Shadow OS Privacy Policy
Effective date: September 27, 2026.
Version: shadowos-privacy-2026-09-27.
Phoenix & Aura LLC (“Shadow OS,” “we,” “us”) provides the Shadow OS App and shadowos.io. This policy explains how we handle personal information in these Services. It covers private records, assessments, readings, Friends Mirror, accounts, purchases, and our website. Feature notices explain additional details when you use them.
The essentials: We use the information you choose to record to provide the features you request. Some features send relevant text or answers to AI providers. Your private records are not a public profile. Sharing a report, responding to Friends Mirror, or requesting an email can disclose information to the recipients described below. You can request access, correction, or deletion through the available controls or by contacting us.
This policy explains our practices; accepting it does not waive privacy rights or substitute for permission we must obtain for a particular use.
1. Information we handle
| Category and source | Examples | Main purposes |
|---|---|---|
| Account information you or a sign-in provider supply | Email, account identifier, authentication information, optional display name, account and communication preferences | Sign-in, account protection, linking supported App and web features, support |
| Choices and reflections you enter | Questions, intentions, chosen life area, recorded decisions, responses, notes, Look-back schedules and outcomes | Save and retrieve your records; classify relevant content; provide guidance, reminders, and readings |
| Optional state and assessment information you submit | Mood, energy, body sensations, questionnaire selections, confirmations, and other fields offered by the feature | Check-ins, self-assessment, contextual interpretation and reports |
| Results we create | Topic labels, assessment matches, patterns, generated explanations, report dates, source and version information | Deliver, explain, reopen and maintain results |
| Friends Mirror information | Inviter's chosen name, invitation link and status, recipient email when the inviter requests email delivery, respondent's chosen name, observations and optional comment | Deliver invitations, collect feedback, show it to the inviting report owner, prevent abuse |
| Purchase information from stores and our subscription service | Product, receipt or transaction reference, entitlement, renewal or expiry status, trial status, and account association | Activate and restore access, resolve purchase issues, detect fraud |
| Technical and operational information | IP address, browser or App version, device/operating-system information, time zone where supplied, request times, feature events, error and security records | Operate and secure the service, diagnose failures, maintain limits and understand usage |
| Communications and choices | Support messages, consent versions and times, marketing preference, delivery and unsubscribe status | Answer requests, send service messages, record your choices and honor them |
Not every feature collects every category. Information about feelings, physical condition, alcohol-related experiences, beliefs, or personal relationships may be sensitive under applicable law. Such answers can remain personal even if a name or account identifier is omitted. Use the available skip options and avoid submitting another person's sensitive details unnecessarily.
We receive Friends Mirror observations from the respondent, purchase information from the store and subscription provider, and account information from the sign-in method you choose. An invitation recipient may therefore be included before that person has used Shadow OS.
2. How we use information
We use information to provide the features you select; store and synchronize supported account records; generate and display results; deliver requested invitations, reports and reminders; manage purchases; respond to support and rights requests; and keep the Services reliable and secure. We also use operational information to diagnose problems, evaluate feature use, and improve the service. Private answer or record content is not made public merely because it is used to provide a feature.
We may keep or disclose information when reasonably necessary to meet legal obligations, investigate abuse, protect rights and safety, or establish, exercise or defend legal claims. These purposes do not create unlimited permission to reuse private content for unrelated activities.
We do not sell private decision records or assessment answers. We do not use that content to target advertisements. This statement is distinct from the treatment of website analytics identifiers, which are described in Section 6.
3. AI processing
AI processing is feature-specific. Relevant inputs may include the actual text you entered, selected questionnaire answers, recorded outcomes and contextual state information. It is not limited to anonymous counts. We explain the applicable sharing and request permission before sending personal information to a third-party AI where required.
| Feature | Information processed for that feature | AI provider / purpose |
|---|---|---|
| Ask | Question text, selected area and relevant clarification or original-question context | Anthropic: classify the question and support relevant routing or clarification |
| Record classification | Recorded statement, selected area, who the record concerns and the recorded decision response | Anthropic: assign topics and behavior labels |
| General Assessment | Selected answers and confirmations, matched using fixed rules to prepared text | No AI writing provider for new reports. Older saved reports may contain explanations previously written with Anthropic. |
| Weekly and Monthly Readings | Relevant saved choices, reflections, outcomes and state information for the reading, with available earlier context where used to describe change | OpenAI for the new reading-generation workflow; Anthropic for legacy generation where that workflow remains active |
We do not send Friends Mirror responses to an AI writing provider in the current General/Mirror feature. If that changes, we will update the notice and obtain any required permission before the new processing.
