Privacy Policy

Last updated: March 9, 2026

Phoenix & Aura LLC ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Shadow OS mobile application ("App") and any related services (collectively, the "Services"). Shadow OS is a product of Phoenix & Aura LLC.

This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

Information you provide:

Data	Purpose	Required?
Email address	Account creation and authentication	Yes (for accounts)
Password	Account security (stored as a hash, never in plain text)	Yes (for accounts)
Intention text	Displayed on your reading result and stored in your history	No (optional, skippable)

Information generated by your use:

Data	Purpose	Stored where
Reading results (hexagram, dimension, directive, date)	Your personal reading history and pattern analytics	Supabase (cloud) or device (if no account)
Subscription status	Determining free vs. premium access	RevenueCat / App Store / Google Play
Wall number (lifetime purchasers)	Display on The Wall feature	Supabase (cloud)

Information we do NOT collect:

We do not collect your name, phone number, physical address, or location data.
We do not collect birth date, birth chart, or astrological data.
We do not use cookies or web tracking technologies in the App.
We do not collect device identifiers for advertising purposes.
We do not use any third-party analytics SDKs that track your behavior across apps.
We do not collect biometric data.

2. How We Use Your Information

We use your information solely for the following purposes:

Providing the Services: Storing your readings, displaying your history, and calculating pattern analytics.
Account management: Authenticating your identity and managing your subscription status.
Service improvement: Aggregated, anonymized usage data (e.g., total number of readings cast, most popular dimensions) may be used to improve the App. This data cannot be linked back to individual users.
Communications: Sending you push notifications related to the Services (e.g., daily practice reminders, evening reflection prompts), which you can disable at any time through your device settings.

3. What We Do NOT Do With Your Information

We do not sell, rent, or trade your personal information to anyone, for any reason.
We do not share your personal information with advertisers or data brokers.
We do not use your data to build advertising or marketing profiles.
We do not display ads in the App.
We do not share your intention text, readings, or personal data with any third party except as described in Section 4.
We do not use your data to train artificial intelligence or machine learning models.

4. Third-Party Services

We use the following third-party services to operate the App:

Service	Purpose	Data shared
Supabase	Database and authentication	Email, hashed password, reading data
RevenueCat	Subscription management	Anonymous user ID, purchase receipts
Apple App Store / Google Play	Payment processing	Payment handled entirely by Apple/Google; we do not see or store payment details

Each of these services has its own privacy policy. We encourage you to review them:

Supabase: supabase.com/privacy
RevenueCat: revenuecat.com/privacy

5. Disclosure of Information

We may disclose your information in the following limited circumstances:

Legal requirements: We may disclose your data if required to do so by law, or in response to valid requests by public authorities (e.g., a court order or government agency), including to meet law enforcement requirements.
Safety: We may disclose information if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Phoenix & Aura LLC, our users, or the public.
Business transfers: If Phoenix & Aura LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
With your consent: We may share information with your explicit consent.

6. Data Storage and Security

Your data is stored securely on Supabase's cloud infrastructure with Row Level Security (RLS) enabled, meaning each user can only access their own data. Passwords are hashed using industry-standard algorithms and never stored in plain text. All data transmission between the App and our servers is encrypted using HTTPS/TLS.

If you use the App without an account, your reading data is stored locally on your device only and is not transmitted to our servers.

While we implement commercially reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

Active accounts: Your data is retained as long as your account exists and is active.
Deleted accounts: When you delete your account (available in the App's settings), all your personal data — including readings, intention text, and account information — is permanently deleted from our servers within 30 days.
Local data: Data stored on your device (for users without accounts) remains until you delete the App or clear App data.
Anonymized data: Aggregated, anonymized data that cannot identify you may be retained indefinitely for service improvement purposes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: View your data through the App's Archives and Calendar features.
Deletion: Delete your account and all associated data through the App's settings.
Export: Export your reading history (available to premium users).
Opt out of communications: Disable push notifications at any time through your device settings or the App.
Rectification: Request correction of inaccurate personal data.
Restriction: Request restriction of processing of your personal data.
Portability: Request a copy of your data in a portable format.

To exercise any of these rights, contact us at support@shadowos.io. We will respond within 30 days.

9. Children's Privacy

Shadow OS is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@shadowos.io.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to know: You may request information about what personal information we collect, use, and disclose.
Right to delete: You may request deletion of your personal information.
Right to opt out of sale: We do not sell personal information. No opt-out is necessary.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, contact us at support@shadowos.io.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, object to processing, and port your data.

Our legal bases for processing your data are:

Consent: By creating an account and using the Services.
Contract: Processing necessary to provide the Services you requested.
Legitimate interest: Processing necessary for our legitimate interests (e.g., improving the Services), where your rights do not override those interests.

You may withdraw consent at any time by deleting your account. To exercise your rights or file a complaint with your local data protection authority, contact us at support@shadowos.io.

12. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers and service providers are located. By using the Services, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your jurisdiction.

13. Do Not Track

The App does not track users across third-party websites or services, and we do not respond to Do Not Track signals because we do not engage in tracking.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective when posted unless otherwise stated. We will notify you of material changes by posting the updated policy in the App or by other reasonable means. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

15. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, contact us at:

Phoenix & Aura LLC
Operating as Shadow OS
Email: support@shadowos.io