Who this covers

This policy applies to the SameShot Android app (package com.appynox.morphly), this website at https://sameshot.appynox.com, and the free browser tools hosted on it. SameShot is made by Appynox. The iOS app is in development and is not on the App Store yet; this page will be updated before it ships.

Who is responsible

Appynox is the trading name of Anuj Paudel, an independent developer based in Bharatpur, Chitwan, Nepal. For the purposes of the EU and UK General Data Protection Regulation and the Swiss Federal Act on Data Protection, Appynox is the controller of the personal data described on this page, except where it says Google decides how data is used. For anything about privacy, write to [email protected].

What goes online, in one table

Everything the app does with your photos happens on the phone. Shooting, aligning, comparing and exporting all work in airplane mode. This is everything the app sends over the network, and who receives it.

What	Who receives it	Can you turn it off?
Usage statistics	Google, through Google Analytics for Firebase	Yes. Settings > Privacy & Security
Ads, free version only	Google, through AdMob	Premium removes every ad. In the EEA, the UK and Switzerland you also set, and can change, your consent
Optional account	Google's Firebase services, which store it for us	Nothing is sent unless you sign in
Purchases and ratings	Google Play	The Premium check, no. Buying and rating are up to you
Detector metrics	Google, through ML Kit	No. Technical figures only, never an image
Fonts	Google Fonts	No. The app downloads its typefaces once

No photo, project name or measurement is part of any of them. Each row is explained below.

Photos, projects and settings

All photos, projects, measurements, streaks, reminders and settings live in local storage on your device. We do not operate a photo cloud, and the app has no code that uploads a photo. We cannot see, access, back up or recover your photos. If the phone is lost, reset or uninstalled without a copy you made yourself, the photos go with it. That is the cost of there being no copy elsewhere, and it is stated plainly in the terms.

If backup is switched on for your phone, Android itself copies the app's settings and project list (never the photos) to your Google account, so a new phone can restore them. That backup belongs to your Google account, and we cannot see it.

Exports, before-and-after images, time-lapse reels and shares are generated on the device. They leave the device only when you export or share them, and only to the destination you choose (the camera roll, a messaging app, a drive you control, and so on). SameShot does not upload those files.

On-device machine learning

Face detection and pose detection, from Google ML Kit, run on the phone so auto capture and face mode can hold the frame steady. That is the whole of the on-device ML. Photos are not sent anywhere for inference, and the models are not used to estimate body fat, score a physique, diagnose skin, or identify you as a person.

ML Kit does send Google technical figures about the detectors, such as how fast they ran, the image size and format they were given, and any error codes, along with basic device and app details. Google uses them for diagnostics. They never include an image.

Usage statistics

The app uses Google Analytics for Firebase to see how SameShot is used: which screens are opened and which features are used (for example a project created, a photo taken, an export finished, the Premium page shown or an ad shown), basic device details such as the model, Android version and language, an approximate region worked out from your IP address, and an app-instance ID that lets Google count one phone as one phone. We use it to see which parts of the app people use and which parts are broken.

It is on by default. You can switch it off at any time in Settings > Privacy & Security > Share anonymous usage statistics, and collection stops at once. The data is sent to Google, encrypted in transit, and Google deletes it at the end of the retention period set in our Analytics account. It is not linked to your account if you have one, and it is not used to personalise ads: the app switches off Analytics' advertising ID collection and its ad personalisation signals.

It does not include your photos, your project names, your measurements or anything you photograph. Google's handling of the data it receives is covered by Google's privacy policy.

Ads in the free version

From version 1.5.0, the free version of the Android app shows ads from Google AdMob: a banner at the bottom of the home and project screens, and a full-screen ad after you save a photo or finish an export. Ads never appear inside the camera, and none appear until you have taken your first photo. Premium, a one-time purchase, removes every ad.

Every ad request is non-personalised. Ads are chosen from context, such as the app and your general location, not from your interests or past behaviour. The app also cannot read your device's advertising ID, or the newer Privacy Sandbox ad ID: the permissions that would allow either are removed from the app.

