Your family's data, handled with care.
Clara is the operating system your family runs on. That means you're inviting us into some of the most personal parts of your life — your inbox, calendar, and the people you love. Here's exactly how we treat that trust, followed by the full legal policy.
Last updated: July 10, 2026
At a glance
The short version, maintained by the Clara team. This is a plain-language summary — not a certification or independent audit. The full policy is below. Questions? Email hello@clarahomeos.com.
Gmail & Calendar access
When you connect Gmail or Google Calendar, we request only the scopes we need to power Clara's features (reading messages, listing events, creating tracked to-dos). You can revoke access at any time from Settings, or directly in your Google Account. We only read messages needed to identify tasks — we do not scan your entire inbox for other purposes.
Encryption
All connections to Clara use HTTPS (TLS). Data is encrypted at rest at the platform layer, and Google OAuth refresh and access tokens are additionally encrypted at the application layer using AES-256-GCM with a server-only key before being written to the database. Tokens are stored server-side and never exposed to the browser.
Google API Services — Limited Use
Clara's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Calendar data is used only to provide user-facing features in Clara (surfacing to-dos, showing your day). We do not use it to serve ads, sell it, transfer it to third parties for unrelated purposes, or allow humans to read it — except with your explicit consent, to comply with law, or for security/abuse investigations.
No advertising, ever
We do not sell your data. We do not share it with advertisers, data brokers, or third-party marketers. Clara is funded by subscriptions from families like yours — that is the whole business model.
Where your data lives — subprocessors
Clara runs on Lovable Cloud, backed by Supabase (Postgres storage and auth) and Cloudflare (compute and edge network). We call Google APIs for Gmail and Calendar, use a Lovable-managed AI gateway (currently routing to Google Gemini) for the daily brief, chat, and voice notes, and use Stripe for payments. That's the full list of subprocessors your data flows through.
Delete your account
You can delete your Clara account and everything associated with it at any time from Settings → Privacy → Delete account. Deletion is immediate: your profile, todos, lists, people, chat history, calendar events, email-to-do suggestions, and Google connections are erased, and your Google OAuth tokens are revoked with Google. If you'd rather email us, write to hello@clarahomeos.com.
Full privacy policy
This is the full policy that sits behind the summary above. By using Clara you agree to what's described here. Questions? Email hello@clarahomeos.com.
1. What we collect
What you give us. Your name, email, password, household details, and anything you enter into Clara — todos, lists, notes, people, chat messages, and voice input.
What's collected automatically. Device and usage data (IP address, browser, OS, referring URLs, country, and log data) needed to run the Service and keep it secure.
2. How we use it
To provide and maintain Clara, run your account, handle sign-in (including Google sign-in if you use it), send you administrative messages, keep the Service safe, respond to support requests and legal process, and — with your permission — send marketing you can unsubscribe from at any time. We may use aggregated, anonymized data to understand usage and improve the product.
3. Who we share it with
We do not sell or rent your data. We share it only with the subprocessors listed in the summary above (Supabase, Cloudflare, Google APIs, the Lovable-managed AI gateway, and Stripe), and only for them to help us run Clara. We may also share data when required by law, to enforce our terms, to protect users, or in connection with a merger or acquisition.
4. AI processing
Clara uses AI to turn your messages, emails, calendar events, todos, notes, and voice input into suggestions, briefs, and voice replies. To do this, the relevant content is sent over encrypted connections to a Lovable-managed AI gateway that currently routes to Google (Gemini). The provider is contractually prohibited from using your data to train their models and returns a response without retaining your content for training. Using Clara means consenting to this processing; if you don't want it, stop using the Service.
5. Google Account data & Limited Use
In Short: When you connect a Google account, Clara accesses your Gmail and Google Calendar only to provide the assistant features you ask for. Clara's use of this data complies with the Google API Services User Data Policy, including the Limited Use requirements.
Clara is a family chief-of-staff that works on top of the Google services you choose to connect. Connecting a Google account is optional and initiated by you; you grant each permission on Google's own consent screen and can decline or remove any of them at any time. The Google data Clara accesses, and why:
- Gmail. Clara reads your recent email to surface tasks, events, reminders, and daily briefs. Clara does not delete mail on your behalf.
- Google Calendar. Clara reads your calendars to answer questions, brief you, and detect conflicts, and creates or edits events when you ask.
Limited Use. Clara's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Google user data Clara accesses is used solely to provide and improve the user-facing assistant features described above; it is not sold or transferred to third parties for advertising or other unrelated purposes; it is not used for advertising; and it is not used to train, develop, or improve generalized or foundation AI models. Humans do not read your Google user data except (a) with your explicit consent (for example, to troubleshoot an issue you report), (b) where necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized. Where Clara relies on third-party AI providers to operate (see Section 5), that processing is performed solely to deliver these features at your direction, the providers are contractually prohibited from using your data to train their models, and it remains subject to these Limited Use commitments.
How to revoke access. You can disconnect Google at any time from Clara's Settings. You may also revoke Clara's access directly from your Google Account's Third-party apps & services settings. When access is revoked, Clara stops accessing your Google data.
6. Cookies & international transfers
We use cookies and similar technologies (web beacons, pixels) to run the site and understand how it's used. Our servers and subprocessors are located in the United States and other countries, so your data may be transferred, stored, and processed outside your home country — including countries whose data protection laws differ from your own.
7. How long we keep it, and how we protect it
We keep your Personal Information for as long as you have a Clara account, unless a longer retention period is required or permitted by law. When we no longer have a legitimate business need, we delete or anonymize it. We protect it with TLS in transit, encryption at rest, application-layer encryption of Google OAuth tokens, and row-level security that isolates each household's data. No system is 100% secure, so transmission is at your own risk.
8. Children
Clara is not intended for children under 18. We don't knowingly collect data from them. If you believe a child has provided us Personal Information, email hello@clarahomeos.com and we'll delete it.
9. Your rights
You can review, change, or delete your account and its data at any time from Settings, or by emailing hello@clarahomeos.com. Depending on where you live (including the EEA and UK), you may also have rights to access, correct, port, restrict, or object to processing of your Personal Information, to withdraw consent where we rely on it, and to complain to your local data protection authority. You can unsubscribe from marketing email at any time via the link in each message; we may still send you service-related communications.
10. Text messages (SMS)
If you turn on text messages in Settings and save your mobile number, you are giving Clara Home OS express written consent to send you recurring automated text messages about your own household — your daily brief and the reminders you create. Message frequency varies, typically 1–3 messages per day. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Consent is not a condition of purchase or of using Clara.
No mobile information will be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Your mobile number is shared only with our messaging provider (Twilio) for the sole purpose of delivering the messages you asked for, and with no one else. You can remove your number or turn text messages off at any time in Settings → Notifications.
11. Updates & contact
We may update this policy. Material changes will be reflected by a new "Last updated" date, and we may notify you directly. For any question about this notice or a request to access, update, or delete your data, email hello@clarahomeos.com.