Your photos stay yours. Shuttered stores the photos you import in an encrypted vault on your device. The encryption key never leaves your device. We cannot see your photos and neither can anyone who gets hold of your phone without your passcode.
Backup (Plus, Pro and Family). If you turn on backup, your photos are encrypted on your device first and only the encrypted copy is uploaded. Our servers store ciphertext and the file size, nothing we can open.
Share links (Pro and Family). When you create a share link, the selected photos are uploaded so the recipient can view them in a browser. They are removed automatically when the link expires, reaches its view limit, or when you revoke it.
Account. You can use Shuttered without an account. On first launch the app creates an anonymous profile tied to a random device id so your plan and settings work. You may add an email address later for backup and restore. You can delete your account and all server data from the app at any time (Settings > Account).
Subscriptions are processed by Apple or Google and verified through RevenueCat. We receive the subscription status, not your payment details.
Advertising. The free plan shows ads served by AppLovin MAX and its partners. In the EU and UK you are asked for consent first and can change it in Settings > Privacy. Paid plans show no ads.
Analytics. We record anonymous product events (for example that an import finished or an ad was shown). These never contain photos, file names or locations.
Contact. Questions? Email support@shuttered.app.