarespace sets its own cookies and runs its own scripts to operate the site. Squarespace's cookie policy lists them and what they do.

Squarespace also keeps standard server logs, such as your IP address, browser type, the page requested and the time, to deliver the site and keep it secure.

The light reading on the home page (the sun, golden hour, blue hour and the moon) is calculated in your browser from the date and your time zone, or a city you pick. If you tap Use my location, your browser shares your position with that page only. It's used for the calculation and isn't sent anywhere or stored.

Our pages don't store anything on your device; Squarespace's cookies are the exception. The only time our pages send anything is when you submit the mailing list form (section 4).

When you join the mailing list we collect:

• your email address (required);
• your first name, if you give it;
• that you agreed, which version of the wording you agreed to, and when.

The form also sends two spam checks: a hidden field, and how long the form took to fill in. They aren't stored. To stop anyone flooding the list, a one-way hash of the network address each sign-up comes from is kept for ten minutes, with no email or name attached, and then deleted.

We use these details only to email you ShootFlow news: News about ShootFlow: the launch, new features and the odd tip for photographers. How often: About once a month. Every email we send tells you how to leave the list.

The list is stored with Supabase, in its Australia (Sydney, ap-southeast-2) region. Supabase is our service provider: it holds the list for us and keeps short-lived request logs that include your IP address. Its staff may access data from outside Australia to run the service (section 10).

We keep these details because you agreed to it when you joined. That consent is our legal basis, and you can withdraw it at any time.

We keep your details while you're on the list. To leave, use the link in any email, or email privacy@shoot-flow.com with the subject "Remove me", and we'll delete your details within 5 business days.

If the list isn't switched on, or you choose to email us instead, the form opens your email app with your details written into a message to support@shoot-flow.com. Nothing is sent until you press send. If you do send it, we add those details to the list by hand and treat them the same way. Emails you send us are kept in our mailbox with Google Workspace, and deleted when your list entry is.

If you joined the earlier beta waitlist

Before 4 October 2026 the site had a beta waitlist instead. If you joined it, your details are used only as promised then: a TestFlight invite when a build is ready (we enter your email and first name into App Store Connect so Apple can send it; see section 7), and one email when ShootFlow is on the App Store. We keep them for 12 months after launch, then delete them, or sooner if you ask.

The app works with an account. You sign up with your email address and a password, and confirm the address from the email we send. Your account and what you make in the app are stored with Supabase, our database provider, in Australia (Sydney, ap-southeast-2). That's what lets you sign in on another iPhone and share your work with other photographers. section 6 lists what's stored.

Supabase keeps a scrambled digest of your password, never the password itself. Your phone keeps a sign-in token in its secure storage so you stay signed in.

Other people see only what you share, with the audience you choose for it. If your profile is private, only followers you approve see your posts and portfolio. Messages are seen only by the people in the conversation.

The app has no analytics or crash-reporting tools, no ads and no tracking, and nothing you store is used for advertising. The whole app is free to use, with a monthly allowance and Pro unlocking more. There are no in-app purchases yet, so nothing has a price.

To apply the free allowance, the server counts the plans you've created, and the app keeps a copy of that count on the device. Deleting a plan doesn't give it back.

Apple services the app uses

• Sign in with Apple. When it's available, Apple shares your name and email with the app, which stores them with your account.
• Apple Maps. The map and address lookups use Apple Maps and Apple's geocoding, so those queries go to Apple.
• Speech recognition. When you speak to fill in a form, your speech is turned into text on the device where the device supports it. Otherwise the audio may go to Apple's servers to be transcribed.
• Apple Intelligence. Features that use it run on Apple's models on your device.
• Widgets and the Lock Screen countdown. The widgets read a snapshot the app saves on your device. The golden-hour countdown is a Live Activity the app starts on the device itself, with your plan's name and times; nothing is sent to a server.
• The share sheet. It sends only what you choose, to where you choose.

Permissions

The app asks before it uses any of these, and you can turn each one off in the Settings app.

Camera

To take photos and video, to read the light with the light meter, and to take scouting photos.

Microphone

To record sound with your videos, and to hear you when you talk a note or fill in a form by speaking.

