Privacy Policy

1. Information We Collect

Information you give us:

• Account information: Your name, email address and password, or the basic profile (name, email, profile photo) shared by Google or Apple when you sign in with them.
• Profile details: Optional details such as a profile photo and the preferences you set in the app.
• Conversations with CLO: The answers, messages and reflections you type or speak to CLO, and the insights and analyses generated from them.
• Voice: When you use the microphone, your voice is recorded and streamed to our servers to be transcribed into text, and CLO's replies may be converted into speech. We use the microphone only while you have turned it on.
• People and relationships: The names, relationship types and details you add about the people in your life. If you choose a person from your device's contacts, the app reads your contacts on your device so you can pick one; only the name you select is saved to that relationship. We do not upload your contact list.
• Imported chats and files: Chat exports (for example from WhatsApp) and other files you choose to upload so CLO can analyse a relationship. These may contain messages written by other people; please only upload conversations you have the right to share.
• Support requests: The content of emails and reports you send us.

Information collected automatically:

• Device and app information: Device model, operating system, app version, language and similar technical information.
• Usage and diagnostics: How you interact with the app (screens visited, taps and feature usage), crash reports and performance data. We use Microsoft Clarity to understand how the app is used, which may include session recordings of in-app interactions, and Firebase Crashlytics for crash reports.
• Notifications: A push-notification token if you allow notifications.

We do not collect your precise location, and we do not access your photos or files unless you choose to upload one.

2. How We Use Your Information

• To provide the service: create your account, run your conversations with CLO, generate relationship and self-awareness insights, and remember your progress.
• To transcribe your voice and read CLO's replies aloud.
• To personalise insights based on your history in the app.
• To keep the app secure, prevent abuse, diagnose crashes and fix bugs.
• To understand usage and improve the app's features and design.
• To respond to support requests and send service emails.
• To comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. AI Processing

CLO's responses and insights are generated by artificial intelligence. To produce them, the text of your conversations, answers and uploaded chats is sent to the AI model providers listed below, which process it on our behalf. Their responses can be inaccurate or incomplete.

HeyCLO is not a medical, psychological or crisis service and does not provide diagnosis or treatment. If you are in crisis or may be in danger, contact your local emergency number.

4. Who We Share Information With

We share information only with service providers that process it for us under contract, to operate the app:

• AI and voice providers: OpenAI and Groq (generating CLO's responses and insights) and Cartesia (speech-to-text and text-to-speech).
• Hosting and storage: Our cloud database and servers, Amazon Web Services (file storage), Cloudinary (image storage) and Google Firebase (authentication, storage and app data).
• Sign-in: Google and Apple, when you choose to sign in with them.
• Analytics and diagnostics: Microsoft Clarity and Firebase Crashlytics.
• Email: Resend, to send service emails.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case this policy will continue to apply. When you choose to share an analysis link, anyone with that link can view the shared analysis.

5. Data Security

Data is encrypted in transit (HTTPS/TLS) and stored with access controls on our providers' infrastructure. No system is completely secure, but we work to protect your information and limit access to people who need it to run the service.

6. Data Retention

We keep your information for as long as your account is active so the app can show your history and insights. When you delete your account, we delete your personal data within 30 days, except limited records we must keep for legal, security or fraud-prevention reasons. Backup copies expire on their normal schedule after that.

7. Your Choices and Rights

• Delete your account in the app at Settings → Delete My Account, or by following the steps on our account deletion page.
• Turn off microphone, contacts or notification access at any time in your device settings. The rest of the app keeps working without them.
• Request access to, correction of, or a copy of your data by emailing support@heyclo.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to or restrict processing and to complain to your local data protection authority.

8. Children

HeyCLO is not directed at children under 13. You must be at least 13 years old to use the app, or older if your country sets a higher age for consenting to the use of personal data (for example, 16 in some countries in the European Union). If you are under 18, you need permission from a parent or guardian, and they should review this policy with you. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us at support@heyclo.com and we will delete it.

9. International Transfers

Our service providers may process your information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers.

10. Changes to This Policy

We may update this policy from time to time. We will change the effective date above and, for significant changes, notify you in the app or by email.