Privacy Policy

In Short: We collect personal information that you provide to us, and some information is collected automatically when you use our Services.

Personal information you disclose to us

We collect Personal Information that you voluntarily provide to us when you register an account, use our Services, or otherwise contact us. The Personal Information we collect depends on the context of your interactions with us, the choices you make, and the features you use. This may include your name, email address, password, household details, todos, lists, notes, people, chat messages, voice input, and any other content you enter into Clara.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate our Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, country, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services and for our internal analytics and reporting purposes.

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, and which we record in log files.

In Short: We may use your Personal Information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

We may use the information we collect or receive:

• To provide and maintain our Services and troubleshoot technical issues.
• To facilitate account creation and logon process. If you link your account to a third-party account (such as Google), we use the information you allowed us to collect to facilitate account creation and logon.
• To manage user accounts and keep them in working order.
• To send administrative information about the Service, features, or changes to our terms, conditions, and policies.
• To protect our Services as part of our efforts to keep them safe and secure (for example, for fraud monitoring and prevention).
• To enforce our terms, conditions, and policies for business purposes, to comply with legal and regulatory requirements, or in connection with our contract.
• To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
• To respond to user inquiries and offer support.
• To send you marketing and promotional communications in accordance with your preferences. You can opt-out at any time.
• For other business purposes such as data analysis, identifying usage trends, and evaluating and improving our Services. We may use and store this information in aggregated and anonymized form.

In Short: We only share Personal Information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

We may share Personal Information based on the following legal bases:

• Consent: where you have given us specific consent to do so.
• Performance of a Contract: where we have entered into a contract with you.
• Legal Obligations: where required to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Vital Interests: where necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, threats to safety, or illegal activities.

More specifically, we may need to process your data or share your personal information in the following situations:

• Business Transfers. In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Vendors, Consultants, and Other Third-Party Service Providers. With third parties who perform services for us and require access to such information to do that work. Unless described in this notice, we do not sell, rent, or trade your information with third parties for their promotional purposes.

In Short: We only share Personal Information with the following categories of third parties.

• AI Service Providers
• Website Hosting Service Providers
• Cloud Computing and Database Services
• Payment Processors
• Analytics Providers

In Short: We use third-party AI service providers to power Clara's assistant features. Your data is processed to provide the Service and is not used to train AI models.

Clara uses artificial intelligence to analyze your messages, emails, calendar information, tasks, notes, and voice input in order to provide intelligent suggestions, task management, voice interaction, and family coordination features.

To deliver these capabilities, we rely on a Lovable-managed AI gateway that currently routes to Google (Gemini). We may send message content, email content, calendar details, task information, and audio from voice interactions to this provider to generate suggestions, classify information, assist with task processing, create actionable tasks and events, and enable voice-based interaction on your behalf.

What data is shared: The content you provide to the Service, including messages, emails, calendar information, and voice audio, may be transmitted to this provider as needed to generate responses and suggestions.

How your data is protected: Data sent to our AI service provider is transmitted over encrypted connections, processed to generate a response, and is not retained by the provider for training their AI models. Our AI service provider is contractually obligated to handle your data in accordance with its published data protection policies and applicable privacy laws.

Your consent: By creating an account and using the Service, you consent to the transmission of your data to our AI service provider as described above. This processing is necessary to deliver the core functionality of the Service. If you do not wish for your data to be processed by third-party AI services, you should discontinue use of the Service.

In Short: When you connect a Google account, Clara accesses your Gmail and Google Calendar only to provide the assistant features you ask for. Clara's use of this data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Clara is a family chief-of-staff that works on top of the Google services you choose to connect. Connecting a Google account is optional and initiated by you; you grant each permission on Google's own consent screen and can decline or remove any of them at any time. The Google data Clara accesses, and why:

• Gmail. Clara reads your recent email to surface tasks, events, reminders, and daily briefs. Clara does not delete mail on your behalf.
• Google Calendar. Clara reads your calendars to answer questions, brief you, and detect conflicts, and creates or edits events when you ask.

Limited Use. Clara's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Google user data Clara accesses is used solely to provide and improve the user-facing assistant features described above; it is not sold or transferred to third parties for advertising or other unrelated purposes; it is not used for advertising; and it is not used to train, develop, or improve generalized or foundation AI models. Humans do not read your Google user data except (a) with your explicit consent (for example, to troubleshoot an issue you report), (b) where necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized. Where Clara relies on third-party AI providers to operate (see Section 5), that processing is performed solely to deliver these features at your direction, the providers are contractually prohibited from using your data to train their models, and it remains subject to these Limited Use commitments.

How to revoke access. You can disconnect Google at any time from Clara's Settings. You may also revoke Clara's access directly from your Google Account's Third-party apps & services settings. When access is revoked, Clara stops accessing your Google data.

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store Personal Information, including your browser type, operating system version, domains, IP address, the URL of the page that referred you, and information about your interactions with our Website.

In Short: We may transfer, store, and process your Personal Information in countries other than your own.

Our servers and subprocessors are located in the United States and other countries. If you are accessing our Services from outside those countries, please be aware that your Personal Information may be transferred to, stored, and processed by us and by those third parties with whom we may share your Personal Information.

If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country.

In Short: We keep your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your Personal Information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. No purpose in this Privacy Policy will require us to keep your Personal Information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it, or, if this is not possible (for example, because it has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

In Short: We aim to protect your Personal Information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any Personal Information we process, including TLS in transit, encryption at rest, application-layer encryption of Google OAuth tokens, and row-level security to isolate each household's data. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security. Transmission of Personal Information to and from our Services is at your own risk.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Website, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Website. If you become aware of any Personal Information we may have collected from children under age 18, please contact us at privacy@clara-chief-of-staff.lovable.app.

In Short: In some regions, such as the European Economic Area (EEA) and United Kingdom (UK), you have rights that allow you greater access to and control over your Personal Information. You may review, change, or terminate your account at any time.

In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information.

If we are relying on your consent to process your Personal Information, you have the right to withdraw your consent at any time.

If you are a resident in the EEA or UK and you believe we are unlawfully processing your Personal Information, you have the right to complain to your local data protection supervisory authority.

Account information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account, or contact us using the contact information provided. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information to prevent fraud, troubleshoot problems, assist with investigations, enforce our Terms of Service, and/or comply with applicable legal requirements.

Cookies and similar technologies: Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove or reject cookies, this could affect certain features or services of our Website.

Opting out of email marketing: You can unsubscribe from our marketing email list at any time by clicking the unsubscribe link in the emails we send or by contacting us. You will then be removed from the marketing email list. We may still communicate with you about service-related matters.

In Short: If we offer SMS/MMS messaging, we may collect your phone number to send you service-related messages. Your mobile information is not shared for marketing purposes.

If you choose to use any SMS/MMS messaging service we offer, we collect your mobile phone number to send you task reminders, daily briefs, and other service-related messages. Message frequency varies based on your usage and preferences. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

You may opt out of receiving SMS/MMS messages at any time by replying STOP to any message you receive from us. For help, reply HELP or contact us at privacy@clara-chief-of-staff.lovable.app.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. We encourage you to review this Privacy Policy frequently.

If you have questions or comments about this notice, you may email us at privacy@clara-chief-of-staff.lovable.app. For a broader overview of our security and data practices, see our Trust & privacy page.

Based on the applicable laws of your country, you may have the right to request access to the Personal Information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your Personal Information, please email privacy@clara-chief-of-staff.lovable.app.