Privacy
What Doneshot does with your data.
The short version: job photos, customer details and reports stay on your phone. Doneshot has no account and no server to upload them to. Last updated 21 September 2026.
What stays on your phone
Everything you create in the app is stored in a database and a photo folder on the device itself:
- Job photos, and any note you add to a photo
- Customer names and addresses
- Job titles, service types and your own job notes
- Your business profile — name, phone, email, licence number, logo and colour
None of it is uploaded. There is no Doneshot account, no sign-in, and no server holding your jobs. Deleting the app deletes all of it.
Location
If you grant location permission, Doneshot records where a photo was taken and prints those coordinates on the report, so the report can show the work happened at the address. The coordinates are stored with the photo on your device and included in the PDF you send. They are not sent to us. Location permission is optional, the app works without it, and Settings has a switch that keeps coordinates off the report even when the permission is granted.
Reports you send
The PDF is built on the phone and handed to the iOS or Android share sheet. You choose who receives it — a text, an email, whatever you already use. Doneshot is not a party to that and never receives a copy.
What we do collect
Doneshot uses PostHog for anonymous product analytics and crash reporting, so we can tell which parts of the app people actually use and find out when something breaks. That covers:
- Four events — a job created, a photo captured, a report generated, a report shared
- App opened and closed
- Crash and error reports, including the technical stack trace
- Device and app basics: model, OS version, app version
It does not include photos, customer names, addresses, note text, job titles, or your business details. Events carry counts and categories — a photo's phase, how many photos were in a report — never content.
The analytics identifier is a random value generated on first launch. It is not your name, email, or device advertising ID, it is not linked to your identity, and it is not used to track you across other apps or websites. IP-based location lookup is switched off, so your events are not resolved to a place.
App updates
The app checks for over-the-air updates from Expo's update service. That request tells Expo the app version, runtime version and the requesting IP address, in the way any HTTPS request does. No job data is included.
This website
If you enter your email on the Android waitlist, it is stored in Cloudflare Workers KV along with the date and the country code Cloudflare attaches to the request. It is used once, to tell you when the Android version is on Google Play. It is not sold, shared, or added to a newsletter. Ask and it is deleted.
What Doneshot never does
- No advertising, and no advertising identifiers
- No selling or sharing of personal data
- No third-party trackers on this site or in the app
- No access to your photo library beyond the single image you pick as your logo
Children
Doneshot is a tool for running a service business and is not directed at children under 13. We do not knowingly collect data from them.
Your choices
Deleting the app removes every job, photo and customer record it held — that data only ever existed on your device, so nothing is left behind on our side. To have analytics events or a waitlist email erased, or to ask what is held, email[email protected] and it will be done.
Changes
If what the app collects changes, this page changes with it and the date at the top moves. Doneshot is new, so that is likely to happen more than once.