To show and measure ads, Google's ads SDK collects the following and shares it with Google for advertising, analytics and fraud prevention, according to Google's own disclosure:

Your IP address, which may be used to estimate your general location.
Interactions, such as app launches, taps and ad views.
Diagnostics, such as app launch time, hang rate and energy use.
Device identifiers: the app set ID and, where applicable, other identifiers related to accounts signed in on the device. Never the advertising ID.

This data is encrypted in transit. Google uses it under Google's privacy policy, and explains how on its page How Google uses information from sites or apps that use our services. We see only aggregated ad reports from AdMob, never data about you.

Consent. In the European Economic Area, the UK and Switzerland, the app asks for your choices before it requests any ad, using Google's consent form, a consent tool certified by Google that follows the IAB Transparency and Consent Framework. The form names Google and the other ad technology providers involved, and what each would do. Until you answer, no ad is requested. If you do not agree, Google may still show limited ads: ads that use no personal data for personalisation, and device storage only to detect fraud. Whatever you choose, the ads stay non-personalised.

Changing your mind. You can change or withdraw your choices at any time, as easily as you gave them: open Settings > Privacy & Security > Ad privacy choices. The entry is there once the app has asked for your choices. Withdrawing does not affect ads shown before you changed your choices.

Optional account

SameShot never requires an account. You can sign in from Settings > Membership, with Google or with an email address and password. Today the account's job is to carry founder status (the free access that early users keep) to another phone. A Premium purchase does not need it: Google Play restores the purchase on any Android phone signed in to the same Google account. Everything else works the same without one.

When you sign in, the app keeps one small record for you in Google's Cloud Firestore:

your email address;
the kind of device you last signed in from (Android or iPhone);
whether you are a founder, and when you claimed it;
when the record was last updated.

Apart from us, only you, signed in, can read that record. The sign-in itself is handled by Firebase Authentication, also a Google service. It keeps your email address and when the account was created and last used, and it receives your IP address to protect sign-in from abuse. With Google sign-in it also receives the basic profile Google shares, such as your name and profile picture, which SameShot does not use. Email passwords go straight to Firebase Authentication, which stores them only in hashed form; we never see them. If you ask for a password reset, Firebase Authentication emails the link to that address.

Your photos, projects and measurements are never part of the account, and neither are your purchase details. We keep the record until you ask us to delete the account.

Purchases

Premium is a one-time purchase made through Google Play. Google handles the payment, and we never see your card or payment details. The app asks Google Play whether your Google account owns Premium and unlocks it on that phone; nothing about the purchase is stored with an account. Usage statistics record that a purchase happened, nothing more. Google Play keeps its own record of the purchase under Google's policies.

Now and then the app asks Google Play to show its rating card. A rating or review you leave there goes to Google Play, and we see it the way anyone sees a Play review.

Permissions the OS may ask for

Android will prompt for the access the app actually needs. SameShot never sees the underlying secret; the operating system grants or denies the capability.

Camera. To take progress photos. Required for the core product.
Photos / media (optional). Only if you import existing photos into a project through the system picker.
Notifications (optional). Only if you turn on reminders.
Biometrics or device PIN (optional). Only if you turn on App Lock, which is part of Premium. Unlocking is handled by the operating system (fingerprint, face or PIN). SameShot never sees, stores or transmits biometric data; the OS only reports whether the unlock succeeded.

The app also has network access, which Android grants without asking. It is used only for the things in the table above.

This website and the browser tools

sameshot.appynox.com is a static site. It sets no cookies, runs no analytics or tracking scripts, and does not fingerprint visitors. Its pages load their fonts from Google Fonts, which sees your IP address the way any server that sends a file does. Closing the tab leaves nothing behind that we hold.

The free browser tools (the before and after maker, time-lapse calculator, cadence planner and alignment checker) run in your browser. Images are read locally (FileReader and canvas). They are not uploaded, stored or transmitted by us. Close the tab and they are gone.

