Last updated: 20 October 2026
ShotNest ("the App") is a screenshot organizer for Android published by WebAppyPie ("we", "us"). This policy explains what the App accesses, how it is used, what stays on your device, and what is sent to other services. Questions: support@webappypie.com
1. Summary
- ShotNest organizes your screenshots on your device. Screenshot images, the text recognized in them, categories, folders and Vault contents are not uploaded to WebAppyPie or anyone else by the App.
- No account or registration is needed.
- The App does connect to the internet for: push notifications and in-app messages, advertising (Free version), promotions, Google Play purchases, and a service-status check. Section 4 lists exactly what is sent.
- We do not sell personal information and do not use your screenshots for advertising.
2. Information the App accesses on your device
Depending on your Android version, the permissions you grant and the features you use, ShotNest may access:
- Screenshot images and file information (file name, size, date, location in your photo library) so it can find and organize screenshots.
- Text recognized inside screenshots, used for search, categories and details such as dates, amounts and codes.
- Data ShotNest stores locally: categories, collections and folders, favorites, folder rules, the search index, duplicate and cleanup results, preferences, and your Premium status.
- Vault items you choose to add, stored encrypted on the device.
- A screenshot you ask the App to capture with Quick Capture (see section 6).
- The result of device authentication (success or failure) when you use fingerprint, face or device-credential protection. Android performs the verification. ShotNest does not receive or store your fingerprint, face image or biometric template.
- Your PIN, if you set one. It is stored on your device as a salted, hashed value in Android secure storage, never as plain text.
3. How information is used
To discover, scan and organize screenshots; run text recognition (OCR), categorization, search indexing and duplicate or cleanup analysis; provide collections, Smart Folders, favorites, the Vault and App Lock; capture a screenshot you requested; verify and restore Premium; show notifications you have chosen to receive; show ads to Free users; and keep the App working and secure.
4. Information that leaves your device
Service When Data involved Purpose WAPCentral (WebAppyPie),wapcentral.webappypie.com
Notifications, if the build and your settings allow it
A push token from Google Firebase Cloud Messaging, a random device ID generated by the App (not your Android ID, advertising ID or any account), the platform (Android), and which notifications you have read
Deliver and display notifications and in-app messages
WAPCentral
Free version, after the App is unlocked
The App's ID and key; campaign ID, event type (impression or click) and ad format for house ads and promotions; app version and platform
Remote configuration, house ads, promotions, measure whether they were shown
WAPCentral
App start and resume
The App's ID and key only (service-status check)
Show a notice if the service is paused
Google AdMob (Google Mobile Ads SDK)
Free version, when ads are enabled and you have not declined where consent is required
Advertising ID, IP address, device and app information, and ad interactions, handled by Google under its policies
Show and measure ads
Google Play (Billing, in-app review, Play services)
When you buy, restore or rate
Purchase and entitlement status and related account and device information, handled by Google
Premium purchase and restore, rating
Firebase Cloud Messaging (Google)
Notifications
Push token and message delivery data
Push delivery
Image hosts
When a notification or promotion includes a picture
Your IP address and standard request data are visible to the host of that image over HTTPS
Display the picture
Support page or email
Only if you choose to contact us
Whatever you submit
Answer your request
Like any internet request, these requests reveal your IP address, the time of the request and basic technical details to the receiving server.
Never sent by the App to WebAppyPie, ads, promotions or notification services: screenshot images, recognized text, file names, categories, folders, Quick Capture images, or Vault contents.
The App includes no analytics or crash-reporting service of its own. Firebase Analytics is not included.
5. On-device screenshot processing
Screenshot images, OCR text, categorization, duplicate analysis and search indexes are created and kept on your device. OCR uses Google ML Kit text-recognition models bundled inside the App, including Latin, Chinese, Devanagari, Japanese and Korean scripts. ShotNest does not upload screenshots or recognized text for AI processing.
To read an image by path on newer Android versions, the photo-library component keeps a working copy of indexed images in the App's private storage. These copies stay on your device and are removed when you clear the App's storage or uninstall.
"On-device" describes screenshot processing and organization, not every function: notifications, ads, promotions, purchases, ratings and support need an internet connection.
