Privacy Policy

• Your name, email address, Clerk account identifier, profile settings, timezone, coach preferences and account timestamps.
• Authentication and account-security information, such as sign-in state, verification activity and essential authentication cookies. Clarity° does not receive your Google password when you use Google sign-in.
• Workspace, plan, trial, subscription status and billing-related state needed to provide access and manage your account.

• The writing, prompts, answers, instructions, drafts, voice transcripts and other content you submit in NOTE, NOW and NEXT.
• Coach messages, conversation history, session dates, mode, completion state and other records needed to show your history and continue a session.
• Focus Cards, kept thoughts, conversation signals, founder briefings, returning-pattern summaries, evidence excerpts and other derived information created from session content.

Clarity° provides copy and device share-sheet actions for session text and Focus Cards. The current implementation does not create a public Focus Card URL or a separate recipient account. A shared or copied item can be retained, copied or reshared by anyone who receives it, and Clarity° cannot revoke a copy that has left your device.

A saved-history URL is account-protected and is not a public share link. Sharing it does not give Clarity° a record of who viewed it through the device share sheet.

If you email us or request support, we may hold your message, contact details, attachments and the records needed to respond. We also hold email preferences, unsubscribe or suppression records, delivery status and limited message metadata for transactional and optional product emails.

Clerk Billing manages Clarity° checkout and subscription state. We receive the account, plan, trial, payment status and billing events needed to provide the service. We do not store full payment card numbers in the Clarity° application. The payment processor presented through Clerk Billing may have its own privacy policy and records.

• Browser, device, operating-system, route, request, timestamp, referrer, performance and error information generated when the website or application is used.
• Security and rate-limiting information used to protect accounts and the service, including operational identifiers and logs.
• Optional analytics events only after you choose Allow analytics. The current event allowlist is limited to consent changes and product-onboarding events; raw session writing, prompts, coach responses and Focus Card text are not passed as event properties by the reviewed client code.

• Create and secure your account, keep your profile and preferences, and provide NOTE, NOW, NEXT, session history and Focus Cards.
• Use the current session and relevant prior conversation context to generate coaching responses, summaries, suggested next steps and returning-pattern reflections.
• Save drafts and messages, keep your history available, process carry-forward actions, and provide the copy and device share-sheet features you request.

We send the minimum relevant text or audio needed for the AI feature you request. For example, a note may be sent for distillation; a conversation may be sent with its relevant history and profile context; voice input may be sent for transcription; and coach text may be sent for speech generation. Returning-pattern generation may use recent session summaries and short excerpts to produce a tentative pattern and question.

We use account and subscription information to send verification, welcome, billing, security and other service messages. If enabled in Settings, we may also send optional weekly check-ins or other product emails. You can turn off optional weekly emails in Settings or use the unsubscribe link in an email; essential account, security and billing messages may still be sent.

We use information to authenticate users, prevent abuse, enforce access controls, rate-limit requests, investigate incidents, troubleshoot failures, answer support requests, process payments, resolve disputes, comply with law and protect the rights and safety of Clarity°, our users and others.

We do not use session writing, prompts, coach responses or Focus Card content to target advertising. The current Clarity° application contains no workflow that trains or fine-tunes a Clarity° AI model using your session content. AI providers may process inputs for service operation, safety, security or abuse prevention under their own terms and account settings; provider-level retention, human review and training settings are not controlled by the browser application.

• The reviewed application routes AI requests through the AI SDK Gateway integration. The repository defaults use OpenAI model identifiers for text generation, transcription and text-to-speech: openai/gpt-4.1-mini, openai/gpt-4o-mini-transcribe and openai/gpt-4o-mini-tts.
• The gateway and model provider receive the relevant input and may receive the context required to produce the requested output. We do not send a separate embedding or vector record in the current implementation reviewed.
• AI output can be incomplete, inaccurate, biased or unsuitable for your circumstances. Review it before relying on it, especially for decisions affecting your health, finances, work, relationships or safety.

If you use voice input, an audio recording is sent to the configured transcription provider and the resulting text is placed in the editor. If you use spoken replies, coach text is sent to the configured speech provider and returned as temporary audio. The application does not intentionally store the generated audio file, but the transcribed text can become session content when you submit or save it.

AI processing may occur outside Australia. The application does not promise Australia-only processing or a fixed provider retention period. Provider retention, training, abuse-monitoring, subprocessors, human access and processing locations depend on the provider account configuration and terms in force when the request is made. We will update this policy if those settings materially change.

• Clerk for authentication, account identity and billing orchestration.
• Neon PostgreSQL for application data storage and database infrastructure.
• The configured AI gateway and model providers for coaching, distillation, returning patterns, transcription and speech.
• Vercel infrastructure for the hosted web application and request processing.
• Sentry for error and performance monitoring. Sentry is configured with default personal-identifying data collection disabled; an internal account identifier may be attached to an authenticated error event for troubleshooting.
• Resend for hosted-production email delivery. Local development uses MailHog instead of sending production email.
• PostHog and Google Analytics 4 may be enabled for a deployment only after you allow optional analytics. The reviewed client does not initialise them before consent.

We may disclose information to courts, regulators, law-enforcement agencies, professional advisers or other parties where required or authorised by law, or where reasonably necessary to protect rights, safety and security. If Apollo Advisors° is involved in a restructure, sale, financing, merger or transfer of assets, information may be disclosed subject to appropriate confidentiality and legal safeguards.

Essential cookies or storage are needed to sign in, keep a session secure, remember the active workspace and preserve necessary display or application state. Blocking them may prevent Clarity° from working correctly.

Optional analytics are off until you choose Allow analytics. When enabled for a deployment, the current client is configured for a small allowlist of product events, with page-view autocapture, element autocapture, session recording, performance capture and exception capture disabled. Raw session writing, prompts, coach responses and Focus Card text are not included in the reviewed analytics event properties.

You can later open Privacy choices in the analytics control and choose Not now to withdraw optional analytics. This stops future optional analytics capture in the client; it does not recall information already sent to an analytics provider. You can also manage cookies and local storage through your browser settings.

The current UI lets you start a fresh session, copy session text, copy or share a Focus Card, carry content forward and turn off optional weekly emails. It does not currently provide self-service deletion of an individual session, a structured account export, a delete-account button or a public Focus Card link that can be revoked.

You may request access, correction, deletion or a copy of your personal information using the contact details below. We may need to verify your identity, and we may retain limited information where required for legal, security, billing, fraud-prevention or dispute-resolution purposes. Information already sent to an AI, email, analytics, hosting or monitoring provider may remain under that provider’s retention and deletion processes.

Deleted or corrected information may remain temporarily in encrypted backups, audit records, delivery records, security logs or provider systems until those records expire under the relevant operational cycle. We do not use backups to restore deleted content except where needed for disaster recovery or legal and security purposes.

You may ask for access to personal information we hold about you, or ask us to correct information that is inaccurate, incomplete, out of date or misleading. Where a correction is not technically available in the current UI, contact us and we will assess the request.

You may ask us to delete personal information or provide a copy of it where applicable. Some information may need to be retained for legal, billing, security, fraud-prevention, backup or dispute purposes. The current product has copy actions but not a complete structured export or self-service deletion workflow.

You can disable optional weekly emails in Settings or use an unsubscribe link. We may still send essential account, security, verification and billing communications.

If you believe we have mishandled your personal information, contact us first so we can investigate and respond. We aim to respond within a reasonable time and generally within 30 days where practicable. You may also complain to the Office of the Australian Information Commissioner (OAIC) if you are not satisfied with our response or prefer to complain directly.

• OAIC privacy complaints