General Assessment and Friends Mirror do not send your answers to an AI writing provider. Content you voluntarily enter in other AI-assisted features can still contain identifying information. Please do not include payment credentials, passwords, or information unnecessary for the feature.
We do not use private records or assessment answers to train our own general-purpose AI models, and we do not authorize our AI providers to use these feature inputs to train their general-purpose models. The providers operate under their applicable commercial agreements and data-handling terms. Provider-side logging, retention, security review and legally required retention may differ from our own storage. Model-training restrictions do not mean zero retention or immediate deletion of every provider-held copy.
A saved AI-generated explanation is stored with its record or report. Automated validation does not mean the output is clinically validated or independently verified. We do not use these assessment reports to decide your eligibility for employment, credit, insurance or similar services.
4. Who receives information
We use service providers for specific operational functions, including:
- Supabase: account authentication, database storage and backend processing.
- Anthropic and OpenAI: the AI processing described above, for the workflows in which each is used.
- RevenueCat: purchase validation, entitlement and subscription management, using account/purchase identifiers and transaction information.
- Apple and Google: purchases and sign-in where you choose those services. Payment-card details are handled by the payment channel; Shadow OS does not need the full card number to activate Membership.
- Resend: service emails, report delivery, invitations and notifications, including the address and message content needed for that delivery.
- Website hosting and analytics providers: delivery of website/API requests and website measurement, including Vercel and Google Analytics where configured. Section 6 explains the website distinction.
Providers receive the information needed for their role, subject to applicable agreements. They may also process some information under their own policies, for example when you transact directly with an App store. Authorized people supporting Shadow OS may access information as needed to resolve issues, maintain the service, or meet security and legal obligations. We do not represent that all server-stored content is inaccessible to us through end-to-end encryption.
We may disclose information to authorities or advisers when legally required or reasonably necessary for the legal and safety purposes described above. In a merger, financing, sale or similar business transaction, relevant information may be reviewed or transferred under appropriate confidentiality and legal restrictions. Such a transaction does not remove existing privacy obligations or authorize incompatible use without the notice or permission required by law.
5. Friends Mirror, emails and sharing
A Friends Mirror respondent can see the inviter's chosen name and the questions. The invitation does not disclose the owner's assessment answers, report, or other friends' responses. The owner can see the respondent's submitted name, answers and comment. Names are user-supplied and are not independently verified. Anyone who obtains a valid forwarded invitation link may be able to respond.
If an owner asks us to email an invitation, we process the recipient's address and send the chosen inviter name and private link. This does not create an account or enroll the recipient in marketing. If the owner enables feedback notifications, the notification links back to the account rather than including the respondent's answers or comment.
When a General report is delivered by email, the email can contain the report and personal details reflected in it. It is sent to the verified address associated with the request. An email provider and anyone with access to that mailbox may be able to read it. A copy already sent remains subject to the recipient's own deletion and email-provider settings.
Share cards and exported content disclose the information included in the export. Review it before sharing. Closing an invitation or deleting content from Shadow OS cannot retract copies that recipients already saved or forwarded. Contact us if you need help identifying or removing feedback you submitted.
6. Website cookies and technical information
The website and the App have different storage and measurement mechanisms. Website sessions may use cookies or similar browser storage for sign-in, security and preferences. If you allow optional analytics through Cookie choices, the public website loads Google Analytics to process browser/device information, visited public pages, identifiers and interaction events. It is disabled before your choice and on private assessment/report pages. Rejecting analytics does not prevent use of accounts, assessments or reports. App permission settings do not automatically control website cookies.
You can control browser storage through your browser. Blocking necessary storage may prevent sign-in or other features. Use Cookie choices on the website to allow or reject optional analytics or change your choice. Withdrawal stops future analytics collection from that browser; it does not recall events already sent. A Global Privacy Control signal keeps optional analytics disabled. Browser “Do Not Track” is distinct from legally recognized opt-out signals; applicable opt-out obligations are addressed under Section 9.
7. Storage and retention
We keep information for the purposes described in this policy, taking account of the type of information, your choices, service needs and legal requirements.
- Account records and saved reports: generally remain associated with your account until you delete them or the account. Subscription cancellation by itself does not delete them. Lawful retention exceptions are explained below.
