ShotCheck — Privacy Policy

Last updated: 13 August 2026

The short version

ShotCheck does not collect anything. There is no account, no server, and no networking code in the app at all.

That is not a summary of a longer policy that says otherwise. It is the whole policy, and the rest of this page only explains what that means in practice.

What happens to the photo

When you photograph a vaccination record, the image is read by iOS on your device using Apple's on-device text recognition. The photo is never uploaded, and ShotCheck never saves it. Closing the app discards it.

While the app is open it keeps a copy of the page in memory so it can show you the strip of card each row was read from. That copy is never written to disk.

What is stored on your device

The rows you keep, the child's date of birth, the state and grade you selected, and an optional name if you type one. All of it is stored **only on your iPhone**, in the app's own storage, with iOS file protection enabled — meaning it is encrypted whenever the device is locked.

It is deliberately excluded from iCloud and iTunes backup, because a backup is a copy somewhere else. If you delete the app, this data is deleted with it. If you lose the phone, the data is gone; the cost is rescanning the card, which we consider the right trade for a child's medical record.

What is sent anywhere

Nothing.

ShotCheck contains no analytics, no crash reporting, no advertising identifier, and no third-party SDKs. A check in the source repository (Tools/checknonetwork.py) fails the build if any networking, analytics or identifier API is added, so this claim is enforced rather than remembered.

Some things do leave the app, and only when you choose them. In every case the app hands a file to iOS and iOS hands it wherever you point it; ShotCheck does not send it anywhere itself and never sees where it goes.

• Sharing or printing a summary. The nurse sheet, the transcription of the card, the clinic page, or the whole enrolment packet as one PDF. When you tap share or print, iOS hands the file to whichever app or printer you pick. What happens next is governed by that app, not by ShotCheck.
• Backing up a record. A file containing one child's record — the rows as read, the answers you gave, and your notes. It goes only where you send it.
• A calendar file. Dates from which each outstanding dose would start counting, as a standard .ics file you add to whichever calendar you use.
• Opening a state's website. The report links to the health department page it cites. Tapping it opens your browser and that site's own privacy terms apply.

These files contain your child's record. Treat them the way you would treat the booklet itself.

Children

ShotCheck is used by an adult on behalf of a child. It contains no accounts, no messaging, no advertising and no data collection of any kind, so there is nothing to disclose to or collect from a child.

Your rights

Because nothing is collected, there is nothing to request, correct, export or delete from us — we hold no data about you. To remove everything ShotCheck has stored, delete the app, or use About → Clear this record's rows.

Medical disclaimer

ShotCheck reads a document. It reports what a vaccination record appears to document and what it does not, against a state's published school requirements or CDC's civil-surgeon table. It does not provide medical advice and never states that a child needs a vaccine. The school nurse or the civil surgeon makes the determination.

Contact

Questions about this policy: lyw199228@gmail.com