General privacy

Who is responsible

Clareya is operated by Clareya LLC, a Texas limited liability company. The app is for US adults 18 or older using their own health information.

Information and purposes

We keep account identifiers, sign-in and recovery information, preferences, profile display names, consent decisions and their versions, billing references, support messages, security records and job status to run the service.

Your records can include medicines, supplements, amounts and schedules, conditions, allergies, symptoms, labs, habits, goals, notes and daily check-ins; mental, sexual and reproductive history, pregnancy and cycle information; and protocols and phases, planned and actual administrations, injection sites, vials and concentrations, batch labels and lot numbers, private supplier notes, typed test results and certificate files, bloodwork plans, tracked check-ins and urgent symptoms, body measurements, body estimates and optional progress photos. Uploaded lab reports, medicine labels and lists, and certificates can contain names and other identifiers. These files are saved as you upload them, so a photo among them keeps any camera or location details stored in its file, unless the app saved a smaller JPEG copy of a medicine photo instead; the images sent to Anthropic have those details removed. Findings, comparisons, scores and estimates the app derives can themselves reveal health information, and so can the fact that you use a health feature.

Information comes from you, the files you upload, your use of the app, sign-in and payment providers, and the calculations and AI results the app produces from your inputs. Clareya does not connect to other health apps, devices or medical-record systems, and does not obtain records about you from a clinician or insurer. If your account holds records imported earlier, they are sent to AI only when their original source allows AI use; Oura, WHOOP and Strava data is never sent to AI. Public substance research is built from public sources and shared in the substance library; it does not use your private profile.

We use this information for the tracking, history, calculations, comparisons, safety alerts, reminders and reports you use, and for support, billing, security and privacy requests. After an Analyze report, relevant changes you save can automatically start an AI update of the affected findings and scores while you have paid access, at most once a day for each profile and up to a monthly limit; the original report and each update are kept separately. Logging an entry, viewing a saved report or changing reading mode never starts a new Full Analyze run.

Service providers

• Cloudflare: Hosts the app, its database, private files and background jobs, and handles each request.
• Anthropic: Provides Claude and receives health information for the AI features you use, as the Health data privacy notice describes. Supplier notes, batch notes, testing-lab names and certificate files are never sent to AI, and progress photos are sent only for a body estimate you request. Anthropic also receives the questions you send to the support assistant, medicine or substance names you ask the app to identify, and substance names and research queries for public research, for which it runs web searches.
• Supabase: Handles sign-in, email verification and account recovery. Google is involved only if you choose Google sign-in.
• Stripe: Handles payments, subscriptions, invoices and tax calculation. It does not receive your health records.
• Resend: Sends the app’s emails, such as billing notices, support-ticket updates and the reminder, review and research-ready emails you turn on. They link to the app and contain no health details.
• Zoho: Provides the support@clareya.app mailbox and receives the emails you send there.
• Public research sources: Receive substance names and research queries, not your profile. Opening an external source link contacts that website.

The Clareya operator accesses information only as needed for support, privacy, security, billing and cost accounting, and sees usage statistics only as combined counts.

Anthropic’s commercial terms govern how long it keeps requests, and it may keep some information for security or legal reasons. Clareya has no zero-data-retention agreement with Anthropic. Clareya sends AI requests to Anthropic through its API at Anthropic’s standard service tier. Apart from what a request contains, such as identifiers printed on a page you upload, the app does not send your name, email or an account identifier with it. Only the app’s own fixed instructions, such as those for reading lab pages and for public substance research, can be kept in Anthropic’s prompt cache, for 5 minutes. Your records, questions, images and profile are never placed in that cache. AI answers can be wrong or incomplete.

We do not promise HIPAA compliance, a business associate agreement, zero data retention or US-only processing.

Your choices

We save health information only after you accept the health permission, and send it to Anthropic only under your signed authorization. Your health permission, the Anthropic authorization, photo sharing, usage statistics, reminder and review emails, research-ready emails and product emails are separate choices, and so is publishing a stack. You accept the health permission and sign the Anthropic authorization at sign-in; adding health information and using AI features need both. An earlier OpenAI permission does not authorize any transfer to Anthropic. Reading a notice or continuing to use the app never grants a new permission, and a new recipient, purpose or scope needs a new choice.

Withdrawing your health permission

You can withdraw in Account at any time. This stops new health entries and AI requests, including automatic updates, body estimates and the support assistant, until you accept again. It also turns off optional usage statistics and deletes that usage history, turns off research-ready emails and cancels queued research-ready and reminder emails. It does not delete saved records or photos, or recall information already sent. You can still sign in, download or delete your records and photos, manage billing and contact direct support. Your photo-sharing, reminder, review-email and product-email choices stay as they are, but no photos are sent to AI and no reminder or review email is sent while this permission is off. Turning photo sharing off stops future photo transfers without deleting saved photos or past estimates.

