Privacy Policy

ShootLedger is built by Oz LLC. We don't run a server that collects your data, we don't use advertising or analytics trackers, and we don't sell or share your information with third parties for marketing. The information you enter — your assignments, clients, venues, and so on — is stored on your device and synced privately through your own iCloud account using Apple's CloudKit, the same way Apple's own apps sync your data. Oz LLC does not have a copy of it or access to it.

The one exception is the optional shared venue directory, described below, where information you choose to share becomes visible to other ShootLedger users.

ShootLedger stores the information you add while using the app, including:

• Assignment details — titles, dates, times, and type of job
• Client information, including default rates and payment type
• Venue information, including addresses, notes, and Wi-Fi network details you choose to save
• Equipment you register, including serial numbers
• Mileage and expense entries
• Invoices and invoice line items you generate
• Model release signatures and release records you create
• Your business profile — business name, logo, and photographer signature used on generated documents
• FTP server addresses and login credentials you add for client delivery

This information is stored locally on your device and in your private iCloud database via Apple's CloudKit. It syncs automatically between your own iPhone and iPad when you're signed into the same iCloud account. Oz LLC does not operate a server that stores or has access to this data.

FTP usernames and passwords you add for client delivery are stored in the iOS Keychain — Apple's secure, encrypted credential store — separately from your regular synced data. They may sync across your own devices via iCloud Keychain, Apple's dedicated mechanism for credentials. ShootLedger uses them only to connect directly from your device to the server address you've entered; these credentials are never sent to Oz LLC or to any server other than the one you've configured.

Venue sharing is optional and off by default for every venue you create. If you turn sharing on for a venue, the information you've entered for it — including its name, location, general notes, and any Wi-Fi network details you've saved — is written to a shared, public database that other ShootLedger users can see and import from. This is meant to save photographers from re-discovering the same venue details shift after shift.

If you'd rather not make a venue's Wi-Fi details visible to other users, don't enable sharing for that venue, since shared venues are shared in full. You can turn sharing off again at any time, and other users can flag a shared listing they believe is inaccurate.

ShootLedger requests access to your location, while the app is in use, to log mileage for an assignment's drive for expense and tax tracking. Location is used only to calculate distance for the assignment you're actively tracking; it is stored as part of that assignment's data in your own private iCloud database, and is not transmitted to Oz LLC or any third party.

ShootLedger requests calendar access for two features you control: adding an assignment to your calendar, and importing events from a calendar you've subscribed to as new assignments. ShootLedger only reads or writes calendar events when you take one of these actions — it does not run in the background monitoring your calendar.

To show a forecast for an assignment, ShootLedger sends the relevant venue location and date to Apple's WeatherKit service. This request is subject to Apple's own privacy practices for WeatherKit. Oz LLC does not separately store or have access to this data.

ShootLedger uses the system photo picker to let you choose a business logo image for your profile. The app only receives the specific image you select — it does not request access to your full photo library.

When you generate an invoice, ShootLedger creates a PDF and a CSV file on your device, using the assignment, client, and business profile information already stored in the app. The CSV is formatted to match QuickBooks Online's own invoice import tool, so you can bring it into your own QuickBooks account yourself. ShootLedger does not connect to QuickBooks, does not use QuickBooks sign-in, and does not send any data to Intuit or any other party as part of this process.

If you purchase a ShootLedger Pro subscription, that purchase is handled entirely by Apple through the App Store and StoreKit. Oz LLC does not receive or store your payment card details — Apple's own privacy policy governs that transaction.

• We don't run analytics or crash-tracking SDKs that collect usage data about you
• We don't use advertising identifiers or show ads
• We don't sell your information to anyone
• We don't require creating a separate ShootLedger account — the app uses your existing Apple ID / iCloud sign-in

• Location, Calendar, and Photos access can be changed any time in iOS Settings > Privacy & Security.
• Venue sharing can be turned off per venue at any time from that venue's detail screen.
• Deleting data you've entered deletes it from your private iCloud database the next time your devices sync. Deleting the app removes the local copy from that device; your iCloud data can also be managed from iOS Settings > [your name] > iCloud > Manage Account Storage.
• Information you've shared to the public venue directory remains visible to other users until you turn sharing off for that venue.

ShootLedger is a business tool for working photographers and is not directed at children. We do not knowingly collect information from children.

If this policy changes in a meaningful way, we'll update the effective date above. Continued use of ShootLedger after an update means you accept the revised policy.

Questions about this policy or your data can be sent to support@shootledger.app.