Privacy & Cookie Policy
Last updated: June 13, 2026
Welcome to Shadowfy (the “App”). Your privacy is extremely important to us. On this page we explain, in clear language, what data we collect, why we collect it, and how we handle cookies and local storage. This policy is drafted in accordance with the General Data Protection Regulation (GDPR) and standard App Store / Google Play privacy guidelines.
1. Personal data: what do we store?
The GDPR requires clarity about what personal data is stored and what happens to it. We can be brief and transparent about this:
Your account
You can use Shadowfy as a guest. If you choose to register, you log in to sync your progress across devices.
- Registration: when creating an account, we use your email address and a password. The password is stored encrypted via our security partner Supabase; we cannot see your password ourselves.
Your profile & progress
- Settings: we save your preferences, such as your native/translation language, learning language, voice, audio speed, subtitle size, and daily goal.
- Learning data: we store the words you save, your listening history, your review (spaced-repetition) status, and any text you import. This is necessary so you can continue learning where you left off on any device.
Payment data
If you choose a Pro subscription, payment is handled directly by Apple (App Store) or Google (Google Play) as an in-app purchase. We also use RevenueCat to sync your subscription status across your devices. We never store your credit card details or bank account numbers on our own servers; Apple and Google process this data securely and encrypted.
Device & app data
When you use the app, we may collect basic technical information needed to keep the app working correctly, such as your operating system (iOS/Android) and app crash logs. We do not use this data to track your identity.
What we do NOT do
We never give your email address or personal data to third parties for marketing purposes. We do not sell your data.
2. AI processing
To generate audio, word explanations, translations, and illustrations, the text you look up, import, or play may be sent to trusted AI providers solely to perform the requested service:
- OpenAI — word explanations, translations, content generation, speech, and images.
- Google Cloud — text-to-speech audio.
These providers process the data only to perform the service. Please do not paste personal, confidential, or sensitive information into imported text.
3. Analytics and IP addresses
We want to improve our service, but not at the cost of your privacy.
- No IP tracking: we do not store IP addresses in our database to track your behavior.
- No advertising trackers: we do not use third-party advertising or marketing trackers.
4. Cookies and local storage
Like almost all modern apps, Shadowfy uses local storage on your device.
- Functional (necessary): a secure session token keeps you logged in, and your settings are remembered. Without it, you would have to sign in every time. These contain no readable personal data.
- This website: the contact form in the “Contact” section is embedded from Google Forms, which may set its own cookies when you interact with it.
5. Data retention and deletion
We keep your personal data (such as your saved words) as long as you have an active account.
Right to be forgotten: you are in charge of your own data. You can delete your account at any time in the App (Settings → Delete account). When you do, your personal data (email, progress, saved words) is erased from our database. This cannot be undone.
6. Security
- All traffic between your device and our servers is encrypted via SSL (HTTPS).
- Our database is managed by Supabase, a leading provider that meets strict security standards.
7. Third parties
We only share data with parties strictly necessary to operate the service:
- Supabase — database & secure login
- OpenAI — word explanations, translations, speech & images
- Google Cloud — text-to-speech audio
- Apple / Google — in-app payments
- RevenueCat — subscription status sync
- Vercel — website hosting
8. Contact
Questions about this policy, or want to know what data we hold? Reach us through our contact form.