Legal
ShadowClip does not collect, transmit, or store any personal data. The images you process never leave your device.
Images are loaded into memory, processed, and discarded. The only file written to disk is the redacted output you explicitly choose to save, and where you choose to save it. The source image is never modified and never written to any location by the app.
On iOS, if you tap "Save to Photos", the redacted image is added to your photo library using the standard iOS Photos API. The app requests your permission before doing this and only writes the output — it does not read your library.
If you enable the optional audit sidecar, a .shadowclip-audit.json file is written alongside the output. It records the categories of redactions applied (e.g. "email address", "API key"), their pixel coordinates, and a SHA-256 fingerprint of the output file. It never contains the redacted text itself. This file is written locally to the same location you chose for the output. It is not transmitted anywhere.
App preferences (redaction style, detection category settings) are stored in UserDefaults on your device. On macOS, these are shared between the main app, the Share Extension, and the Quick Action via an App Group container. Nothing in this store is transmitted off-device.
codesign -d --entitlements - /Applications/ShadowClip.app
All detection uses Apple's on-device frameworks: Vision, Natural Language, and NSDataDetector. No data is sent to Apple for processing — these frameworks run entirely on your CPU/Neural Engine. No third-party SDKs or analytics libraries are included in the app.
ShadowClip is sold as a one-time purchase through the Apple App Store. All payment processing is handled by Apple. Quiet Signals Lab receives no financial data, no payment information, and no App Store receipt data beyond what Apple's standard royalty reporting provides (aggregate sales counts, no individual identifiers).
There is no sign-in, no user account, no device identifier collection, no crash reporting, and no analytics. If you encounter a bug, you report it manually by email.
ShadowClip does not knowingly collect information from anyone, including children. There is nothing to collect.
Quiet Signals Lab is registered in the Netherlands (KvK 99556650). Because the app processes no personal data on behalf of users — all processing occurs on-device and no data is transmitted to Quiet Signals Lab or any third party — there is no data processing relationship to which GDPR applies. If you believe this assessment is incorrect, contact us at the address below.
If the app's data handling ever changes, this policy will be updated before the change takes effect, with a new "last updated" date. The current policy always applies to the current version of the app.
Quiet Signals Lab · hello@quietsignalslab.com