The Anthropic authorization

The Anthropic authorization expires one year after you sign it unless you withdraw it sooner in Account. If you withdraw it or it expires, new health entries and AI requests stop until you sign again, queued AI work is not sent, and information already sent cannot be recalled. You can still download or delete your records, manage billing and contact direct support. You can download your signed authorization in Account; signed copies are never rewritten.

Emails

Product emails are a separate optional choice and are sent only to people who opt in. Reminder, review and research-ready emails are off unless you turn them on. A research-ready email goes to your verified email address and says only that a public library review you requested is ready; turn it off in your Regimen settings. Account, security, billing and support messages are sent when needed to run your account.

Public pages and stack sharing

The public library, calculators, comparisons and stack pages work without an account. A regimen example you try there is saved only in that browser, with its substances, amounts, preparation and timing and no notes or health history, until you clear it. It reaches your account only if you sign in and choose to save it, and then it waits as an imported document for your review.

If you choose Publish this anonymized stack, the app creates a public stack card from your active regimen items that have a completed public library page. You see a preview first, and nothing is published until you choose to publish it. Anyone with the link can see the substance names, amounts, routes, forms and times, with public reference risks and illustrative curves. A published card can also be listed in the site’s sitemap and indexed by search engines, so people can find it without the link. Your profile name, notes, conditions, allergies, labs and dates are left out, but a distinctive stack can still be recognized.

A published card is stored without your account or profile ID. The app keeps only a one-way code derived from them, which it uses to avoid publishing the same preview twice, and it does not link the card to your account. A published card cannot be changed, so later edits to your regimen do not update it. There is no control to remove a published card, and it is not deleted when you delete your profile or account. Publishing needs your health permission and signed agreements, like other changes to your records.

Progress photos

The optional photo permission (version ai-photos-2026-10-26-clareya) says:

When you ask for an AI body-fat or FFMI estimate (a subscriber feature), we send your most recent progress photos (up to 3, one per pose, all from one day in the last 30 days) with their date and pose to Anthropic, together with the other estimate inputs, under your separate Anthropic authorization. The estimate card shows which day of photos is included before you send. Saved copies are JPEGs no more than 512 pixels on the longest side, with location and camera details removed, but visible content can still identify you. Photos are used only for the body estimate you request, never for Analyze, Today, public research, emails or usage statistics. Saved photo copies stay until you delete them; deleting a photo removes the image, but its date, pose, size and file fingerprint, and any estimate that used it, stay until the profile or account is deleted. Anthropic’s commercial terms govern how long it keeps requests, and Clareya has no zero-data-retention agreement with Anthropic. Turn this off in Settings or Account to stop sending photos with future estimates; saved photos and past estimates are not deleted, and photos already sent cannot be recalled. Uploading or viewing a photo does not send it to AI.

Optional usage statistics

The optional usage-statistics choice (version today-analytics-2026-10-26-clareya) says:

With your permission, we record account-linked check-in completions, checklist use, weekly-summary views, return visits, switches between Everyday and Advanced, and when you record an injection, apply a protocol phase, link a lab result to a planned blood draw or open a protocol review. We use these events to see which features are used and to improve the app. Each event records the action, when it happened and, for a mode switch, the mode you chose. Events contain no answers, substance or supplier names, doses, lab values, photos or certificate contents, but they can show that you use a health feature, and they are not anonymous. Cloudflare stores them. Usage reports show only combined counts, with groups of fewer than 5 people hidden, and no advertising service receives them. This choice is optional and does not change access to app features.

Daily events and their activity-log copies are deleted after 30 days. First-use and return milestones are kept only while this permission is on. Turning this off, or withdrawing health-processing permission, deletes this usage history without deleting your health records. An earlier usage-statistics choice covers only the Today events it named; mode switches and protocol feature events are recorded only under this version. Accepting this version starts a new permission, and usage history kept under an earlier one is deleted. You can turn this on again in Account at any time while health-processing permission is on; activity from while it was off is never added.

Usage statistics are off unless you turn them on, after sign-in or in Account.

Browser, security and advertising

Essential cookies and settings saved in your browser keep you signed in and remember display choices and any regimen example you are trying out. While you are signed in, health information you entered that the app could not save, for example while you were offline, and a support-assistant question you have not sent can be kept in that browser tab’s storage until they are saved or sent, you sign out or delete your account, or you close the tab. Cloudflare receives IP addresses, request times and other technical details for each request. The app’s own request logs record the type of request, its result and its timing, not your health information. No internet service can guarantee complete security.

The app has no advertising pixels, ad trackers or session replay. We do not sell health information or use it for targeted advertising. Sign-in and payment pages follow their providers’ own rules.

