Privacy Policy
Last updated: April 20, 2026
Phoenix & Aura LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Shadow OS mobile application ("App") and any related services (collectively, the "Services"). Shadow OS is a product of Phoenix & Aura LLC.
This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Services, you consent to the practices described in this Privacy Policy.
1. Information We Collect
Information you provide:
| Data | Purpose | Required? |
|---|---|---|
| Email address | Account creation and authentication | Yes (for accounts) |
| Password | Account security (stored as a hash, never in plain text) | Yes (for accounts) |
| Intention text | Displayed on your reading result and stored in your history | No (optional, skippable) |
Information generated by your use:
| Data | Purpose | Stored where |
|---|---|---|
| Reading results (signal number, life area, guidance direction, date) | Your personal reading history and pattern analytics | Supabase (cloud) or device (if no account) |
| Subscription status | Determining free vs. premium access | RevenueCat / App Store / Google Play |
| Wall number (lifetime purchasers) | Display on The Wall feature | Supabase (cloud) |
Information we do NOT collect:
- We do not collect your name, phone number, physical address, or location data.
- We do not collect birth date, birth chart, or astrological data.
- We do not use cookies or web tracking technologies in the App.
- We do not collect device identifiers for advertising purposes.
- We do not use any third-party analytics SDKs that track your behavior across apps.
- We do not collect biometric data.
2. How We Use Your Information
We use your information solely for the following purposes:
- Providing the Services: Storing your readings, displaying your history, and calculating pattern analytics.
- Account management: Authenticating your identity and managing your subscription status.
- Service improvement: Aggregated, anonymized usage data (e.g., total number of readings cast, most popular dimensions) may be used to improve the App. This data cannot be linked back to individual users.
- Communications: Sending you push notifications related to the Services (e.g., daily practice reminders, evening reflection prompts), which you can disable at any time through your device settings.
3. What We Do NOT Do With Your Information
- We do not sell, rent, or trade your personal information to anyone, for any reason.
- We do not share your personal information with advertisers or data brokers.
- We do not use your data to build advertising or marketing profiles.
- We do not display ads in the App.
- We do not share your intention text, readings, or personal data with any third party except as described in Section 4.
- We do not use your personal data to train our own artificial intelligence or machine learning models. We do use a third-party AI service (Anthropic's Claude API) to generate weekly and monthly pattern summaries for premium subscribers — see Section 4 for exactly what is and is not sent, and note that Anthropic does not train its models on data submitted through the Claude API.
4. Third-Party Services
We use the following third-party services to operate the App:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Email, hashed password, reading data |
| RevenueCat | Subscription management | Anonymous user ID, purchase receipts |
| Apple App Store / Google Play | Payment processing | Payment handled entirely by Apple/Google; we do not see or store payment details |
| Anthropic PBC (Claude API) | AI-assisted generation of weekly and monthly pattern summaries for premium subscribers | Reading counts for the period, archetype label, dominant guidance direction, an emotional-temperature label derived from emotion tags, and the number of readings used to generate the summary. No question text, no journal notes, no name or email, no identifier. |
Each of these services has its own privacy policy. We encourage you to review them:
- Supabase: supabase.com/privacy
- RevenueCat: revenuecat.com/privacy
- Anthropic: anthropic.com/legal/commercial-terms
AI-assisted summary generation (premium feature)
When a premium subscriber's weekly or monthly pattern summary is generated, Shadow OS sends a small set of aggregate signals to Anthropic's Claude API and receives back generated prose. The data we send is limited to:
- reading counts for the period
- archetype label and dominant guidance direction
- an emotional-temperature label derived from your emotion tags
- the number of readings used to generate the summary
We do not send question text, journal notes, your name or email address, or any identifier that could be used to contact you. Anthropic processes this data solely to generate the prose that is returned to Shadow OS and stored on your account. Under Anthropic's Commercial Terms, inputs submitted through the Claude API are not used to train Anthropic's models.
You can delete your account at any time from the App's settings. Account deletion cascades through every Shadow OS table and permanently removes every record that could be used as an input to future AI summary generation — reading history, reflections, archetype baseline, questionnaire responses, and the account itself. Generated summary prose that is already stored on your account is removed as part of the same cascade. To request deletion of historical records that are no longer on your account but may remain in backups, contact support@shadowos.io.
5. Disclosure of Information
We may disclose your information in the following limited circumstances:
- Legal requirements: We may disclose your data if required to do so by law, or in response to valid requests by public authorities (e.g., a court order or government agency), including to meet law enforcement requirements.
- Safety: We may disclose information if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Phoenix & Aura LLC, our users, or the public.
- Business transfers: If Phoenix & Aura LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- With your consent: We may share information with your explicit consent.
6. Data Storage and Security
Your data is stored securely on Supabase's cloud infrastructure with Row Level Security (RLS) enabled, meaning each user can only access their own data. Passwords are hashed using industry-standard algorithms and never stored in plain text. All data transmission between the App and our servers is encrypted using HTTPS/TLS.
If you use the App without an account, your reading data is stored locally on your device only and is not transmitted to our servers.
While we implement commercially reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
- Active accounts: Your data is retained as long as your account exists and is active.
- Deleted accounts: When you delete your account (available in the App's settings), all your personal data — including readings, intention text, and account information — is permanently deleted from our servers within 30 days.
- Local data: Data stored on your device (for users without accounts) remains until you delete the App or clear App data.
- Anonymized data: Aggregated, anonymized data that cannot identify you may be retained indefinitely for service improvement purposes.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: View your data through the App's Archives and Calendar features.
- Deletion: Delete your account and all associated data through the App's settings.
- Export: Export your reading history (available to premium users).
- Opt out of communications: Disable push notifications at any time through your device settings or the App.
- Rectification: Request correction of inaccurate personal data.
- Restriction: Request restriction of processing of your personal data.
- Portability: Request a copy of your data in a portable format.
To exercise any of these rights, contact us at support@shadowos.io. We will respond within 30 days.
9. Children's Privacy
Shadow OS is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@shadowos.io.
10. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know: You may request information about what personal information we collect, use, and disclose.
- Right to delete: You may request deletion of your personal information.
- Right to opt out of sale: We do not sell personal information. No opt-out is necessary.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise your rights, contact us at support@shadowos.io.
11. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and port your data.
Our legal bases for processing your data are:
- Consent: By creating an account and using the Services.
- Contract: Processing necessary to provide the Services you requested.
- Legitimate interest: Processing necessary for our legitimate interests (e.g., improving the Services), where your rights do not override those interests.
You may withdraw consent at any time by deleting your account. To exercise your rights or file a complaint with your local data protection authority, contact us at support@shadowos.io.
12. International Data Transfers
Your data may be transferred to and processed in the United States, where our servers and service providers are located. By using the Services, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your jurisdiction.
13. Do Not Track
The App does not track users across third-party websites or services, and we do not respond to Do Not Track signals because we do not engage in tracking.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes become effective when posted unless otherwise stated. We will notify you of material changes by posting the updated policy in the App or by other reasonable means. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.
15. Contact
If you have questions, concerns, or requests regarding this Privacy Policy, contact us at:
Phoenix & Aura LLC
Operating as Shadow OS
Email: support@shadowos.io