Legal
ShadowClip does not collect, transmit, store, or share any personal data. This is not a policy commitment — it is a physical constraint enforced by the operating system.
network.client and no
network.server entitlements. macOS and iOS enforce this at the
kernel level. The app cannot make a network connection regardless of what any
policy document says.
Every image you process stays on your device. No pixel, no metadata, no filename, no detection result leaves your machine. There is no server to send it to.
ShadowClip stores your preferences locally using UserDefaults
(your chosen detection profile, redaction style, and per-category toggles).
This data lives only on your device, in your app container. It is not readable
by any other app or service, and it is deleted when you uninstall ShadowClip.
| Data | Where it lives | Leaves your device? |
|---|---|---|
| Images you process | Never stored — held in memory during the session only | No |
| Detection results | Never stored — discarded when you close the review panel | No |
| Redacted output files | Saved where you choose (your file system) | No |
| Audit sidecar files (Legal profile) | Saved alongside the output, where you choose | No |
| App preferences | Your device, in the app's UserDefaults container | No |
None. ShadowClip uses only Apple's built-in frameworks (Vision and Natural Language) for detection. No third-party analytics SDKs, crash reporters, advertising networks, or telemetry libraries are included in the app. This is verifiable: the binary contains no analytics endpoints, no tracking identifiers, and no outbound URLs of any kind.
ShadowClip does not collect crash reports. If the app crashes, macOS will offer to send a report to Apple through the standard system crash reporter — that is an Apple service, governed by Apple's privacy policy, and entirely opt-in on your part. No crash data is sent to Quiet Signals Lab.
ShadowClip has no age-gated features and collects no data from anyone, including children. The app is rated 4+ on the App Store.
If anything here ever changes — which would require a fundamental redesign of the app's architecture — the updated policy will be posted at this URL with a revised effective date, and the change will be noted in the app's release notes.
Questions about privacy? privacy@quietsignalslab.com