Privacy Policy

1. Who We Are

Clariyo is a personal development tool designed to support your growth, reflection, and goal-setting. Clariyo is operated by Clariyo LLC, a New York Limited Liability Company. We are not a medical provider, therapist, or licensed mental health service.

2. What Information We Collect

We may collect the following types of information:

• Usage data — how you interact with the app, including features used and session duration.
• Conversation content — the prompts and responses within your Clariyo sessions. See Section 4 for exactly how this is handled.
• Feedback — if you use the thumbs up/down tool or submit written feedback, that content is collected and associated with the relevant session.
• Device and technical data — such as browser type, operating system, and IP address.
• Cookie and analytics data — if you consent, we use Google Analytics and Microsoft Clarity to collect data about how visitors find and use Clariyo. Google Analytics collects aggregated, anonymised data — pages visited, session duration, and general location (country level) — via cookies (_ga, _gid). Microsoft Clarity records how visitors move through the site (clicks, scrolling, and heatmaps) so we can spot and fix usability issues; the conversation area is configured to mask all reflection content, so nothing you write to Clariyo is ever visible in a Clarity recording. Neither tool is linked to your conversation content or used to identify you individually. You can manage or withdraw your consent at any time using the cookie banner at the bottom of the page.

Using Clariyo's free tier does not require account creation — no login or personal profile is needed. If you subscribe to Clariyo Unlimited, or sign in to an existing account, you use a one-time email sign-in link (a "magic link"); there is no password. For your account we collect only the email address you sign in with and your subscription status. Payment is handled by our payment processor, Paddle — see Section 6 for details. We do not receive or store your card details.

We do not collect sensitive personal data such as health records, financial data, or government-issued identification numbers. We ask that you do not submit this type of information through Clariyo.

3. How We Use Your Information

We use your information to:

• Deliver and improve the Clariyo experience
• Investigate technical errors and maintain platform reliability
• Review feedback you explicitly submit to improve the quality of the tool
• Send occasional product updates if you have opted in (you may opt out at any time)
• Maintain the security and performance of our platform
• Understand how people find and use Clariyo, and spot usability issues — via Google Analytics and Microsoft Clarity, only where you have given cookie consent

We do not sell your data.

4. AI Processing, Logging & Your Data

Clariyo is powered by an AI agent built on Gumloop's platform. Here is exactly how your data is handled:

• No AI training: Gumloop is contractually committed to not using customer data to train AI models. For any third-party AI models used in processing your requests, Gumloop has Zero Data Retention (ZDR) agreements and Data Processing Addendums (DPAs) in place, under which third-party AI providers agree not to retain or use your data beyond delivering a response.
• Infrastructure-level logging: Clariyo does not store full conversation content on its own servers — with one exception, described under Feedback storage below. Gumloop automatically logs workflow inputs and outputs at the infrastructure level for system reliability, error monitoring, and analytics. This is standard practice for AI infrastructure providers and occurs across all sessions.
• How Clariyo uses that data: Clariyo only reviews conversation content in the following circumstances:
  • To investigate a technical error flagged by the system, or
  • When you explicitly submit feedback using the thumbs up/down tool or written feedback form.

  We do not proactively review conversations outside of these triggers.

  Feedback storage

  When you submit thumbs up/down feedback, the AI's reply you're rating is stored on Clariyo's own servers, along with your rating, any comment you provide, and a randomly generated device ID — not your identity. This is the one exception to conversations staying only on your device. It is reviewed by the Clariyo team to improve the product and is not used to train AI models.

• Security: Gumloop is SOC 2 Type II and GDPR compliant. All data is encrypted in transit and at rest using AES-256 encryption.
• AI output accuracy: AI-generated responses are produced by a language model. While we work to ensure quality, AI outputs may be incomplete, imprecise, or not applicable to your specific situation. Use your own judgment when applying any suggestions from Clariyo.

5. Conversation Storage

Using Clariyo's free tier does not require an account, and conversations are stored locally on your device, not retained on our servers beyond the platform-level logging described in Section 4. If you subscribe, your account (email address and subscription status) is stored separately from your conversation content — see Section 6 for how Paddle processes your payment information.

Signing in does not sync or store your conversations. Your account records only your email address and subscription status, so if you sign in on a new device you will have your subscription but not your earlier conversations, which stay in the browser where you had them. (The one exception is feedback you choose to submit, described in Section 4.)

Your conversation history will not appear if you:

• Open Clariyo on a different device or browser
• Use a private or incognito window
• Clear your browser's site data

Clariyo does not store a copy of your conversation history that we are able to restore for you.

You can clear your conversation history at any time through your browser or device settings.

If this changes in a future update, we will revise this policy and notify users before any new data storage practices take effect.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service providers — trusted vendors who help us operate Clariyo, including Gumloop (AI infrastructure), Google Analytics and Microsoft Clarity (site analytics and usability tracking, only with your cookie consent), Lovable (frontend hosting), Supabase (account sign-in, including sending your one-time sign-in links, and subscription records, provided through Lovable), and Paddle (payment processing for subscriptions). Each is bound by confidentiality obligations and, where applicable, Data Processing Addendums.
• Legal compliance — if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers — in the event of a merger or acquisition, you will be notified before your data is transferred or becomes subject to a different privacy policy.

Payment processing. If you subscribe to Clariyo Unlimited, your billing email and transaction data are processed by Paddle, our payment provider and Merchant of Record, to process your payment and manage your subscription. Paddle acts as an independent data controller for this information under its own privacy policy. We process this information because it is necessary to perform our contract with you (providing the subscription you've signed up for) and, where applicable, to comply with our legal obligations such as tax recordkeeping.

7. Cookies

Clariyo uses three types of cookies:

• Necessary cookies — these are required for the site to function correctly. They handle session management (including keeping you signed in) and security. They are always active and do not require your consent.
• Analytics cookies — with your consent, we use Google Analytics (cookies: _ga, _gid) to understand how visitors interact with Clariyo in aggregate. Google processes this data on our behalf and may transfer it to servers in the United States. Google is certified under the EU–US Data Privacy Framework. For more information, see Google's Privacy Policy.
• Session and heatmap cookies — with your consent, we use Microsoft Clarity (cookies including _clck and _clsk) to see how visitors navigate and interact with Clariyo, so we can improve usability. Clarity's recordings and heatmaps are configured to mask all reflection conversation content — nothing you type to Clariyo is captured. Microsoft processes this data on our behalf. For more information, see Microsoft Clarity's documentation.

You can accept or decline analytics cookies via the cookie banner when you first visit the site, and change your preference at any time using the 'Cookie preferences' link in the footer.

We do not use advertising cookies or any cookies that track you across other websites. The analytics and session/heatmap cookies described above are used only to understand how Clariyo itself is used, and the heatmap tool is configured to mask all conversation content.

8. Your Rights

Since conversations are stored on your device, you can clear them at any time through your browser or device settings.

Depending on your location, you may also have the right to:

• Access any personal data we hold about you
• Request correction or deletion of the personal data and account information we directly control
• Opt out of marketing communications
• Lodge a complaint with a relevant data protection authority

Some of what you share in a conversation is processed through Gumloop, our AI infrastructure provider, to generate a response (see Section 4). Individual entries in Gumloop's system logs can't be deleted on request — only closing our account with Gumloop removes that data entirely. We'll let you know if a request you make is affected by this.

To exercise any of these rights, contact us at: useclariyo@gmail.com

To change the email address you sign in with, email us from your current sign-in address and tell us the new one.

9. Children's Privacy

Clariyo is not intended for users under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of Clariyo after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact: useclariyo@gmail.com