Privacy policy

Last updated: October 25, 2026

Who we are

Shot (“the app”) and this website are provided by Stanislav Kashchishen (“we”, “us”). You can reach us at [email protected].

This policy covers the Shot iPhone app and the website at shotbrews.app.

What the app stores

To work, Shot stores the following on your device:

• Your coffees (for example name, roaster, origin, process and roast date).
• Your gear (for example grinders and brewers).
• Your recipes and brew logs: dose, water, times, temperature, grind, ratings, taste marks and notes.
• Simple preferences, such as your chosen brewing method and whether you have seen the intro.

This data is created by you and used only to provide the app’s features. We do not have access to it.

iCloud sync

If iCloud is turned on for Shot, your data is synced between your own Apple devices through your private iCloud database, using Apple’s CloudKit. It is handled by Apple under Apple’s terms and privacy policy, and we cannot read it. You can turn sync off in iOS Settings under your name, then iCloud, then Shot.

What we don’t collect

• No account, name, phone number, location or contacts.
• No advertising identifiers and no ads.
• No third-party analytics or advertising tools in the app.
• No tracking of you across other companies’ apps or websites.

Apple may give us aggregated and anonymous information about the app, such as download numbers and crash reports from users who chose to share diagnostics with developers.

Beta sign-up and emails

When you enter your email address in a sign-up form on our website, it is sent to MailerLite, the email service we use to run the beta list. MailerLite (MailerLite Limited, Ireland) processes it on our behalf as our data processor.

What is stored:

• Your email address.
• Sign-up details that MailerLite records to show you agreed to join: the date and time, the form you used, your IP address, and when you confirmed.
• Whether you opened our emails or clicked links in them, if email tracking applies (see below).

Confirming your address. After you sign up, MailerLite sends you one email asking you to confirm. You are added to the list only after you confirm. If you never confirm, we do not email you again.

What we use it for. To send your TestFlight invitation (see the next section), news about the beta, and the occasional update when Shot launches or changes in a meaningful way. We do not send unrelated marketing, and we never sell or rent the list.

Email tracking. Our emails may contain a small tracking image and tracked links, which tell us whether an email was opened and which links were clicked. We use this only to see whether emails are delivered and useful. You can avoid it by turning off image loading in your email app.

Unsubscribing. Every email has an unsubscribe link that removes you from the list right away. You can also reply to any email or write to us.

Legal basis and retention. We rely on your consent, which you can withdraw at any time. We keep your address while you are subscribed. If you unsubscribe, MailerLite keeps a record of the address marked as unsubscribed, so you are not emailed again. If you want it deleted completely, write to us.

Joining the beta (TestFlight)

To invite you to the beta, we add the email address you signed up with as a tester in Apple’s App Store Connect. Apple then emails you the TestFlight invitation and handles installation under its own terms and privacy policy.

As a tester, we can see the email address you were invited with, any feedback or screenshots you choose to send through TestFlight, and the crash and usage information that TestFlight shares with developers.

Website and cookies

The website does not use analytics or advertising cookies, and we do not track you across other sites.

• MailerLite. The home page loads a script from MailerLite (assets.mailerlite.com) that powers the sign-up forms. Your browser connects to MailerLite’s servers, which can see your IP address and the page you are on. The script may store small cookies, for example to remember whether a sign-up form was already shown to you.
• Google Fonts. The site loads its fonts from Google Fonts, so your browser connects to Google’s servers to download them, and Google can see your IP address as part of that request.
• Hosting. Our hosting provider, Cloudflare Pages (Cloudflare, Inc.), may keep standard server logs that include IP addresses.

Permissions

If a future version of Shot needs a permission, such as Bluetooth to connect to a coffee scale, the app will ask you first. Data from such features stays on your device unless we say otherwise here, and we will update this policy before we release them.

Sharing

We do not sell your personal information, and we do not share it for advertising. We share it only with these service providers, and only for the purposes described above:

• MailerLite: runs the beta list and sends our emails.
• Apple: sends your TestFlight invitation and runs TestFlight.
• Google: serves the website’s fonts.
• Our hosting provider: serves the website.

We may also disclose information if the law requires it.

Keeping and deleting data

• App data: delete individual items inside the app, or delete the app to remove its data from your device.
• iCloud data: manage or delete it in iOS Settings under your name, then iCloud, then Manage Storage, then Shot.
• Your email address: use the unsubscribe link in any email to stop emails right away. To have it deleted from MailerLite and removed from TestFlight, write to us.

Your rights

Depending on where you live, such as in the European Economic Area, the United Kingdom or California, you may have the right to access, correct or delete your personal information, to object to or restrict its use, to withdraw consent, and to receive a copy of your data. Because we hold very little, these requests mostly concern your email address and the sign-up details stored with it. Contact us and we will respond within one month. You can also complain to your local data protection authority.

Children

Shot is not directed at children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has sent us their email address, contact us and we will delete it.

Security

Your app data is protected by the security features of your device and iCloud. Your email address is stored by MailerLite, which protects it with its own security measures, and our MailerLite account is protected with two-factor authentication. No system is perfectly secure, but we keep what we hold to a minimum.

International transfers

MailerLite is based in the European Union, but it and our other providers (Apple and Google) may process your information in other countries, including the United States. Where the law requires it, these transfers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Changes to this policy

We may update this policy as Shot grows. When we do, we will change the date at the top, and for significant changes we will tell you in the app or by email.

Contact

Questions about privacy? Email [email protected].