- Anonymous General reports: expire after 90 days; expired records are subject to scheduled deletion. When an anonymous report is moved into an account, its anonymous access ends and the account copy follows account retention.
- Current General Friends Mirror: invitation links expire after 30 days unless closed sooner. Closing or expiry stops new responses; existing feedback remains associated with the report until the report or owner account is deleted. Invitation-delivery records follow the associated report/account. Short-lived abuse-prevention entries for invitation email may remain for up to 48 hours.
- Email copies: content already delivered outside Shadow OS is controlled by the recipient and their provider. Our delivery and suppression records may be retained as needed to handle delivery, prevent abuse and honor opt-outs.
- Device-only content: may remain on the device until removed through available controls, local storage is cleared or the App is removed. Device backups and previously exported copies are separate.
- Other operational records: consent evidence, transaction records, security information and information needed for legal obligations or disputes may remain for as long as necessary for those purposes. Restricted backup copies may persist through the backup cycle. We do not use a retention exception as permission to continue ordinary report generation from deleted personal records.
Unlinked anonymous App content-capture records follow an 18-month retention period and monthly cleanup. Account-linked records follow the associated account and applicable deletion controls. Hashing an identifier does not automatically make related information anonymous. Information retained as anonymous must no longer reasonably identify or be linked back to you.
8. Your choices and deletion
Use available account settings to review preferences and delete your account; use report controls where individual deletion is offered. You may also contact support@shadowos.io for access, correction, export or deletion requests, or help withdrawing a processing permission. We may ask for information reasonably needed to verify the request and protect someone else's data.
App and website features using the same account can be affected by account deletion. It may remove saved reports, associated Mirror feedback and other linked records across both surfaces. It does not itself cancel an App-store subscription, remove records from a different account, or recall shared copies.
Where processing depends on consent, you can withdraw it for future processing without affecting the lawfulness of processing already performed. A feature may no longer work if it requires the processing you decline; unrelated features should remain available. Deletion is not the only way to contact us to withdraw permission.
Marketing choices are separate from service use. You can opt out through the available preference controls or unsubscribe link. Necessary account, security or requested service messages may still be sent. Push notifications can be managed through device settings and available App controls.
9. Regional rights and international processing
We are a U.S. business and use providers that may process information in the United States and other countries. A transfer does not remove rights provided by the law applicable to you. Contact us for information about the provider locations and transfer arrangements applicable to your information. Your location may give you additional rights concerning these transfers.
Depending on your location and which laws apply, you may have rights to access, correct, delete or obtain a copy of personal information; withdraw consent; restrict or object to certain processing; opt out of sale, targeted advertising or certain profiling; limit certain sensitive-information uses; appeal a decision on a request; and complain to a regulator. We will not unlawfully discriminate against you for exercising these rights. An authorized agent may act where permitted, subject to appropriate verification.
We respond within the periods required by applicable law and explain any permitted extension or refusal. Send a request or appeal to support@shadowos.io. Where applicable, we honor legally required browser opt-out signals. These conditional rights descriptions do not mean that every jurisdiction's statute applies to every user or every processing activity.
Where EEA or UK data-protection law applies, our ordinary processing bases are performance of the service contract, legitimate interests in operating and securing the service where those interests are not overridden by your rights, legal obligations, and consent where required. Processing special-category information requires an additional applicable legal condition; an ordinary service contract alone is not enough. Optional sensitive-context fields are identified in the relevant feature. Do not provide information you do not want processed for that feature, and use available skip choices. You may complain to your relevant data-protection authority.
Where consumer health data legislation requires a separate notice, that notice will describe the covered data, collection and sharing purposes, recipient categories and applicable rights. This general policy is not a substitute for a separately required notice or consent.
10. Security and children
We use technical and organizational measures intended to protect information, including access controls and encrypted transmission. No internet service can guarantee complete security. Please protect your account and use care with shared devices and exported content.
The Services are not intended for children under 13, or below a higher minimum age required where they live. Our Terms address parental permission for eligible minors. If you believe a child below the applicable minimum has provided information, contact us so we can investigate and take appropriate action.
11. Updates and contact
We will publish revisions with an effective date and give notice of material changes as appropriate. We will obtain additional permission where required before materially different processing. Prior records of consent are not rewritten to imply acceptance of a new version.
Controller/contact: Phoenix & Aura LLC. Email: support@shadowos.io. Business mailing address: 30 N Gould St #31910, Sheridan, WY 82801, United States.