Legal
Privacy
Shadowmark is a place to be honest, so how your words are handled matters. A plain-language summary, a working draft we’ll formalise before launch.
Updated September 2026
The short version
- Your conversations, dreams and challenge reports are encrypted at rest, isolated to your account, and kept until you delete your account.
- AI providers write your replies, in EU data centers. They keep none of what you share and never train on it.
- With your consent, AI builds a private profile of your patterns so replies know you. Withdraw consent in Settings and the profile is deleted.
- No ads, and nothing about you is ever sold.
- Export or delete all of it, anytime, from Settings.
What we collect
Your account email, the messages you send, dreams you record, what you report back on your challenges, and any context you choose to share: the year you were born and the country you live in, your background, the patterns you’re working on, the philosophical lenses you prefer. Nothing about your inner life is required.
Shadowmark is for people 18 and over. We ask only for the year you were born, never the date: it lets replies take your stage of life into account, and a year that says you’re under 18 stops the account before it starts.
How it’s protected
Your conversations, your dreams, and what you report back on your challenges, with Shadowmark’s replies, are encrypted at rest and isolated to your account at the database level, so none of it is readable by other users. Traffic is served over HTTPS.
AI processing
Shadowmark’s replies, dream readings and insights are written by AI models from Anthropic, and models from Google note the mood of each message and keep your private profile up to date. Both are reached through Vercel’s AI Gateway, and Anthropic’s models run on Google Cloud or Amazon Web Services. To write them, Shadowmark sends those models what you write and what shapes the answer: the earlier messages in the conversation, the dream you’re exploring, what you’ve shared under My context, your name if you’ve added one, your active challenges and how your recent ones went in your own words, the themes of your recent dreams, whether you’ve recently told Shadowmark you’re struggling, and a private profile of your patterns that AI builds from your conversations and dreams. Each message you send is also labelled by AI with the state it was written in and what it’s about; the labels are stored with it and shape the replies and that profile.
Every request is sent with zero data retention: neither the gateway nor the model providers store what is sent, and none of it is used to train AI models. It is used only to produce what Shadowmark shows you, never to advertise to you.
This happens only with your consent. Because what you write may be about your mental health, we ask for it explicitly before you start using Shadowmark, separately from agreeing to the Terms and this policy, and again if you withdraw it or this policy changes. It is the basis on which we send what you write to AI providers and build your profile. You can withdraw it at any time in Settings, under Shadowmark’s AI: nothing more is sent, the private profile built from what you write is deleted along with your insights and the labels on your messages, and Shadowmark asks again before you can go on. What you’ve written stays in your account, and you can still export it or delete it.
Where it goes
Everything you write is stored in the EU, Shadowmark’s servers run in the EU, and the AI models that write your replies run in EU data centers. Vercel, Anthropic, Google and Amazon are US companies, and a request may pass through their networks outside the EU on its way to the model. Those transfers are covered by safeguards the GDPR recognises, such as the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses. Write to us for a copy of them.
Subscriptions go through Apple’s App Store, and RevenueCat, a US company, keeps a record of your plan and purchases under your account’s ID, never what you write. On the website, Vercel Web Analytics counts page views without cookies.
Your control
You can edit or clear the context you’ve shared at any time. What you write is kept until you delete your account, and the profile built from it until you withdraw your consent or delete your account. Deleting your account permanently erases your conversations, dreams, challenges and their reports, and profile. You can also export all of it from Settings. See Security for the specifics.
Your rights
You can see, correct, export and delete what you’ve shared, withdraw your consent, and object to or ask us to restrict how it’s used: most of it from Settings, the rest by writing to us. If you think we’ve got something wrong, you can complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.
What we don’t do
We don’t sell your data, and there are no ads. Shadowmark is paid for by subscriptions, not by your attention.
Questions
Reach us at hello@shadowmark.app.