If you email us

If you write to [email protected], we use your address only to reply. You can ask us to delete the thread at any time. We do not add people to a mailing list from the website, and the app never sends mail on your behalf.

Legal bases, if you are in the EEA, the UK or Switzerland

Data protection law there asks us to say on what basis each use of personal data rests. These are ours:

Use	Legal basis
Ads in the free version	Your consent, given in Google's consent form, to storing and reading information on your device and to the ad purposes you accept there. For the purposes the form lists under legitimate interest, Google's and our legitimate interest in funding the free version, which you can object to in the same form.
Usage statistics	Our legitimate interest in knowing which parts of the app are used and which are broken. You can object at any time by switching them off in Settings.
Optional account	Providing the account you asked for (performance of a contract).
Purchases and the Premium check	Providing what you bought (performance of a contract).
Detector metrics and fonts	Our legitimate interest in an app and website that work reliably.
Emails you send us	Our legitimate interest in answering you.

We do not make decisions about you based solely on automated processing, and nothing in the app profiles you.

Where data is processed

Every service in the table at the top is run by Google, which processes data on its servers in the United States and other countries. For data leaving the EEA, the UK and Switzerland, Google relies on legal safeguards such as the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework, as set out in Google's privacy policy.

We are in Nepal. When we look up an account record or read an email you sent, we do it from there.

Children

SameShot is not directed at children under 13, and it is rated Everyone on Google Play. Using it needs no personal information: no account is required, and photos stay on the device that took them. Usage statistics and ads in the free version work as described above for everyone. If you believe a child under 13 has created an account, write to us and we will delete it. If you are a parent or guardian, you control that device.

In the EEA, the UK and Switzerland, the age at which you can give consent yourself is set by each country, between 13 and 16. Below it, ask a parent or guardian before making choices in the ad consent form.

Deleting your data

Photos and projects. Delete a project in the app, or uninstall the app or clear its storage, and they are gone from that phone. No copy of a photo exists on any server, because none was ever sent. Android's own backup of the project list, if you use it, lives in your Google account.
Usage statistics. Switch them off in Settings > Privacy & Security to stop collection; uninstalling also stops it. Data already sent is deleted by Google at the end of the retention period.
Ads. Data collected for ads is held by Google under Google's policies. Premium stops ads entirely, and in the EEA, the UK and Switzerland you can change or withdraw your consent in Ad privacy choices.
Your account. Sign out in Settings > Membership to unlink that phone. To delete the account and its record, email [email protected] from the address on the account, and we will delete both.
Website tools keep nothing after you close the page. For an email you sent us, write and ask.

Your rights

Wherever you live, you can ask us what personal data we hold about you and ask us to correct or delete it. If you are in the EEA, the UK or Switzerland, the law also gives you the right to:

get a copy of your personal data, and have the account record handed over in a portable form;
have it corrected or erased, or its use restricted;
object to uses based on legitimate interest, such as usage statistics, which you can also switch off yourself;
withdraw consent at any time, for ads in Ad privacy choices, without affecting what happened before;
complain to a data protection authority: the one where you live or work in the EEA, the Information Commissioner's Office in the UK, or the Federal Data Protection and Information Commissioner in Switzerland.

To use any of these rights, write to [email protected]. We answer within one month. The usage and ad data Google holds is tied to an app-instance ID or Google's app set ID rather than to your name, so we usually cannot pick out yours. The usage statistics switch stops that collection at once, Ad privacy choices changes what ads may use, and Premium ends ads altogether. For your data in Google's own services, see Google's privacy controls.

Changes

If this policy changes, we will update this page and the effective date above. This page is updated whenever the app's data handling changes, as it was when usage statistics, the optional account and ads were added. Continued use after an update means you have read the new version.

Contact

Questions about privacy: [email protected]. The terms of use for the app and site are on the terms page.

Your photos never leave your phone.

We did not promise to protect your photos. We built somewhere they cannot go.