Privacy Policy
This policy covers Shotline for Android (“the app”, Google Play package com.gokcetech.shotline), published by gokchetech (“we”, “us”), an independent developer. Shotline is a journal for health information that you choose to write down. It was built so that this information stays on your phone: we run no server that receives, stores or analyses anything you log, and the app does not hold Android’s internet permission.
1. Data we do not collect
We do not collect, receive or store any personal data through Shotline. In particular:
- There are no user accounts. You never sign up, sign in or give us an email address to use the app.
- Your medication, doses, injection sites, side effects, weight, measurements, daily check-ins, protein logs, notes and photos are never sent to us or to anyone else.
- The app does not request Android’s
INTERNETpermission and contains no code of ours that makes network requests. We operate no server for it. - The app contains no analytics, crash-reporting, advertising or tracking SDKs, and it does not use the advertising ID. The only Google components in it are the Google Play Billing Library (for subscriptions) and the Health Connect client (only if you connect it).
- We do not sell, rent or share personal data, because we have none.
- Shotline does not access your location, contacts, microphone, camera, phone, messages or the files on your phone.
2. What is stored on your phone
Shotline saves what you enter in the app’s private storage on your phone, in a local database: your goal, starting and target weight, protein target, medication plan and dose history, pens and vials (including a lot number or expiry date if you type one), each shot with its time, injection site, pain level and skin reactions, side effects, weight and body measurements, daily check-ins, food and protein entries, milestones and notes. Your settings (weight unit, reminder choices, share-card options) and any progress photos you add are kept in the same private storage.
A small pre-formatted summary (next shot day, dose, suggested site, weight change and today’s protein) is kept in a private file so that Shotline’s home-screen widgets can show it.
This data is protected by Android’s app sandbox, which keeps other apps out, and by your phone’s storage encryption and screen lock. Shotline does not add a separate password or its own encryption to the database. It does not sync your data to any server and is excluded from Android backup (see “Backups and moving to a new phone”).
3. Health Connect
Health Connect is Android’s on-device store for health data. Shotline uses it only after you opt in: you turn on “Connect to Health Connect” in Shotline (in Settings, or from the prompt on the Journey tab) and then choose on Android’s own permission screen what to allow. You can allow only part of the request, and Shotline works without Health Connect.
What Shotline reads
- Weight (read): your body-weight records, meaning the value and time of each weigh-in, including ones saved by other apps or a smart scale. Shotline reads up to the last three years. To reach records older than 30 days it asks for Health Connect’s “past data” permission (
READ_HEALTH_DATA_HISTORY); it uses that permission for weight only. - Nothing else. Shotline does not request or read any other Health Connect data type, such as steps, heart rate, sleep, blood glucose or nutrition written by other apps.
What Shotline writes
- Weight (write): each weigh-in you log in Shotline.
- Nutrition (write): the protein, in grams, of a food entry you log in Shotline. Only the protein field of the nutrition record is filled in.
How this data is used
- Only to show and record your body weight and to record your protein: weight read from Health Connect is copied into your journal on this phone and appears in your weight chart, your weight change by dose, insights, the home-screen widget and the doctor report.
- It leaves your phone only if you yourself export or share something that contains it: a doctor report, a share card on which you chose to show weight, or an encrypted backup file.
- Shotline reads weight when you open the app. It does not read Health Connect in the background.
- Sample data mode never reads from or writes to Health Connect.
What we never do with Health Connect data
- We never sell it.
- We never use it for advertising, marketing, profiling or any purpose other than the journal features above.
- We never share or transfer it to third parties. We never receive it ourselves either: the app has no internet permission and we run no server, so nobody but you can read it.
- Shotline’s use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.
Deleting and changing records
- If you delete a weigh-in in Shotline, Shotline also deletes the matching Health Connect record, but only if Shotline created it. Records from other apps are never changed or deleted by Shotline.
- If a weight record is deleted in Health Connect, Shotline removes its copy the next time it reads.
