Privacy Policy for Prompt Shots

1. Who We Are

Data Controller: Boop Logics LLC
Website: https://booplogics.com
Product Website: https://prompt-shots.com
Privacy Contact: support@booplogics.com

2. Age Requirement

Prompt Shots is not directed to children under 13 years of age. You must be at least 13 years old to create an account and use the Service. If you are between 13 and the age of majority in your jurisdiction, you may only use the Service with the consent and supervision of a parent or legal guardian.

We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Parents or guardians who believe a child under 13 has provided information to us may contact support@booplogics.com.

3. Information We Collect

4. How We Use Your Information

We use the information we collect for the following purposes:

1. To provide the Service — create and manage your account, store and organize your prompts, and enable sharing features.
2. To process AI requests — send the text you provide (typed, scanned from camera, or extracted from uploaded images) to our AI provider to generate or refine prompts.
3. To enable sharing — let you share prompts via email and QR code, and look up Prompt Shots users by phone number when you choose to share with a contact.
4. To process payments — manage subscriptions, renewals, and access to paid features.
5. To communicate with you — respond to support requests and send essential service notices (e.g., account, security, or billing).
6. To protect the Service — detect, prevent, and respond to fraud, abuse, security incidents, and violations of our terms.
7. To comply with legal obligations — respond to lawful requests, enforce our agreements, and meet regulatory requirements.

We do notuse your prompts, uploaded images, or scanned text to train any AI models — ours or any third party's.

5. AI Processing

Prompt Shots uses Google's Gemini API (Google AI) to power its prompt-generation features.

• When you create a prompt — by typing, scanning text with the camera, or uploading an image containing text — the relevant text content is sent to Google's API over an encrypted connection to generate a smart prompt.
• Images themselves are processed locally or in transit to extract text and are not stored on our servers.
• Per Google's Gemini API terms, Google does not use API inputs or outputs to train its models.
• The prompts you generate and choose to save are stored in your Prompt Shots account.

You should avoid entering highly sensitive personal information (e.g., government identifiers, financial account numbers, health records) into prompts.

6. Sharing Prompts (QR Codes and Email)

• Email sharing: prompts you share by email are delivered to the recipient address(es) you specify.
• QR code sharing: a QR code generated by Prompt Shots may be scanned by anyone with access to the code, and the linked prompt will be viewable by anyone who scans it. You are responsible for deciding which prompts to share via QR and with whom you share the code. Do not place sensitive information in prompts that you share via QR.
• Contact sharing:when you select a contact in your device address book to share a prompt with, we send only the selected contact's phone number to our servers in order to identify a matching Prompt Shots user. We do not upload, store, or analyze your full contacts list.

7. How We Share Information

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We share information only with the following categories of service providers, strictly to operate the Service on our behalf:

Each provider is contractually required to protect your information and use it only for the purposes we direct.

We may also disclose information when:

• Required by law, court order, subpoena, or other valid legal process;
• Necessary to protect the rights, property, or safety of Boop Logics, our users, or others;
• Part of a corporate transaction such as a merger, acquisition, or asset sale (in which case we will provide notice and continue to honor this policy).

8. Security

We take reasonable measures to protect your information:

• Encryption in transit: all communication between the app/website and our servers uses HTTPS/TLS.
• Password protection: passwords are stored as one-way hashed values; we never store passwords in plain text.
• Access controls: access to production data is restricted to authorized personnel.
• Hosting: data is stored on Amazon Web Services (AWS), which provides industry-standard physical and network security.

No system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you as required by applicable law.

9. Data Retention

• Account information and stored prompts: retained for as long as your account is active.
• Inactive accounts: if your account has had no activity for 24 months, we may notify you and then delete or anonymize the associated data.
• Camera captures and uploaded images: not stored after text extraction.
• Backups and logs: residual data may persist in encrypted backups for up to 90 days after deletion, after which it is overwritten.
• Legal and financial records: payment and tax records are retained as required by applicable law (typically up to 7 years).

10. Your Rights and Choices

You have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — delete your account and associated data.
• Portability — request a copy of your data in a portable format.
• Restriction / Objection — restrict or object to certain processing (where applicable under GDPR/UK GDPR).
• Withdraw consent — withdraw consent where processing is based on consent.

Account Deletion

You can delete your account directly from within the Prompt Shots app at any time (Settings → Delete Account). See our Account Deletion page for the full instructions and a fallback for users who can no longer sign in. Upon deletion request:

• Your account, stored prompts, and personal information will be fully deleted within 30 days.
• Residual data may persist in encrypted backups for up to 90 days before being overwritten.
• We may retain limited information where required by law (e.g., financial records).

You may also email support@booplogics.com to exercise any of these rights. We will respond within the timeframes required by applicable law (generally 30 days under GDPR; 45 days under CCPA).

11. GDPR Notice (EU / UK / EEA Users)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies:

• Legal bases for processing: we process your personal data on the bases of (a) performance of a contract (providing the Service you signed up for), (b) legitimate interests (operating, securing, and improving the Service), (c) consent (where required, e.g., for certain permissions or cookies), and (d) legal obligation.
• International data transfers: your data may be transferred to and processed in the United States or other countries. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.
• Right to lodge a complaint: you have the right to lodge a complaint with your local data protection authority.

To exercise any GDPR right, email support@booplogics.com.

12. CCPA Notice (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (as amended by the CPRA):

• Right to know what personal information we collect, use, disclose, and (if applicable) sell or share.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing of personal information. We do not sell or share your personal information as those terms are defined under the CCPA.
• Right to non-discrimination for exercising any of these rights.

To exercise these rights, email support@booplogics.com. We may need to verify your identity before fulfilling the request.

13. Canadian Users (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct your personal information. To exercise these rights, contact support@booplogics.com.

14. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services (e.g., Apple, Google, Stripe). This Privacy Policy does not apply to those third parties. We encourage you to read their privacy policies before providing them with your information.

15. Do Not Track

Some browsers offer a "Do Not Track" signal. There is no universally accepted standard for how to respond to these signals. At this time, we do not respond to Do Not Track signals.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy;
• Notify you through the app, by email, or by posting a notice on our website, as appropriate.

Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Boop Logics LLC
Email: support@booplogics.com
Website: https://prompt-shots.com
Company Website: https://booplogics.com