6. Permissions
Permission / access Why Control Photos / images (READ_MEDIA_IMAGES; READ_EXTERNAL_STORAGE on Android 12 and lower)
Core function: find and organize your screenshots
Grant or revoke in Android Settings. On Android 14 and later you can allow selected photos only; discovery is then limited to what you select
Selected photos (READ_MEDIA_VISUAL_USER_SELECTED)
Supports the "selected photos" choice on Android 14+
Same as above
Biometric / fingerprint (USE_BIOMETRIC, USE_FINGERPRINT)
App Lock and Vault unlock through Android's own prompt
Optional; PIN or device credential can be used instead
Internet
Notifications, ads, promotions, purchases, service check, support links
Cannot be separately revoked on Android; the local features work offline
Notifications (POST_NOTIFICATIONS, Android 13+)
Show push notifications
Requested only when you choose to allow notifications in the notifications screen, never at launch. Change it in Android Settings
Screen capture + foreground service (FOREGROUND_SERVICE, FOREGROUND_SERVICE_MEDIA_PROJECTION)
Quick Capture: capture one screenshot you asked for
Android shows its own consent dialog every time. A visible notification is shown while capturing. Declining captures nothing
Google Play Billing
Buy and restore Premium
Handled by Google Play
Advertising ID and ad-services permissions (AD_ID, ACCESS_ADSERVICES_*), added by the Google Mobile Ads SDK
Used by Google AdMob for advertising in the Free version
Reset or delete your advertising ID, or opt out of personalization, in Android Settings → Google → Ads; Premium removes ads
Wake lock, push receive
Added by Firebase Cloud Messaging so notifications can arrive
n/a
If image permission is denied or revoked, automatic discovery is limited. You can choose "selected photos" access where Android offers it. ShotNest does not delete an original screenshot without an action you confirm.
Quick Capture. After you tap Quick Capture and accept Android's screen-capture dialog, the App takes one screenshot after a countdown, saves it to Pictures/ShotNest on your device, and indexes it like any other screenshot. The capture session ends immediately. Content that an app marks as secure (for example some banking screens) appears black. The App does not use an accessibility service and does not record video or audio.
7. Vault, App Lock, PIN and biometrics
- Vault: files you add are encrypted on the device with AES-256-GCM; the keys are protected by the Android Keystore. Vault contents are never uploaded and are excluded from Android cloud backup and device transfer. If you uninstall the App, clear its storage or lose access to unlock it, Vault contents cannot be recovered.
- App Lock and Vault unlock use Android biometric or device-credential verification, or the App's PIN. PIN hashes and related secrets are kept in Android secure storage. Repeated wrong PIN attempts trigger a temporary lockout.
- Folder PINs, if you set them, are stored on the device as salted hashes.
8. Notifications
Notifications are delivered through WAPCentral and Google Firebase Cloud Messaging. Notification content is written by us and never contains your screenshots, text or Vault data. You can turn notifications off in Android Settings at any time.
9. Advertising and promotions
- Free version: may show ads. Google AdMob serves third-party ads; where required (for example in the EEA, UK and some other regions) Google's consent form is shown first and ads are requested only if consent allows. WAPCentral may also show house ads and promotions for WebAppyPie.
- Premium: removes ads, and the App stops requesting ad configuration.
- Ads appear in places such as the Home and Search screens. Ads never use your screenshots or recognized text.
- Google's use of data is described at policies.google.com/privacy and policies.google.com/technologies/partner-sites.
10. Purchases
Premium is a one-time purchase handled by Google Play. We do not receive your payment-card details. The App checks your purchase and entitlement status with Google Play to unlock or restore Premium. Premium status is stored locally.
11. Backup
If Android backup is turned on for your device, Android may back up some of ShotNest's local data (for example categories, the search index including recognized text, and preferences) to your Google account, under your Google settings. We do not receive these backups. The Vault and secure-storage secrets are excluded from backup and transfer.
12. Storage, retention and deletion
- ShotNest keeps its indexes, categories, preferences, lock settings and related data on your device while you use the App.
- You can remove this data with a reset option where available, by clearing the App's storage in Android Settings, or by uninstalling. This does not automatically delete the original screenshots stored in your photo library. Items moved to the Vault are removed from the Vault if you clear storage or uninstall.
- Screenshots deleted through ShotNest are removed only after your confirmation and may stay in your device's trash for a period set by Android or your gallery.
- Server data: notification registration (push token, random device ID, read state) and house-ad or promotion event data are stored by WAPCentral for [retention period to be confirmed by WebAppyPie, e.g. up to X days / until you uninstall and the token becomes invalid]. Support requests may be kept as reasonably needed to answer you, keep support records, prevent abuse and meet legal obligations.
- To ask us to delete data we hold about you, email support@webappypie.com and include the device ID if you can find it (you can usually just describe the device and approximate dates).
13. Security
ShotNest follows a local-first design and uses reasonable safeguards: on-device processing, hashed PINs, an encrypted Vault, and HTTPS for network requests. No method of storage or transmission is completely secure.
14. Children
ShotNest is not directed to children and does not knowingly collect personal information from children through an account or our servers. If you believe a child sent personal information to us (for example through support), contact us and we will review and delete it where required.
15. External services
The App may open Google Play, WebAppyPie pages, your email app or your browser. Those services operate under their own terms and privacy policies.
16. Your choices
Revoke permissions in Android Settings; turn notifications off; use "selected photos" access; decline or change ad consent where offered; reset your advertising ID; use Premium to remove ads; clear or uninstall to remove local data; contact us to ask about data we hold.
17. Changes
We may update this policy when the App, the law or our practices change. We will update the "Last updated" date and give further notice where required. If we add analytics, crash reporting, cloud processing or any SDK that collects additional information, this policy will be updated before release.
18. Contact
WebAppyPie, support@webappypie.com, https://webappypie.com/support