- Deleting a protein entry in Shotline, using “Delete all data” or uninstalling Shotline does not remove records that were already saved to Health Connect. Delete those in Health Connect.
Turning it off and revoking access
- In Shotline: Settings › turn off “Connect to Health Connect”. Shotline stops reading weight and stops saving new entries there. Weights already copied into your journal stay until you delete them.
- In Android: on Android 14 or later, open Settings and search for “Health Connect” (usually under Security & privacy › Privacy controls), then App permissions › Shotline › remove access. On Android 13 or earlier, open the Health Connect app › App permissions › Shotline. There you can also delete the data Shotline saved.
- Uninstalling Shotline also ends its access.
4. Permissions and device features
These are the Android permissions and features the app uses, and why.
- Notifications (
POST_NOTIFICATIONS): if you allow them, Shotline shows reminders that it schedules on your own phone, for example on shot day, a follow-up after a shot, a protein reminder or when a pen is about to run out, plus a quiet status notification on shot day. A reminder can show your dose and suggested injection site. No push or notification server is involved. - On-time reminders (
SCHEDULE_EXACT_ALARM): lets a reminder arrive at the exact time you chose. Without it Android may deliver reminders a few minutes late. You control it in Android Settings › Apps › Special app access › Alarms & reminders. - Run at startup (
RECEIVE_BOOT_COMPLETED): Android clears scheduled alarms when the phone restarts; Shotline uses this only to schedule your reminders again. - Live Updates (
POST_PROMOTED_NOTIFICATIONS): on Android 16, lets the shot-day status appear as a Live Update if you allow it. - Health Connect (
READ_WEIGHT,WRITE_WEIGHT,WRITE_NUTRITION,READ_HEALTH_DATA_HISTORY): described in the Health Connect section above. - Google Play billing (
com.android.vending.BILLING): lets the app ask the Google Play Store app on your phone to show plans and handle a subscription. - Photos: no permission is requested. If you add a progress photo, you pick it in Android’s photo picker and Shotline receives only the photo you pick. It keeps a resized copy, re-encoded so that location and other embedded metadata are dropped, in its private storage. The copy is not added to your gallery, is not part of any backup and has no share function in the app.
- Widgets and app shortcuts: two optional home-screen widgets show your next shot (day, dose, suggested site), your weight change and trend, and today’s protein. Like reminders, they can be seen by anyone who looks at your screen, and notifications may appear on the lock screen depending on your Android settings. Remove a widget or change the notification settings at any time.
- Software libraries that the app is built with also add a few technical permissions that give no access to personal data: checking whether a network is available, keeping the phone awake briefly and running a short background task. The app still has no internet access.
5. Food and protein entries
When you type what you ate, Shotline matches it against a food list that is built into the app. This happens on your phone, and what you type is not sent to anyone.
6. Backups and moving to a new phone
Shotline’s data is deliberately excluded from Android’s automatic cloud backup (Google backup) and from phone-to-phone transfer when you set up a new device. If you uninstall the app or lose the phone, your journal cannot be restored from a Google backup, and we cannot restore it either.
To keep a copy or move to another phone, export a backup file in Settings. The file holds your journal entries and is encrypted on your phone with a password you choose (at least 8 characters; AES-256-GCM, key derived with PBKDF2). Only someone with the password can open it. You pick where to save it in Android’s file picker; if you choose a cloud folder, that provider’s terms apply to the encrypted file. We cannot recover the password or the file for you.
Restoring a backup replaces the journal currently in Shotline. Progress photos and your app settings are not part of the backup file, so photos stay only on the phone where you added them.
7. Sharing and exports
Shotline can create a doctor report (PDF) and share cards (images) on your phone. They go only where you send them: you save the file with Android’s file picker, print it, or pass it to an app you choose in the Android share sheet. From then on that recipient’s or service’s privacy terms apply. Share cards hide your weight, medication name and dose unless you choose to show them. Nothing is shared automatically.
To hand a file to the share sheet, Shotline keeps one temporary copy in its private cache. It is replaced the next time you share and removed when you clear the app’s storage or uninstall.
