Privacy Policy

1. Information We Collect

ClaryFlow is designed to collect minimal personal data.

a. Information You Provide

• Name and email address (for account creation and authentication)
• An optional profile photo, if you choose to upload one
• Sign-in information provided by Google or Apple when you use social sign-in
• Subscription status and purchase verification information from the App Store or Google Play
• Support requests or communications you send to us
• Exercise responses, reflection content, and before/after mood check-ins when you use an exercise while signed in

b. Automatically Collected Information

We may collect limited technical data:

• Exercise start and completion information needed to provide the service
• Limited app activity needed to provide features, such as exercise completion and subscription access

Exercise Responses and Reflections

Written responses and selections are saved as drafts on your device. Starting an exercise while signed in sends its identifier and any initial mood check-in to ClaryFlow servers. When you complete an exercise, the app sends your written responses, selections, before/after mood check-ins, and completion information to the servers and associates them with your account. A local copy of completed responses is also retained on the device. We use account exercise data for completion tracking, subscription access limits, and recommendations based on your exercise data.

We do NOT collect:

• Medical records from hospitals, healthcare providers, or connected health record services
• Personal identity documents
• Contacts or private messages outside the support requests you choose to send
• Photos other than an optional profile photo you choose to upload

2. How We Use Your Information

We use collected data only to:

• Provide and maintain the app
• Authenticate your account and maintain your profile
• Manage your subscription
• Record completed exercises, apply free exercise limits, and provide exercise recommendations
• Respond to support requests and legal inquiries
• Improve app experience
• Fix bugs and monitor performance

We do not use your data for advertising profiling.

3. Data Storage and Security

We apply reasonable technical and organizational safeguards designed to protect the limited personal data we process.

• Account, subscription, support, and successfully submitted exercise data is stored on ClaryFlow servers
• Submitted exercise response content is encrypted in the database; account and exercise metadata, including mood scores, is stored separately
• Local drafts and completed responses are stored in the app's device storage; their protection depends on your device security settings
• Data sent between the app and our servers is encrypted in transit
• Drafts and other locally stored data may be lost if you delete the app, clear app data, or lose access to your device

Exercise Data, Retention, and Reminders

Your reflections and mood check-ins may contain sensitive personal information. You can use optional reflection steps without writing; information you do not enter is not included in your response. Exercise data submitted to your account remains there until account deletion. Local completed response storage normally retains up to 200 entries. Responses awaiting upload are kept until successfully submitted or local data is cleared.

If sending a completion fails, it remains on your device and may be absent from your account. When you are signed in to the same account and the app is open or reopened, pending completions are retried automatically. Local drafts are not restored from the server. Removing the app does not delete data already submitted to your account.

Daily reminders are optional and scheduled locally on your device. Their enabled state and selected time are stored locally for your account. The app checks available exercises and subscription access with the server to select an accessible exercise. Reminder content may appear on your lock screen; it does not include your written responses or mood scores. You can disable reminders in app or device settings.

4. Third-Party Services

ClaryFlow may use trusted third-party services:

• Apple App Store (in-app purchases)
• Google Play (subscriptions)
• Google Sign-In and Sign in with Apple (authentication)
• Hosting providers that operate the servers used for account, exercise, and support data

These services may collect and process data according to their own privacy policies and terms.

5. Data Sharing

We do not sell or rent personal data, and we do not share it for advertising.

Your data may only be shared:

• If required by law
• To comply with legal obligations
• To service providers that help us operate essential hosting, authentication, subscription, or support functions, subject to appropriate safeguards

6. Your Rights

You have the right to:

• Access your data
• Request correction of inaccurate account information
• Request deletion of your account
• Stop using the app at any time

Account Deletion

You can delete your account directly from within the app. Deleting your account does not automatically cancel an active Apple App Store or Google Play subscription. If your account is linked to Sign in with Apple, deletion requires verification with the same Apple account. ClaryFlow exchanges the temporary authorization code with Apple and revokes the sign-in authorization before deleting your account. These temporary tokens are not stored in your exercise records.

If you no longer have access to the app, you can request account and associated data deletion by emailing info@sryya.dev with the subject “ClaryFlow Account Deletion Request” and the email address associated with your account. We may ask you to verify account ownership before completing the request. Account profile data, synced exercise responses, support records, and subscription status stored by ClaryFlow will be deleted, except where limited retention is required for security, fraud prevention, or legal compliance.

7. Children's Privacy

ClaryFlow is not intended for users under 16. If local law allows younger users to access the service with parent or guardian consent, such consent is required. We do not knowingly collect personal data from children in violation of applicable law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the app, website, email, or other reasonable means before or when the changes take effect.

The updated policy will indicate the latest revision date.

9. Contact Us

ClaryFlow is operated by Sryya Dev. If you have any questions or need operator details for legal notices: info@sryya.dev