Privacy Policy
This Privacy Policy explains how J&B Creations LLC (“J&B Creations,” “we,” “us”) handles information in connection with the HolyShot mobile app and the website at holyshot.cc (together, the “Service”). We built HolyShot to be respectful and privacy-minded: the photo you provide is used to create your portraits and is not retained afterward.
The short version
- Your selfie is sent securely, used for one generation, and not kept after your portraits are made.
- We don't use third-party advertising or analytics SDKs in the app, and we don't sell your personal information.
- Purchases are handled by the App Store and Google Play; we never see your card details.
- The photo-quality check runs on your device and doesn't leave it.
Information we collect
Photos you provide
To create portraits, you provide a selfie (taken with the camera or chosen from your photo library). This image is transmitted to our service solely to generate your portraits. It is not stored after the generation request completes.
Portraits we generate for you
The portraits HolyShot creates are stored on our infrastructure so we can deliver your gallery and let you view, save, or re-create images. You can save them to your device and delete them from the Service.
Purchase and entitlement information
HolyShot offers one-time purchases (“packs”) through the App Store and Google Play. Those platforms process your payment — we do not receive your payment-card details. We use RevenueCat to manage purchases and confirm which packs you own. This involves an app-generated identifier and your purchase/entitlement status, used to unlock what you bought and to restore purchases.
On-device photo check
Before generating, HolyShot uses on-device face detection (Google ML Kit) to check that your photo is well-lit and shows a single front-facing face. This check runs locally on your device and the analysis does not leave it.
Device and diagnostic data
To operate and protect the Service, we process limited technical data such as request metadata, error logs, and abuse-prevention signals (for example, to enforce per-purchase generation limits). We use this to run, secure, and improve the Service.
The website
Our website serves static pages and does not set advertising or cross-site tracking cookies. Standard server logs may be processed by our hosting provider to deliver and secure the site.
How we use information
- To generate your portraits and deliver your gallery.
- To unlock, manage, and restore your one-time purchases.
- To operate, secure, troubleshoot, and improve the Service and prevent abuse.
- To comply with legal obligations and enforce our Terms.
How your photo is handled
Your selfie is sent over an encrypted connection to our generation service (a Cloudflare Worker). The image is passed to an AI image model (Google Gemini) that produces your portraits. The resulting portraits are stored in our object storage (Cloudflare R2) and served to you through expiring, signed links. Your original selfie is not retained after the request completes.
Service providers we share with
We share information only with providers that help us run HolyShot, and only as needed to provide the Service:
- Apple App Store / Google Play — process your purchases.
- RevenueCat — manages purchase and entitlement status.
- Cloudflare — hosting, the generation Worker, image storage (R2), and the reel-render service.
- Google (Gemini) — the AI model that generates your portraits.
We do not sell your personal information and we do not share it for advertising.
Data retention
- Your selfie: not retained after the portrait is generated.
- Generated portraits: kept so we can provide your gallery, until you delete them or they are removed from the Service.
- Purchase status: retained as needed to honor and restore your purchases.
- Logs: kept for a limited period for security and troubleshooting.
Your choices and rights
You control the photo-library and camera permissions for HolyShot in your device settings. Depending on where you live, you may have rights to access or delete personal information. To make a request, contact us at hello@holyshot.cc and we'll respond as required by applicable law.
Children
HolyShot is a general-audience app and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Security
We use encryption in transit, scoped access controls, and signed, expiring links to protect data. No method of transmission or storage is perfectly secure, but we work to safeguard your information.
International users
We are based in the United States and process information there and with the providers listed above. By using the Service, you understand your information may be processed in the United States and other countries.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll revise the effective date above and, where appropriate, provide additional notice.
Contact us
Questions about this policy or your information? Email hello@holyshot.cc.
J&B Creations LLC · Michigan, USA