8. Sample data
“Explore with sample data” opens a made-up journey that is kept in memory only. Nothing from it is saved, added to your own logs, shown in widgets or reminders, or sent to Health Connect.
9. Purchases and Google Play
Shotline Pro subscriptions are sold and processed by Google Play. The app asks the Google Play Store app on your phone for the available plans, starts the purchase there and checks whether your subscription is active. What it gets back from Google Play (the product, the purchase status and time, and a purchase token) is used only on your phone to unlock Pro; the app does not send it anywhere. We never receive your payment card, billing address or Google account password.
Google gives developers order and sales records in the Play Console, such as the order number, product, price, country, date and status, together with aggregated sales reports. We use them only for accounting, refunds and answering purchase questions. Google’s handling of your purchase is described in the Google Privacy Policy.
10. Information Google may share with us
If you have agreed in Android to share usage and diagnostics data with Google, Google may show us aggregated, anonymised statistics about the app in the Play Console, such as install counts, crash rates and crash stack traces. They do not contain your journal. We use them only to fix bugs. Ratings and reviews you post on Google Play are public and handled by Google.
11. Deleting your data
You are in control of deletion, and because we hold none of your data there is nothing for us to delete on a server.
- Single entries: delete any shot, weigh-in, side effect, food entry, measurement or photo in the app.
- Everything in the journal: Settings › Delete all data removes every journal record and all progress photos from the phone, cancels your reminders and clears the widgets. It cannot be undone. It does not touch Health Connect, and it keeps a few app preferences such as your weight unit, reminder choices and whether Health Connect is connected. If Health Connect is still connected when you set Shotline up again, your weight history is read from it again; turn the connection off first if you do not want that.
- Everything on the phone: uninstall Shotline, or use Android Settings › Apps › Shotline › Storage › Clear storage. Android then removes the database, photos, settings and temporary files. Because the journal is not in any Google backup, this is permanent.
- Copies outside the app: backup files, reports and images that you saved or sent elsewhere, and records saved to Health Connect, are not removed by Shotline. Delete them where they are.
Data stays on your phone for as long as you keep it; Shotline has no retention period of its own.
12. Contacting us
If you email us, we receive your email address and whatever you write, and use them only to answer you. Please do not include health details you would not want to send by email. Our mailbox is provided by Google (Gmail), which may store messages on servers outside your country. We delete support conversations when they are no longer needed, or sooner if you ask. The legal basis is your request and our legitimate interest in answering it (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
13. Children
Shotline is intended only for adults aged 18 or over who have been prescribed a GLP-1 medication. It is not directed at children, and we do not knowingly collect personal data from anyone, including children. If you believe a child has sent us personal data by email, write to us and we will delete it.
14. Your rights (GDPR, UK GDPR, KVKK, CCPA)
Depending on where you live, you have the right to access, correct, delete, restrict or port your personal data, to object to its processing and to withdraw consent. Under the Turkish Personal Data Protection Law No. 6698 (KVKK), Article 11 gives you equivalent rights, including the right to learn whether your data is processed.
Because Shotline keeps your journal only on your phone and we never receive it, you exercise these rights directly: view and edit entries in the app, export them as a report or backup file, withdraw Health Connect access, use Settings › Delete all data, or uninstall the app. For the only personal data we do hold, which is support email and the order records Google provides, write to us and we will answer within 30 days. You also have the right to complain to your data protection authority, for example your EU member state’s supervisory authority or, in Türkiye, the Personal Data Protection Authority (KVKK).
We do not sell or share personal information as defined by the California Consumer Privacy Act (CCPA/CPRA), and we do not use it for targeted advertising.
15. Who is responsible
gokchetech, independent developer, is the publisher of Shotline and the controller for the support email and order records described above. Contact: sengulfaruk1@gmail.com.
16. Changes to this policy
If we change this policy, the new version will be published at this address with a new effective date. If a change affects how data is handled, for example if a future version needed internet access, we will update this policy and the Google Play Data safety section before that version is released, and say so in the release notes.