Retention and deletion

The health permission you accept (version health-ai-2026-10-26-clareya) says:

New original lab uploads and their page previews are deleted after 90 days; earlier uploads keep the expiry shown with the file. Batch certificate files are deleted 90 days after upload. They have no page previews, and you cannot delete one sooner except by deleting its profile or your account; the test values you typed stay. Progress photos are saved as reduced JPEG copies, at most 512 pixels on the longest side, with location and camera details removed; visible content can still identify you. Each copy stays until you delete it, its profile or your account. Deleting a photo removes the image, but its date, pose, size and file fingerprint, and any body estimate that used it, stay until the profile or account is deleted. Extracted results, typed test values, corrections, tracking, estimates and reports stay until you delete the profile or your account. A medicine list or label you upload for import stays until you discard the import before saving anything from it, or delete the profile or your account. Name-identification requests (the name you typed and the suggested match) stay until you delete your account. A stack card you publish stays public and is not deleted with your profile or account. Photos are downloaded separately from the records export. The Health data privacy notice explains how long request and consent records and backups are kept, and how provider copies are handled. Setup progress is saved separately from health records. The Quick Analysis, its input basis and private provider response remain until the profile or account is deleted. A minimal account-level allowance and attempt record, without the deleted health information, remains after profile deletion so recreating a profile does not grant another complimentary result; it is removed on account deletion. Model and cost records follow the existing billing-record retention rules.

Progress photos have no automatic expiry. When you delete one, the app stops showing it at once and then deletes the stored image.

Usage statistics are kept as described above. Resolved support tickets are deleted 180 days after they are resolved, and support-assistant requests 30 days after their last update. The app’s operational, security and request logs are deleted after 30 days, and the stored copy of each app email loses its recipient, subject and text after 30 days. The app keeps a private copy of each response it receives from Anthropic for your requests until the profile or account it belongs to is deleted, and each body-estimate request record until its profile is deleted. Profile display names stay until you change them or delete the profile or account. The record of which public library reviews you requested stays until you delete your account. Research-ready email settings, and the reviews they are waiting on, stay until you delete the profile or account. Consent, authorization and agreement records stay until your account is deleted. A record of each AI request’s feature, date, model and cost, without its content, is kept with the billing records, including after profile or account deletion.

Deleting a profile deletes its records, uploads, photos, estimates and reports. Deleting your account cancels future billing first, then deletes every profile and your consent, authorization and support records; billing records needed for tax and accounting, the AI request cost records and a minimal deletion marker remain. A stack card you published stays public. After you request account deletion, a status link shows the app’s progress for 30 days. Copies held by providers follow each provider’s own policy, with no period set by Clareya: Anthropic’s commercial terms govern how long it keeps requests, and it may keep some information for security or legal reasons; Resend keeps its own records of the emails it delivered; and Zoho keeps the emails you send to support until they are deleted from the mailbox. Backups, including Cloudflare’s database recovery copies and the operator’s encrypted backups of the database and stored files, can include deleted information, including deleted photos, for up to 30 days.

Your records and privacy requests

Download my records in Account gives you a readable file with your saved records and their correction history, including protocol, administration, vial, batch and body-tracking records, body estimates with the AI output text and usage record, saved reports and insights, consent, authorization and agreement history, support messages, billing history, profile display names and name-identification requests. It does not include original uploaded files or the app’s private copies of Anthropic responses; download lab originals and batch certificates before they expire. The list of public library reviews you requested and your research-ready email settings are not in this file; ask for a copy with a Privacy or deletion ticket. Progress photos have their own download, Download my photos, with the saved reduced copies rather than your original photos. Downloads and deletion stay available while new health entries are paused.

You can ask to access, correct, copy or delete your information, withdraw a permission, get a list of the third parties that received your health information, or have a denied request reviewed. Use the controls in Account or send a Privacy or deletion ticket; if you cannot sign in, email support@clareya.app. We may ask you to confirm that the account is yours, or that you are authorized to act for its owner. Do not send passwords or your health history to confirm your identity. We answer within the time applicable privacy law requires, which is separate from our ordinary support reply target.

If you disagree with how we handled a privacy request, ask for an appeal through the same contact. We will explain our decision and how to complain to a regulator. You may contact your state attorney general. Clareya is software, not a licensed medical practice, and has no supervising medical licensing board.

What this version adds

This version adds an optional first-use guide and one complimentary Quick Analysis for each eligible account, including subscribers. You choose whether to begin or leave setup, and skipping never uses the complimentary result. Quick Analysis starts only when you explicitly request it and after current health permission and Anthropic authorization. It produces a short starting plan from the saved information described on the review screen, with its input basis and limitations. It is separate from Full Analyze, does not create a score, and never starts automatic report updates. Setup progress does not grant optional email, usage-statistics or photo permission. Ordinary saved-result reads do not send a new AI request.

Changes to these notices

We announce important privacy changes in your account when they take effect. The announcement explains what changed. You can find current and earlier announcements under Privacy updates in Account and in the notice history below. We will also send an account email when a change requires direct notice by email.

If a new use or disclosure needs your permission, we will ask before it starts. Reading a notice or continuing to use the app does not give that permission. Updated app agreements are shown at sign-in for review before normal app use. Your account, privacy controls, saved-record exports, billing management and direct support remain available.

Open Privacy updates in Account