Privacy Policy

1. Data We Collect and How We Access It

We minimize data collection to only what is necessary to deliver and improve our services.

• Account Credentials: If you register or authenticate, we securely collect and store your email address and password. This authentication is securely powered and managed using Supabase.
• Voice and Audio Data: When utilizing Clario's voice journaling and reflection features, your voice recordings are securely processed through our secure FastAPI backend. They are analyzed using secure instances of the Google Gemini API to generate private, personal reflection reports. We do not use your voice data or transcripts for training models or for advertisement.
• Camera-Based Video Streams: Clario features camera-guided mindfulness tools, including Daily Check-In movement breaks (such as camera-tracked physical squats) and Air Drawing (spatial hand-tracking). Your video stream is processed entirely locally and in-browser on your device using MediaPipe technology. Video and camera streams are never transmitted to, stored, or recorded on our backend servers.
• Device and Log Data: We may collect standard diagnostic information, such as IP addresses, browser and operating system versions, and crash logs to resolve bugs and maintain security.

2. How We Use Your Data

We use your information exclusively to:

• Provide, secure, and personalize Clario features (including your home garden progress, breathing patterns, and journals).
• Process your voice journals to offer helpful, non-clinical reflection reports.
• Verify your subscription status and manage premium pre-booking or access rules.
• Analyze app health, troubleshoot technical performance issues, and enhance general platform design.

3. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal data. We only share information with trusted providers essential to running our service, subject to strict confidentiality agreements:

• Supabase: To provide secure user account login, identity management, and persistent database hosting.
• Google Gemini API: To analyze journaling transcripts and air-drawing metadata and return helpful emotional reflections. These interactions comply with enterprise-grade privacy boundaries; your data is not stored or utilized for base model training.
• Hosting Partners: Our website and web application are hosted on Cloudflare Pages and verified secure servers (Vercel).

4. Camera and Audio Permissions

To provide specific in-app features, Clario may request access to your device's camera and microphone.

• Microphone Permission: Required for the live Voice Journaling feature. Your audio is captured strictly when you activate recording, and is used solely to generate your reflection reports.
• Camera Permission: Required for Air Drawing, movement breaks, and spatial block interaction. The camera feed remains strictly in the temporary local memory of your browser and is never uploaded or saved.

You can deny or revoke these permissions at any time via your browser or device operating system settings.

5. Data Security & Retention

We implement robust security standards to safeguard your information both during transmission and once stored. Your journal entries and account profile are protected with modern encryption and JWT token-based session management. We retain personal data only as long as your account is active or as needed to provide you with Clario's wellness services.

6. Your Rights and Choices

You hold full ownership of your data. At any time, you can:

• Access, modify, or update your account information.
• Request the complete deletion of your account and all associated journals, records, and garden progress by contacting us.
• Opt-out of optional permissions like camera or microphone inputs.

7. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data, please contact us at: