Privacy Policy

Clara AI is built so that your conversations belong to you. This policy explains what the Clara AI app for iPhone and the clara-ai.app website (together, the “Service”) handle, where it goes, how long it stays, and the choices you have. The Service is operated by Clara AI (“we”, “us”, “our”) from Dhaka, Bangladesh. Clara AI is the controller of the personal information described here. You can reach us at any time at support@clara-ai.app.

The short version

1. At a glance

Everything this policy describes, in one table. The sections that follow explain each row.

2. The two places your information lives

It helps to know the split. On your iPhone: every conversation, your companion roles, your “About you” note and your app settings, stored in the app’s private storage and never uploaded to us as a whole. On our servers (a Cloudflare Worker and database): the small amount of information needed to know who your account is, what plan you are on, how many replies you have used, and whether your subscription is active.

Conversation content passes through our servers on its way to the AI provider and back. It is processed in the moment and never written to our database or our logs.

3. Your account

When you sign in with Apple or Google, we create a user record containing: which provider you used; the stable, app-specific user identifier that provider gives us; your email address and display name, if the provider shares them; a random Clara AI user ID that we generate; and the times your account was created and last seen. We never receive or store a password.

• With Sign in with Apple, Apple shares your name only the first time you sign in, and if you choose Hide My Email we receive Apple’s private relay address rather than your real one. We also store the refresh token Apple issues, for one reason only: so that when you delete your account we can tell Apple to revoke Clara AI’s access, as Apple requires.
• With Sign in with Google, we verify the identity token Google issues and read the email and name it contains. We do not receive access to anything else in your Google Account.
• Your Clara AI user ID is also attached to your App Store purchases as an anonymous account token, so that a Clara Plus purchase can be matched to the account that made it.

Your session is an opaque token held by your iPhone in its Keychain. We store only its SHA-256 hash, so the token itself cannot be recovered from our database.

4. Conversations

What you and a companion say to each other is saved on your device, so each character keeps her own history. It is not uploaded to a Clara AI account, and it is not readable by us.

When you send a message, it travels over an encrypted connection to our server together with the most recent turns of that conversation (up to 24 messages, each capped at 2,000 characters), the active companion role, and your “About you” note if you wrote one. Our server checks your plan and forwards the request to the AI provider — the companion’s persona plus the last 12 messages on Free, or the last 20 on Clara Plus — which returns the reply as a stream. We do not log, retain or review the content of your messages or the replies, and no one at Clara AI reads your conversations.

Two more requests work the same way. When you open the Talking screen, the app asks our server for the companion’s opening line, sending the notes and summary described in section 7 and the last few turns; the server has the AI provider write and voice one line and returns it. And at the end of a session (or every so often during a long one) the app sends the newest turns together with those notes and that summary, and the server returns the updated notes and summary to your iPhone. Nothing from either request is stored by us.

You may choose to tell a companion sensitive things — about your health, your relationships, your beliefs. That is your choice, and the same rules apply: it is processed in the moment to generate the reply, sent to the AI provider under the no-retention instruction described in section 13, and never stored by us.

5. Voice input

When you hold the talk button, the microphone is used to transcribe your speech into text using Apple’s speech recognition, under Apple’s own terms and privacy policy. Depending on your device, iOS version and language, Apple may perform this on the device or on Apple’s servers. Clara AI’s servers receive only the resulting text of what you chose to send.

We do not record, upload or store audio of your voice. If Apple’s recognition is unavailable for your language or device, listening simply does not work — the app never falls back to recording you. The app asks for microphone and speech-recognition permission before any of this happens, and you can withdraw either permission at any time in iOS Settings. The Language tutor role sets the recognition language to the one you are learning.

6. Spoken replies (Clara Voice)

Clara Voice gives each companion her own synthetic voice. As a reply streams in, each finished sentence (at most 1,500 characters) is sent to our server and on to a speech provider, which returns audio that plays immediately. The text of that sentence is the companion’s words, not yours. We record how many characters were spoken and which voice preset was used — for your allowance and cost control — but not the text itself.

• Each companion’s opening greeting ships pre-recorded inside the app, so nothing is sent to anyone when she says hello.
• For the Language tutor role, Clara Voice currently speaks Spanish, French, Hindi, Italian, Japanese, Portuguese and Chinese. Other languages use your iPhone’s built-in voice, which never leaves the device.
• If you turn Clara Voice off in Settings, your iPhone’s built-in voice speaks instead and nothing is sent for speech at all.

7. Roles, your “About you” note, and what they remember

The optional “About you” note (your name and whatever you want the companions to remember) and any companion role you set — including the free-text instructions of a Custom role — are stored on your device and sent with each message so replies can be personal. Please do not put information in them that you would not want processed by an AI provider, including other people’s personal details. You can edit or erase both at any time in Settings.

The companions also keep short notes of their own — “What they remember” in Settings — written by the AI from your recent conversations: your name, the people and pets you mention, what you are working on, plans you told them about. Alongside them, each companion keeps a short summary of her earlier conversations with you. Both are stored only on your iPhone and are sent with each message and opening line so she can pick up where you left off. The AI is instructed not to note health or medical conditions, sexual life, religion, politics, finances, exact addresses, or other people’s private details unless you explicitly ask to be remembered for them. You can swipe any note away, or forget everything, at any time in Settings; clearing a conversation also clears that companion’s summary, and signing out or deleting your account removes all of it from the device.

8. Usage, metering and cost records

Plans are measured in completed replies, so we have to count them. For each turn we store a record containing: an identifier for the turn, your user ID, which allowance period it belongs to, whether it completed, the response mode, which character you spoke to, which model answered, the number of input and output tokens, and the provider cost. This record never contains any part of your message or the reply.

We also keep running counters per allowance period — replies used, Expert-mode replies used, and Clara Voice characters used — and an aggregate of daily provider spend across all users that is not linked to anyone. We use these to enforce allowances, prevent abuse, make sure a retried request is not charged twice, and stop the Service from overrunning its daily cost cap.

9. Subscriptions

Clara Plus is purchased through Apple. Apple processes the payment; we never receive your card number, billing address or Apple Account credentials. What we do receive and store, from the signed receipt your device sends us and from Apple’s server notifications about renewals, refunds and expiries, is: Apple’s transaction identifier for the subscription, the product purchased, its status, its expiry date, whether it will auto-renew, whether it is a production or sandbox purchase, and the anonymous account token that links it to your Clara AI account. This is how the app knows you are entitled to Plus.

10. Technical and security data

Our servers use your IP address to apply rate limits and block abuse; it is not written to our database. Request logs record the method, path, response status, how long the request took, and the first eight characters of your user ID — never message content, never tokens, never email addresses. Purchase events log their outcome and whether they were production or sandbox; a Clara Voice request logs its character count and voice preset; and if a provider returns an error, a short excerpt of that error may be logged. These logs exist for reliability and abuse prevention, are held by Cloudflare, and are kept for a few days.

11. This website

clara-ai.app is a set of static pages hosted on Cloudflare. It sets no cookies, includes no analytics or advertising scripts, and does not track you. Fonts are served from this domain rather than a third party. Cloudflare processes standard request data, including your IP address, to serve and protect the site.

12. Who else is involved

We do not sell or rent your personal information, and we do not share it for advertising. We do rely on a small number of companies to run the Service, and they process information only on our instructions or as needed to provide their service:

• Apple (United States) — App Store distribution, Sign in with Apple, subscription billing and receipts, and speech recognition.
• Google (United States) — Sign in with Google, if you choose it.
• Cloudflare (United States, global network) — hosting for this website, our API, our database, logs and rate limiting, and forwarding of email sent to support@clara-ai.app.
• OpenRouter (United States) — routes each request to the AI model that generates the reply and to the model that generates speech.
• AI model providers reached through OpenRouter — currently Google’s Gemini models for replies, and the Kokoro speech model served by DeepInfra (with Together as a failover) for Clara Voice.

These providers may change as we improve the Service; we will keep this list current. We may also disclose information if the law requires it, to protect our rights or someone’s safety, or as part of a merger or acquisition — in which case we will tell you before your information becomes subject to a different policy.

13. AI model training

We do not use your conversations to train, fine-tune or evaluate AI models, and we do not build profiles of you. Your messages go to the providers above for one purpose: generating the reply you asked for.

We also ask for that on your behalf at the routing layer. Every chat and speech request we send carries a data policy instructing our routing provider to use only model providers that do not retain or train on the content we send them. If we ever needed to relax that to keep the Service working, we would update this page first.

14. Where your information is processed

Clara AI is operated from Bangladesh, and our providers run globally — including in the United States and on edge networks in many countries — so your information may be processed outside the country where you live. Where the law requires a transfer mechanism for personal data leaving your region, we rely on the safeguards our providers offer, such as the European Commission’s Standard Contractual Clauses.

15. How long we keep things

16. Your controls in the app

• Clear conversation — erases the history with the selected companion from your device.
• About you — edit or empty it at any time.
• Roles — change or reset a companion’s role from her card.
• Clara Voice — turn it off to keep speech generation entirely on your device.
• Sign out — ends the session and removes conversations, roles and your “About you” note from that iPhone.
• Delete account — see the next section.
• iOS Settings — microphone and speech-recognition permissions are yours to withdraw at any time.

17. Deleting your account

Settings → Delete account erases your account on our servers: your user record, your email and display name, your Apple refresh token, all your sessions, your per-reply usage records and your allowance counters. If you signed in with Apple, we also ask Apple to revoke the tokens issued to Clara AI. Once the server confirms deletion, the app clears your local conversations, roles and “About you” note.

In the interest of being straight with you, a few things do survive, and none of them identifies you to anyone new:

• The subscription record stays, with the link to your user removed, so that a receipt cannot be replayed as a fresh purchase. It holds Apple’s transaction identifier, not your identity.
• Clara Plus usage counters are keyed to the subscription rather than to you, so the current month’s count stays with the subscription and ages out under the retention above.
• A one-way hash of your sign-in identifier is kept for up to 60 days, with the number of free replies you had used that day, so that deleting and re-creating an account cannot reset a free allowance within the same period. It cannot be reversed into your identifier, email or name.

Deleting your account does not cancel your App Store subscription. Cancel that in your App Store settings, or Apple will keep billing you.

18. Security

All traffic between the app and our servers is encrypted in transit with HTTPS. Session tokens are stored only as hashes. Purchase receipts and Apple’s notifications are verified against Apple’s own root certificate before we trust them. Provider credentials live as server-side secrets that the app never holds, so your device cannot leak them. Message content is kept out of our database and logs by design, and we limit request sizes and rates to contain abuse. No system is perfectly secure, but the strongest protection we can offer is structural: we designed the Service to hold as little of your information as possible in the first place. If a breach ever affects your personal information, we will notify you and any regulator as the law requires.

19. Why we are allowed to do this

If you are in the UK, the EEA or another region with similar law, our legal bases are: performance of our contract with you (running your account, generating replies, honouring your subscription); our legitimate interests (keeping the Service secure and available, preventing abuse and fraud, controlling costs); your consent (microphone and speech recognition, which you grant through iOS and can withdraw); and legal obligations (tax, accounting, responding to lawful requests).

The only automated decisions we make about you are enforcing your plan’s allowance and applying rate limits. Neither has a legal or similarly significant effect, and we never profile you.

20. Your rights

Depending on where you live, you may have the right to access a copy of your personal information, correct it, delete it, port it, restrict or object to certain processing, and withdraw consent. Because Clara AI keeps your conversations on your device and stores so little on the server, most of these controls are already in your hands — see section 16. For anything else, email support@clara-ai.app from the address on your account and we will respond within the time the law allows, normally within 30 days. We will never treat you worse for exercising a right.

If you are in the UK or the EEA and you are unhappy with how we have handled your request, you may complain to your local data-protection authority.

If you are in California, the categories of personal information we have collected in the preceding twelve months are: identifiers (your user ID, email address and sign-in identifier); personal information such as your name; commercial information (subscription records); internet activity (request logs and usage records); and the content of your messages, which we process in the moment to generate a reply and do not retain. We collect it from you, your device, Apple and Google, for the purposes described in this policy. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we have not done either in the preceding twelve months. You may exercise your rights yourself or through an authorised agent.

21. Children

Clara AI is for adults. The Service is intended for people 18 and over, it is not directed at children, and we do not knowingly collect personal information from anyone under 18 — and never from a child under 13. If you believe a child has created an account, contact us and we will close it and delete the information.

22. What we never do

• We never sell or rent your personal information.
• We never show ads or use advertising trackers.
• We never include third-party analytics or tracking SDKs in the app, and we never track you across other apps or websites — which is why the app never asks for tracking permission.
• We never access your location, contacts, photos, calendar or advertising identifier.
• We never record or upload audio of your voice.
• We never read your conversations, and no human reviews them.
• We never use your conversations to train AI models. If any of this ever changes, we will update this page and tell you before it takes effect.

23. Changes to this policy

We will update this policy as the Service changes. The date at the top always reflects the current version, and if a change is material we will give you notice in the app or on this page before it takes effect.

24. Contact

Privacy questions, access or deletion requests, or anything else: support@clara-ai.app.