Clarido Privacy Policy

1. What Data Leaves Your Device (and Why)

We send only the data needed to provide and improve the Service. Your data is associated with your account or messaging relationship so the Service can operate, preserve continuity, and restore your content across sessions. You do not need a Clarido app account to use our text-message invitation flow.

• Account and access: email, name, and basic profile for sign-in, sync, and subscriptions.
• Content and files: conversations, intentions, check-ins, reflection responses, voice uploads, transcriptions, and attachments for storage and context.
• Voice transcription: microphone audio is sent to Deepgram for speech-to-text conversion. Provider processing and retention depend on the service terms and applicable account settings.
• Text-to-speech: when you use audio features, message text or personalized reflection narration is sent to speech providers, including Deepgram and Cartesia, for conversion to audio. The resulting audio file is cached in our cloud storage tied to your account.
• Derived representations: summaries, entities, embeddings, and related text that power search, recall, and context features; stored with your account until you delete them.
• AI features: relevant content and context are sent to providers including OpenAI, Google (Gemini), and Anthropic (Claude) to generate replies and reflections. Voyage generates embeddings used to retrieve relevant context.
• Analytics and diagnostics: feature usage, performance data, crash reports, device model, OS version, app version, timezone, and locale to identify and fix bugs. We use PostHog for analytics and error tracking, which may include session replay (recordings of app interactions) to help us reproduce and resolve reported issues.
• Install attribution: we use AppsFlyer to understand how users discover Clarido. AppsFlyer receives a device identifier, your anonymized user ID, and in-app event names (such as registration or subscription) for attribution and campaign measurement. AppsFlyer does not receive the content of your notes, voice recordings, or other User Content.
• Push notifications: device push tokens plus device model, OS version, timezone, and locale to deliver notifications reliably.
• Intention reminders: your chosen intention can appear on your lock screen, home screen, and Apple Watch through the display features you enable.
• Engagement notifications: we may send proactive push notifications based on your app activity (such as intention check-ins and reminders) to help you stay on track. Notification opens are tracked via analytics.
• Telemetry relays: limited in-app telemetry (such as notification opens) may be forwarded to internal operations channels to monitor delivery.
• Text-message invitations: when you open our text invitation page or message our business line, we process your phone number, invite code, complete message transcript, message status and timestamps, any media you send, and an operator-provided contact name.
• Text-message delivery: Sendblue processes message content, phone numbers, delivery status, and related messaging metadata so we can receive and respond through iMessage, RCS, SMS, or MMS, depending on device and carrier support.
• Advertising attribution: the invitation page may collect Meta click and browser identifiers, campaign, ad set, ad, placement, creative, route, and UTM parameters. For campaign measurement, we may send Meta event names, those attribution fields, a hashed phone number, and a hashed internal session identifier. We do not send message content or media to Meta.
• Invitation security: we use short-lived, HTTP-only session cookies and a one-way request fingerprint derived from network information to prevent duplicate or abusive code issuance.
• Hosting, storage, and backups: account data, files, and derived data are stored on managed cloud infrastructure for reliability and recovery.

2. Definitions

• Service: The Clarido application, website, text-message invitation flow, and related support and communication services.
• User Content: Conversations, intentions, check-ins, reflection responses, messages, voice recordings, uploaded images, or other materials you create, send, or store using the Service.
• Personal Information: Any information that identifies or can reasonably identify an individual.

3. Information We Collect

3.1 Information You Provide

We may collect the following categories of data when you use the Service:

• Conversations, intentions, check-ins, and written reflection responses
• Voice recordings and the transcriptions generated from them
• Uploaded media (e.g., photos) that you choose to attach to entries
• Account information (name, date of birth, email address)
• Preferences you choose for coaching, reminders, and audio
• Subscription and billing identifiers
• Your phone number, contact name, text-message content, and media you choose to send to our business line

3.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Device information (device type, OS version, app version, unique identifiers)
• Log and diagnostic information (session activity, performance data, crash reports, error stack traces, notification delivery)
• Session replay data (recordings of app interactions used to reproduce and fix bugs)
• Usage analytics to understand how features perform and to identify issues
• Push notification tokens and device locale/timezone for reliable delivery
• Install attribution data (how you discovered the app)
• Advertising click, campaign, ad set, ad, creative, placement, route, and UTM attribution data
• Message delivery status, timestamps, provider identifiers, and a one-way request fingerprint used for invitation security

3.3 Payment Information

Subscriptions are processed through Apple's App Store. Clarido verifies purchases and subscription status through Apple's StoreKit and server notifications. We receive subscription status, entitlement, and lifecycle events (such as purchases, renewals, and cancellations) but do not store or have access to full payment card details.