Photo library

To show pictures you pick, to save the photos and videos you capture, and to open and delete them when you ask.

Location, while using the app

For the map and nearby spots, to record where you took a photo or video, and to check that a scouting photo was taken at the spot.

Speech recognition

To turn what you say into text.

Motion

To read which way the device is held, and to draw the camera's level.

Sample pictures in test builds

Test builds show sample pictures that load from i.pravatar.cc, picsum.photos and images.unsplash.com. When they load, those services can see your device's IP address and type.

Deleting your data

Delete account in the app (You > Settings > Email and password > Delete account) permanently deletes your account from the server, with everything stored with it, including the photos you shared and the messages you sent, and signs you out. It also clears the app's own copies on this device. Frames and videos you saved to your photo library stay there. Settings that belong to the device, such as the theme and the camera's settings, stay until you delete the app.

These are stored with Supabase in Australia (Sydney, ap-southeast-2), linked to your account, and used only to run the app:

• your profile: name, email, an optional phone number, photo, bio, city, what you do and links to your other profiles;
• who you follow and who you've blocked, and your privacy and notification settings;
• your posts and portfolio, with the photos you add to them;
• comments, likes and bookmarks;
• shoot plans, tasks, crew invitations and the replies to them;
• your equipment, including serial numbers and prices;
• saved locations, with their coordinates and addresses;
• field notes (voice recordings stay on your device);
• messages, and photos you send in them;
• details of photos taken with the ShootFlow camera, such as the camera settings, time and place;
• looks you import, and what you enter and vote for in the community looks and Shot with ShootFlow.

Photos you never share stay on your device.

Test builds reach you through Apple's TestFlight app. Through TestFlight, Apple shares this with us under its own terms:

• your name and email, if you were invited by email;
• your device model and iOS version;
• crash reports;
• feedback and screenshots you choose to send;
• install and session data, such as when you installed a build and how many times you've opened it.

We use it to find and fix problems in test builds. Apple's terms and privacy policy cover what Apple itself collects through TestFlight.

We never sell your personal information, and we don't share it for advertising. We share it only:

• with service providers that run parts of ShootFlow for us: Supabase for app accounts and the mailing list, Google Workspace for our email (the launch email is sent through the same mailbox), Squarespace for the website, and Apple for TestFlight;
• when the law requires it, for example a valid request from a court or regulator.

We only use providers that are bound to protect your information at least as well as this policy does, and to use it only to provide their service to us.

The website, the mailing list and the app aren't directed at children under 16. You need to be 16 or older to join the mailing list. If you think a child under 16 has given us their details, email privacy@shoot-flow.com and we'll delete them.

Some of the providers above may store or access personal information outside Australia, mainly in the United States:

• Supabase stores app accounts and the mailing list in Australia (Sydney, ap-southeast-2), and its staff may access them from other countries to run the service;
• Apple handles TestFlight data under its own terms, which can involve other countries;
• Google Workspace keeps our mailbox, including emails you send us, and may store it in other countries;
• Squarespace may serve the site and keep its logs outside Australia.

Where that happens, we take reasonable steps so the provider handles it consistently with the Australian Privacy Principles, as APP 8 requires.

You can ask us to:

• show you the personal information we hold about you;
• correct it;
• delete it;
• stop using it, by withdrawing your consent.

If you're in the EU or the UK, you can also ask us to restrict how we use it, object to how we use it, or give it to you in a portable format.

Email privacy@shoot-flow.com. We'll respond within 30 days.

If you want to complain about how we've handled your information, tell us first at privacy@shoot-flow.com. We'll look into it and reply in writing within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or to the data protection authority where you live.

The website and the mailing list use HTTPS. The website can only add entries to the list; it can't read them back, so nothing on the site can show who has joined. Only we, the operator, can view the list, apart from Supabase's own access to run the service (section 4).

When this policy changes, the version and the last-updated date at the top change with it. Bigger changes, like storing a new kind of data with your account, will be announced in the app before they take effect (section 6).

Operator

Operator legal name

ABN

ABN

Postal address

Postal address

Privacy

privacy@shoot-flow.com

Everything else

support@shoot-flow.com