Privacy Policy | Clarity

Clarity, operated by Clarity Faith, is committed to protecting your privacy. This policy explains what we collect, why we collect it, and how we handle it. It applies to both the Clarity web app and the Clarity mobile apps for iOS and Android.

What we collect

Account information — your email address when you create an account, plus optional profile information such as display name and faith tradition.
Study data — notes, highlights, bookmarks, lesson plans, and reading history you create in the app.
Chat history — your conversations with the AI assistant, stored so you can continue them later.
Optional product analytics — if you choose Share Usage & Diagnostics, PostHog receives events such as screens and features used, message counts, and conversion steps. After sign-in, these events may include your Clarity account ID so activity across sessions can be connected to your account. We do not send an advertising ID or use this data for cross-app tracking.
Native install attribution. With usage and diagnostics enabled, we use official Apple and Google store APIs to collect install-source information and, when available, Apple campaign, ad-group, keyword, and click/impression attribution. PostHog processes this limited metadata for Clarity. After sign-in, we link it to your Clarity account to measure which sources lead to app use and payments. We do not retain raw referrers, click identifiers, or Apple attribution tokens in these analytics or forward this metadata to advertisers.
Optional crash diagnostics — under the same choice, Sentry receives crash and error details such as stack traces, device and operating-system class, app version, and your Clarity account ID after sign-in. We do not intentionally include chat content or notes in these reports.
Device identifier — on mobile, the app stores a per-install identifier in the iOS Keychain or Android encrypted storage to enforce fair-use limits and recover sessions. This identifier is never linked to advertising networks or shared with data brokers.
Server logs — IP address, user-agent, and timestamps are visible to our infrastructure providers for security and abuse prevention. These logs are retained for up to 7 days.
Payment information — handled entirely by Apple (iOS in-app purchases), Google (Android in-app purchases), or Stripe via RevenueCat (web). We never see your payment card details.

Voice features

When you use voice dictation in chat on mobile, your microphone audio is sent to your device's built-in speech recognizer (Apple on iOS, Google on Android), governed by their respective privacy terms. Clarity itself does not record, store, or transmit raw audio from your microphone. When the app reads text aloud, only the text — not your voice — is sent to our text-to-speech provider.

How we use it

To provide and improve Clarity.
To sync your study data across your devices.
To enforce subscription limits fairly.
To respond to support requests.
To detect and prevent fraud or abuse.

What we do not do

We do not sell your data to third parties.
We do not use your chat history for AI training.
We do not show ads inside Clarity.
We do not share your questions, chat history, notes, Scripture selections, or faith preferences with advertisers.
We do not use device advertising identifiers (IDFA/AAID).

Optional advertising measurement on the web

With your separate permission, Clarity can use an ad click identifier to connect a confirmed new account or web purchase to the ad that brought you here. PostHog processes these limited conversion events for us. Meta receives its click identifier, an event identifier, event time, the amount in US dollars for a purchase, and the app's home address. Google Ads receives its click identifier, an event identifier, event time, and the amount and currency for a purchase. Each provider requires its own permission. We do not send the page or question you read, your email, or your study content. You can decline and still use Clarity, or turn off the provider's Advertising measurement choice in Account settings to stop future sharing. These choices are separate from Share usage & diagnostics. Native iOS and Android purchases are not forwarded through these web connections.

Service providers

We rely on a small number of trusted providers to operate Clarity. Each receives only the data they need to perform their service:

Supabase — database, authentication, backend infrastructure.
Google (Gemini API) and OpenAI — when you intentionally use an Ask or Send action, the app discloses that your message and relevant context (which can include chat history, selected Scripture, notes you attach, and faith or profile preferences) leave your device and are sent through Clarity's server to the provider selected for that request. Your Ask or Send action authorizes that processing. You can block new AI requests at any time in Privacy settings. The provider processes this content to generate the response; our business/API use is not used to train its general-purpose models.
Google Cloud (Text-to-Speech) and OpenAI (TTS) — to synthesize spoken audio from text.
RevenueCat — to manage subscription state across iOS, Android, and web.
PostHog, optional product analytics linked with your Clarity account ID after sign-in, and separately permitted web advertising measurement.
Meta, the limited web signup and purchase measurement described above, only with your advertising permission.
Google Ads, the limited web signup and purchase measurement described above, only with your separate Google advertising permission.
Sentry — optional crash and error diagnostics, including stack traces, device/OS class, app version, and your Clarity account ID after sign-in.
Apple, Google Play, Stripe — to process payments. Card data goes directly from you to them; we never touch it.
Vercel — to host the Clarity web app and marketing site.

Data retention

Account data — kept until you delete your account, then removed within 30 days.
Server logs — up to 7 days.
Subscription audit events — retained for up to 7 years to comply with financial recordkeeping obligations.
Advertising click identifiers, cleared from your advertising preference when you revoke permission. Conversion delivery records are retained for up to 90 days for deduplication and troubleshooting, and are removed with your account.
Backups — encrypted backups are kept on a 30-day rolling window.

Children

Clarity is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, please contact us and we will remove the account.

Your rights

You can delete your account and all associated data at any time. In the Clarity app, open Settings → your account → Delete account; this permanently removes your account and study data on confirmation. You can also email support@clarityfaith.com with the subject "Delete my account" and we will complete the deletion within 30 days.

Depending on where you live (including the EU, UK, and California), you may also have the right to access the data we hold about you, correct inaccurate data, request portability, or object to certain processing. To exercise any of these rights, contact us.

In the app's Privacy settings, you can turn off AI content sharing and independently opt in or out of PostHog/Sentry analytics and diagnostics. Turning a choice off blocks new requests or reports; it does not delete content you previously chose to save to your Clarity account.

Security

All data is encrypted in transit (HTTPS/TLS). Account credentials are stored using salted hashes; we never store plaintext passwords. No system is perfectly secure, so we recommend using a strong, unique password for your account.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page. If the change is material, we'll let you know in the app or by email before it takes effect.

Contact

Questions about privacy? Get in touch or email support@clarityfaith.com.