Clarity ("the App") helps you look for patterns in conversations you import. This policy explains, in plain terms, what the App does with your data. We never sell your data or use it for advertising.
Anonymous account. When you open the App, Firebase Authentication creates a random account ID. It identifies your data; it isn't linked to your name. If you turn on Google backup, your Google account's email address is linked so you can restore your data on a new phone.
Conversations you import. The messages you import (up to 5,000 per conversation), the analysis results, and anything you add (notes, journal entries, tags) are stored in your private area of Google Cloud Firestore, encrypted in transit and at rest. Our security rules let only your signed-in account read or write it.
AI analysis (when you run one). The App sends a summary through our server to Google Gemini: pattern statistics, the names of detected patterns with a few short example phrases, the other person's name, and up to 20 short excerpts (200 characters each) from their flagged messages. It is used only to write your report, and our server doesn't store it. Google's Gemini API terms govern how Google handles it. If you choose OpenAI or Anthropic in Settings, the same summary goes directly to that provider using your own API key.
AI chat, Deep Scan and transcription (when you use them). Ask-AI chat, pattern explanations, Deep Scan, the Simulator, and voice, video, photo and PDF transcription send your question, the flagged message text, or the file you chose to an AI provider. On Pro, this goes through our server to Google Gemini; our server doesn't store it, and it only keeps a count of how much included AI you used this month. If you add your own API key, it goes directly from your phone to that provider instead. Your key is stored only on your phone, in encrypted storage, and is removed when you delete your data.
Smart Search (optional, Pro). Nothing is indexed until you tap Index on a conversation. Then the text of that conversation's messages is sent through our server to Google Gemini to create a search index, and the messages and the index are stored in our private search database, hosted by Supabase. Only you can search it. You can delete it from the conversation's Smart Search card; it is also deleted when you delete the conversation or your data.
Live Message Capture (optional, Android). If you grant notification access, the App reads incoming notifications from messaging apps on your phone (sender name and message text). Captured messages wait in an inbox for you to review. If you turn on Watch for a conversation, new messages from that person are added to it automatically. Once a message is in a conversation, it is stored like any other imported message. You can turn off notification access anytime in Android Settings → Apps → Special app access → Notification access.
Purchases. Subscriptions and purchases go through Google Play. RevenueCat manages subscription status for us, using your anonymous account ID. We never see your card number or billing address.
Diagnostics. Firebase Analytics records which features are used (for example "import completed" or "analysis run"), along with the app version and device type — never your messages or the names in them. Advertising ID collection is turned off. Sentry receives crash reports (error details, app version, device model); message text, console output and API keys are removed before a report is sent.
Reminders. If you allow notifications, the App may schedule reminders on your phone. Reminders never mention your conversations. If the App registers your device for push reminders, the device's push token is stored with your account so we can send them; you can turn reminders off.
Your name, your phone number, your email (unless you turn on Google backup), your contacts, your location, your browsing history, or your advertising ID.
Conversations imported in Volatile Mode stay in your phone's memory, are never saved to our servers, and are gone when you close the App. An AI analysis of one still sends its summary to Gemini; Smart Search isn't available for them.
We keep your data until you delete it. Because sign-in is anonymous, uninstalling the App does not delete your data, and we can't identify an anonymous account afterwards — please use Delete All My Data before uninstalling. If you turned on Google backup, email us from that Google account and we will delete it for you.
Not deleted: purchase records kept by Google Play and RevenueCat (needed for billing, refunds and tax), and anonymous analytics and crash data, which those services keep for their standard retention periods. Deleting your data does not cancel a subscription — cancel it in Google Play.
Data is encrypted in transit (TLS) and at rest. Database rules give each account access to its own data only, and the Smart Search store can be reached only by our server. You can also turn on an app lock (fingerprint, face or device PIN) in Settings.
The App is not intended for anyone under 18. We don't knowingly collect data from minors.
If this policy changes, we will update the date above and show the new version in the App.
This policy is governed by the laws of the State of Louisiana, United States.