3.4 Text Messaging and Advertising Attribution

When you use our text invitation flow, we connect the invitation code, advertising attribution, and resulting conversation so we can provide access, continue the conversation, and understand whether an advertising campaign led to a message or an Apple-confirmed trial. This messaging record may exist without a Clarido app account.

Meta receives conversion events such as QualifiedLead, MessageReply, and StartTrial together with campaign metadata and matching identifiers. Phone numbers and internal session identifiers are SHA-256 hashed before transmission; Meta click and browser identifiers are transmitted in the format Meta requires. Message text and media are not included in these events.

4. How We Use Your Information

We use your information to:

• Provide the Service, including storing, resurfacing, and contextualizing your reflections
• Enable AI features that generate context-aware outputs using your past entries
• Provide personalized insights, suggestions, reminders, and optional nudges
• Provide text-to-speech playback of chat messages
• Display your chosen intention on the device surfaces you enable
• Send engagement notifications based on your activity to help you stay focused
• Maintain and improve the app's performance, security, and user experience
• Communicate essential updates, service announcements, and support messages
• Provide account management tools such as data export and deletion
• Monitor reliability of notifications and other critical flows
• Measure install attribution and campaign effectiveness
• Issue invitation codes, operate our business messaging inbox, and continue conversations you initiate
• Measure whether an advertising interaction led to a message or Apple-confirmed trial

5. How AI Uses Your Data

To enable Clarido's contextual intelligence features, your User Content (including transcribed text from voice recordings and optionally attached photos) may be transmitted to our AI processing partners, including OpenAI, Google (Gemini), Anthropic (Claude), and Voyage, to generate responses and retrieve relevant context for Clarido’s features.

• We send relevant content to AI partners to provide coaching and reflection features
• User Content is not used for marketing, profiling, or automated decision-making with legal impact
• You may ignore or delete AI-generated suggestions at any time

AI Model Training and Profiling

AI and audio providers process information under their applicable service terms and account settings, including their retention and model-improvement settings. Contact support@clarido.app for questions about a particular provider. We do not use the content of your conversations or reflections for behavioral advertising.

6. How Your Data Is Stored

• Your email and name are used for sign-in, sync, and support.
• Analytics and diagnostics are used to identify and fix bugs and improve app reliability.
• Your content, transcriptions, derived data, cached audio files, and embeddings are associated with your account. See Data Retention below for deletion requests.

7. Disclosure of Information

We may share information with:

Service Providers

We rely on carefully vetted processors for:

These services process information to support the functions listed above. Their processing terms and account settings govern additional provider retention and permitted uses.

Legal Compliance

To comply with applicable laws, regulations, or valid legal processes.

Business Transactions

If we engage in a merger, acquisition, or sale of assets, information may be transferred with safeguards consistent with this Policy.

We do not sell personal information.

8. Data Storage and Security

• Data is stored on secure servers in Canada and the United States
• Data is encrypted both in transit and at rest
• Access controls are in place to protect your data

9. Data Retention

• Conversations, intentions, check-ins, reflections, uploads, cached audio, and derived data are stored to provide the Service
• Audio files may be stored or cached to provide the audio features you use
• Cached text-to-speech audio is stored for performance and may be regenerated if deleted
• Deletion requests can involve separate active stores, service providers, and backups; removal may not be immediate
• You can request deletion of your account and associated content, including derived data and cached audio, through the app or support@clarido.app; some records may need to be retained for legal or security reasons
• Contact support@clarido.app to ask about the scope or progress of a deletion request
• Text-message transcripts, phone numbers, attribution records, and privately stored inbound media are retained for conversation continuity until you ask us to delete the messaging contact, subject to legal and security obligations

10. User Rights

Depending on applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your data
• Request data export / portability
• Withdraw consent for optional features
• Object to certain types of processing

How to Exercise These Rights (In-App Tools)

Inside the Clarido app, you may:

• Delete individual entries
• Export your data
• Request deletion of your account and associated data

If you contacted Clarido by text without creating an app account, you may request access, correction, export, or deletion of your messaging record by emailing us from an address where we can complete an appropriate identity-verification process.

You may also contact support@clarido.app for help.

11. Data We Do Not Collect

Clarido does not collect the following unless you explicitly choose to upload it as part of content you share:

• Biometric or health data
• Contacts or address book information
• Precise location data
• Photos or videos (unless you attach them yourself)
• Background microphone or camera access

12. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing include:

• Consent: When you voluntarily submit User Content or enable features
• Legitimate interest: To provide, maintain, and improve the Service

13. Children's Privacy

The Service is intended for individuals aged thirteen (13) years and older. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as reasonably possible.

Users between 13 and 17 may use the Service only with the consent of a parent or legal guardian, where required by applicable law.

14. Changes to This Policy

We may update this Policy. Material changes will be communicated through the app or by email. Continued use after changes constitutes acceptance.

15. Contact

If you have questions or concerns, please contact: support@clarido.app