Privacy Policy

Clarity Code ("Clarity Code," "we," "us") operates this application and the website at claritycode-sumi.com. For privacy questions, data access requests, or deletion requests, contact us at hello@claritycode-sumi.com.

Account information. Your first name, email address, password (stored only as a secure hash, never in readable form), and the optional hormonal life stage you select.

Your check-ins and reflections. Your answers across the six pillars, including Clarity Check, Self-Respect, Self-Command, Pattern Recognition, Relationship Reality Check and Sexual Wellness; your scores; your written reflections; and your journal entries.

Sensitive categories. Some of what you choose to share is sensitive personal information: sexual health, comfort and pleasure; menstrual cycle and hormonal information; relationship dynamics, including experiences that may involve harm; and your emotional state. You are never required to answer any question, and any question may be skipped.

Tracker, calendar and preference data. Daily log entries, intentions you note on a date, reminder preferences, and settings.

No phone number. We do not collect a phone number when you create your account, and we never ask for one for login or security. Reminders are sent by email only.

Conversations with Sumi. The messages you send and the replies generated for you.

Payment information. Payments are processed by Stripe. Stripe receives your card details directly; we do not receive or store your full card number. We store your subscription status, plan, renewal date and a Stripe customer identifier.

Technical information. Basic log and device data generated when the application is served, used to keep the service running and secure.

To create and maintain your account; to save your check-ins so you can see your own movement over time; to generate your personal guidance, status and recommendations; to operate reminders you have asked for; to process your membership; to respond to your questions; to keep the service secure; and to meet legal obligations.

We do not sell your personal information. We do not share it with advertisers. We do not use your check-ins, reflections, journal entries or conversations to train any general-purpose AI model.

Hosting, database and authentication. The application, its database and its authentication run on infrastructure provided through Lovable Cloud, which is built on Supabase and served over Cloudflare. Your data is stored there with per-account access rules so records are readable only under your own authenticated session.

AI processing. Guidance and conversations with Sumi are generated by a large language model reached through the Lovable AI Gateway, currently served by OpenAI. To generate a reply, the relevant content is transmitted to that provider. This can include your check-in answers, your written reflections, your first name, your logged cycle phase, and the messages in your conversation. Requests are sent with storage disabled, meaning the provider is instructed not to retain the content for its own use, and the content is not used to train models. If you prefer that a specific detail never leave the app, please do not write it into a check-in, journal entry, or conversation.

Payments. Stripe processes payments and subscription billing and holds the payment data required to do so, under its own privacy policy.

Email. Transactional and reminder email is delivered through our email provider using the notify.claritycode-sumi.com domain.

We may also disclose information where required by law, to protect someone's safety, or in connection with a business transfer.

Data is encrypted in transit and at rest by our infrastructure providers. Access to your records is restricted per account through row-level security rules, so one member's data is not readable under another member's session. Passwords are hashed. Access to production systems is limited. No system is perfectly secure, and we cannot guarantee absolute security.

Your account data and everything you have written is kept for as long as your account exists, because its value to you is continuity over time. You can end that yourself at any time: Settings, then Closing your account. That deletion happens immediately, not on a queue. It cancels any live membership, then permanently removes your profile, check-ins, guidance, reflections, journal entries, tracker days, calendar notes, reminder preferences and your login itself from our live database. Encrypted backup copies age out on their own within 30 days. Payment and tax records held by Stripe are kept by Stripe for the years its financial and legal rules require, and are outside what we can delete for you.

You may ask us to show you the personal information we hold about you, correct it, export it, restrict or object to certain processing, withdraw consent for sensitive categories, or delete your account and its contents entirely. Deleting your account removes your check-ins, reflections, journal entries, trackers and conversations. Depending on where you live, you may hold additional rights under the GDPR, the UK GDPR, the CCPA/CPRA, or other laws, including the right not to be discriminated against for exercising them.

Deletion is built into the app itself, so you never have to ask permission for it: open Settings, scroll to Closing your account, and confirm. For anything else, or if you would rather we handle the deletion for you, email hello@claritycode-sumi.com from your account email address. We respond within the time your local law allows, ordinarily within 30 days.

Clarity Code is for adults. It is not directed at anyone under 18, and we do not knowingly collect information from children. If you believe a minor has created an account, contact us and we will remove it.

Our providers may process data in the United States and other countries. Where personal information moves across borders, our providers rely on recognized transfer mechanisms, including Standard Contractual Clauses.

Clarity Code is educational and reflective. It is not therapy, medical care, diagnosis, or crisis support, and it does not create a clinician relationship. If you are in danger or crisis, please use the resources named in our Terms of Service, including 988, the Suicide & Crisis Lifeline, or 911.

If this policy changes in a way that materially affects you, we will update the date above and let you know in the app or by email.