Live punch tracking runs on your iPhone. Cloud AI coaching is optional and needs your permission. We do not sell your personal information or use your footage for advertising.
Camera and recordings
Shadow uses your camera to track punches and movement during a round. Live tracking runs on your device. Saved rounds can include video, thumbnails, movement points, punch counts, coach calls and technique feedback. Video can show your face and surroundings. Shadow does not need microphone access for its spoken coach calls.
Your recordings are kept in the app on your phone. When you are signed in, eligible video and thumbnail backups are encrypted on your device before upload. Their encryption key is kept in your iCloud Keychain and is not sent to our server. A lost key can make those backups unreadable. Wi-Fi uploads are the default; you can enable cellular uploads in Privacy & data.
Optional AI coaching
Before your first cloud review, Shadow explains what is shared and asks for permission. If you allow it, selected exercise frames, movement points and round details are sent to our coaching server, then through OpenRouter to InferenceNet in the United States, which runs the Kimi model. Frames can include your face and surroundings. We do not send your full recording for this review.
Our coaching server processes the selected frames for the request and does not save them as review images. We save the coaching result and limited request information, such as status, timestamps, model and token or cost totals, to deliver the result, handle retries and control abuse and spending.
We select an endpoint configured for zero data retention and prohibit provider training through the request settings. These controls apply to inference content. They do not mean all operational, security, billing or legally required records are immediately deleted. See OpenRouter's privacy policy and InferenceNet's retention information.
Your choice is remembered for future reviews. You can turn off automatic reviews or withdraw permission in Privacy & data. Withdrawing permission stops future AI requests; it does not undo processing already completed. AI feedback can be mistaken and is not medical advice.
Your account and membership
Sign in with Apple gives us an account identifier and the name or email address Apple provides. If you use Hide My Email, we receive Apple's relay address. Supabase handles authentication and stores your profile, round records, coaching results and cloud backups.
Apple handles App Store payments. RevenueCat helps us verify your membership using an app account identifier and purchase information. We do not receive your full payment-card details. Apple and RevenueCat may retain transaction records for billing, fraud prevention and legal obligations.
Movement sharing is a separate choice
Sharing movement data to help improve Shadow is optional and off by default in this release. If you enable it, we upload movement-point files linked to your account and rounds. These files contain coordinates and timing, rather than video pixels. They are not anonymous while linked to your account. You can turn sharing off in Privacy & data.
Apple DeviceCheck helps us limit abuse of an introductory review. We retain introductory-review and eligibility records so the same installation cannot repeatedly claim the introductory allowance. These records do not have an automatic deletion deadline at present. Contact us if you need help identifying or removing an introductory review.
Support and this website
If you contact us, we receive the information you choose to send, such as your email, device details, a description of the problem or an optional diagnostic log. Send only what is needed. Do not send passwords or payment-card details.
This website does not use advertising trackers or analytics cookies. Our hosting provider processes standard connection information, including IP addresses and request logs, to serve and protect the website.
Retention and deletion
We keep account and round information while needed to provide Shadow. Cloud video backup uses a limited set of saved rounds and may replace older backups. Local files can remain until you delete a round, delete your account or remove the app.
You can request account deletion from Account in the app, or contact privacy@shadowboxing.ai for help deleting account, cloud, introductory-review or support information. We may verify account ownership before fulfilling a request. Some billing, security or legally required information may need to be retained. Copies in backups and processor systems may take additional time to clear.
Deleting your account does not cancel an Apple subscription. Manage or cancel it in iPhone Settings, under your name and Subscriptions. Apple also lets you manage apps using Sign in with Apple.
Younger users
Shadow is intended for people aged 13 and older. Do not send cloud AI content from anyone below 13 or below the applicable age for digital consent. If you are under 18, a parent or guardian must review the AI notice and provider terms, give any required permission, and supervise your use. The local age and consent requirements where you live also apply. Shadow is not directed at children under 13.
Your rights and international processing
You may have rights to access, correct, export or delete your personal information, withdraw consent or object to certain processing. These rights depend on where you live. Email privacy@shadowboxing.ai with your request. We do not need your password.
Shadow operates from Hong Kong and uses service providers in other countries, including the United States. Your information may be processed outside your country. We use access controls, encryption and limited disclosure for the purposes described here. No system can guarantee complete security.
Changes and contact
We update this page when our practices change and show the effective date above. If an AI recipient or a material use changes, we update the relevant notice and request new permission when needed. For privacy questions, contact privacy@shadowboxing.ai. For app help, visit Support.