Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and password when you create an account
• Profile Information: Name, date of birth, gender, and other demographic information you choose to provide
• Health Documents: Medical records, lab results, and other health-related documents you upload
• Health Data: Information extracted from your uploaded documents and data you manually enter
• Communications: Messages you send through the Service, including conversations with our AI assistant

1.2 Information from Apple HealthKit

With your explicit permission, we may access health data from Apple HealthKit, including but not limited to:

• Steps, distance, and activity data
• Heart rate and heart rate variability
• Sleep analysis
• Body measurements (height, weight)
• Vital signs (blood pressure, blood glucose, etc.)

Clarity saves the workouts you log to Apple Health. If you turn on Write to Apple Health in Data Sources, Clarity also saves the meals, water, caffeine and alcohol you log. This data is written to Apple Health on your device. Other apps can read it only if you allow them in Apple Health, and you can turn the switch off at any time.

1.3 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Information: Features used, actions taken, time and duration of use
• Log Data: IP address, access times, pages viewed, app crashes, and system activity

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Process and analyze your health documents, generate insights, and respond to your questions
• Personalize Your Experience: Tailor content and recommendations based on your health profile
• Improve the Service: Analyze usage patterns to enhance features and functionality
• Communicate with You: Send service-related notices, respond to inquiries, and provide customer support
• Ensure Security: Detect, prevent, and address fraud, abuse, and security issues
• Comply with Legal Obligations: Meet applicable legal and regulatory requirements

3. AI Processing and Data Analysis

Our Service uses artificial intelligence powered by Anthropic ("Claude") to analyze your health data and provide personalized insights. When you use AI-powered features such as Clair (our health assistant), lab analysis, food recognition, or workout planning, certain data is sent to Anthropic for processing. This may include:

• Health metrics and vitals from Apple HealthKit (e.g., heart rate, HRV, sleep data)
• Lab results and biomarker values you have uploaded
• Messages and questions you send to our AI assistant
• Food photos and meal descriptions submitted for nutritional analysis
• Workout and fitness data relevant to generating training plans

By using these features, you consent to this data being sent to Anthropic for processing. You also acknowledge that:

• All data is encrypted in transit when sent to Anthropic
• Anthropic does not use your data to train AI models
• Anthropic automatically deletes this data within 30 days, except in rare cases where the law requires otherwise or a request is flagged for misuse
• AI-generated content is for informational purposes only and does not constitute medical advice

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers who assist us in operating the Service, including:

• Cloud storage and infrastructure providers (e.g., Firebase/Google Cloud)
• AI processing services (Anthropic) for health data analysis and insights
• Analytics services
• Customer support tools

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order, subpoena, or government request.

4.3 Protection of Rights

We may disclose information when we believe it is necessary to protect our rights, your safety, or the safety of others; investigate fraud; or respond to a government request.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.

5. Data Security

We implement robust security measures to protect your information:

• Encryption: All data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls limit who can access your data within our organization
• Infrastructure: We use enterprise-grade cloud infrastructure with security certifications
• Monitoring: Continuous security monitoring and regular security assessments

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. Specific retention periods:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Health Documents: Retained until you delete them or close your account
• Usage Data: Retained for up to 24 months for analytics purposes
• Backup Data: May persist in backups for up to 30 days after deletion

Upon account deletion, we will delete or anonymize your personal information within 30 days, except as required by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for data processing where applicable
• Opt-Out: Opt out of certain types of data processing or communications

To exercise these rights, contact us at support@clarityhealthapp.ai. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Opt-Out of Sale: We do not sell your personal information

To make a request, email us at support@clarityhealthapp.ai with "CCPA Request" in the subject line.

9. Washington State Consumer Health Data

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to such transfer.

For users in the European Economic Area (EEA), we rely on appropriate legal bases for processing your data, including consent, contract performance, and legitimate interests.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy within the app
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification for significant changes

Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: