This Privacy Policy explains how Shadow in Motion ("we," "us," "our") collects, uses, discloses, and protects information when you use our website and virtual martial‑arts training application at shadowinmotion.com (the "Service"). By using the Service, you agree to the practices described here.
1. Information We Collect
- Account information. When you create an account, we collect your email address and a password. Your password is stored in a securely hashed form by our authentication provider — we never see or store it in plain text.
- Training profile & progress. The martial arts you choose, your experience/belt levels, schedule preferences, curriculum progress, glossary, and any test submissions or notes you create.
- Community content. Your chosen display name, an optional city, and any content you create in community features — forum topics and replies, groups you join or create, group discussions, meetups, and RSVPs.
- Payment information. Membership payments are processed by Stripe. We do not collect or store your full card number — Stripe handles all card data directly. We store only your subscription status and Stripe customer/subscription identifiers so we can manage your membership.
- AI assistant ("digital sensei"). The AI features use an API key that you provide, which is stored locally in your own browser. Messages you send to the assistant are transmitted directly to the AI provider you choose (for example, Anthropic or OpenAI) and are governed by that provider's terms and privacy policy. We do not store your API key or route these messages through our servers.
- Technical & usage data. Standard information such as IP address, browser type, and access times, collected by our hosting and infrastructure providers for security and operation. Some of your progress is also cached locally in your browser (localStorage) so the app works smoothly.
2. How We Use Your Information
- Provide, maintain, and personalize your training experience and course plan.
- Save your progress and sync it across your devices.
- Operate community features (forums, groups, and meetups).
- Process and manage your membership, trial, and billing.
- Respond to your inquiries and provide support.
- Protect the security and integrity of the Service and prevent abuse.
- Comply with legal obligations.
3. How and With Whom We Disclose Information
We do not sell your personal information. We share information only as needed to operate the Service, transmitted electronically over secure (encrypted) connections, with:
- Service providers: Supabase (database and authentication hosting), Stripe (payment processing), Amazon Web Services (website hosting), and Formspree (contact‑form delivery). These providers process data on our behalf to deliver the Service.
- Your chosen AI provider (only if you use the AI assistant, and only the messages you send).
- Other members: your display name, optional city, and any content you post in community features are visible to other signed‑in members. Please do not share sensitive personal information publicly.
- Legal and safety: we may disclose information if required by law, or to protect the rights, property, or safety of Shadow in Motion, our users, or the public.
- Business transfers: if the Service is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
4. How We Protect Your Information
- Encryption in transit: all traffic to the Service is served over HTTPS/TLS.
- Secure authentication: passwords are hashed by our authentication provider; we never store them in plain text.
- Access controls: our database uses row‑level security so that members can access only their own data, and private groups' content is restricted to their members.
- Payment security: card payments are handled by Stripe, a PCI‑DSS Level 1 certified provider; card details never touch our servers.
No method of transmission or storage is 100% secure, but we take reasonable measures to safeguard your information.
5. Your Choices & Data Retention
- You can view and edit your profile and reset your training plan at any time within the app.
- You can cancel your membership at any time through the Stripe customer portal (the "Membership" button in the app).
- You may request access to, correction of, or deletion of your account and associated data by contacting us (below). We retain information for as long as your account is active or as needed to provide the Service and meet legal obligations.
6. Cookies & Local Storage
We use browser local storage and essential cookies to keep you signed in and to save your training progress. We do not use third‑party advertising or cross‑site tracking cookies.
7. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Minors should only use the Service with the involvement and consent of a parent or guardian. If you believe a child has provided us information, please contact us and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
9. Contact Us
Questions about this policy or your data? Email us at info@shadowinmotion.com.