Privacy Policy

This Privacy Policy explains what Clue (“we,” “us”) collects, how we use and share it, and the choices you have. Clue is a space for personal reflection, so much of what you share is sensitive — we handle it with care. We do not sell your data, and we never use your reflections for advertising.

1. Who this applies to

Clue is for adults 18 and older. We do not knowingly collect data from anyone under 18.

2. What we collect

• Account & identity — your email and basic profile from Google sign-in (via Firebase), and the date you confirmed you’re 18+.
• Session audio & transcripts — the audio of your voice sessions and the text transcripts created from them (or your typed messages in text sessions).
• Reflections & memory — the findings, themes, reflections, notes, mood check-ins, and the durable “memory” Clue keeps so it can remember you across sessions.
• Safety signals — if a session surfaces a possible crisis, we record that a safety event occurred and what resources were shown.
• Billing — subscription status and identifiers from our payment processor. We do not store your full card number.
• Usage & device — basic technical and usage information (e.g., device/browser, timestamps, error logs) to run and improve the service.

3. How we use your data

• To provide Clue: run your sessions, generate reflections and reports, and remember you across visits.
• To keep you safe: detect possible crisis signals during a session and surface verified support resources.
• To manage your subscription and process payments.
• To maintain, secure, debug, and improve the service.
• To communicate with you about your account or (if you opt in) reminders and check-ins.

4. AI & third-party processing

Running a voice companion means trusted providers process your data on our behalf, under contract and only to deliver the service:

• Real-time audio — a live-audio provider connects you to Clue during a session.
• Speech & language AI — providers that convert speech to text, text to speech, and generate Clue’s responses and your reflections process the relevant audio/text.
• Authentication — Google/Firebase for sign-in.
• Payments — Stripe for checkout and subscriptions.
• Hosting & infrastructure — our cloud hosting and database providers.

We share only what each provider needs, and we do not permit them to use your content for their own purposes. [Specific processors and their terms to be listed and finalized with counsel.]

5. When we share

• Service providers — as described above.
• Safety — if we believe in good faith there is a serious risk of harm to you or others, we may act on that to help keep people safe. Clue cannot promise absolute confidentiality where safety is at stake.
• Legal — where required by law or valid legal process.
• Business transfers — if Clue is involved in a merger, acquisition, or sale, subject to this Policy.

We never sell your personal data or use your reflections for advertising.

6. Your choices & rights

• View & export — you can view your sessions, transcripts, and reflections, and export your data.
• Delete — you can delete individual items, clear what Clue remembers about you, and delete your account.
• Depending on where you live (e.g., California and other regions), you may have rights to access, correct, delete, or restrict use of your data, and to appeal a decision. We honor these; contact us to exercise them. [Region-specific disclosures to be finalized.]

7. Data retention

We keep your data while your account is active and as needed to provide the service and meet legal obligations. When you delete content or your account, we delete or de-identify the associated data within a reasonable period, except where we must retain it by law. [Retention periods to be finalized.]

8. Security

We use reasonable technical and organizational measures to protect your data in transit and at rest. No system is perfectly secure, but we work to safeguard the sensitive information you share and limit access to it.

9. Children

Clue is 18+. If we learn we’ve collected data from someone under 18, we’ll delete it.

10. Changes & contact

We may update this Policy; if changes are material we’ll give reasonable notice. For privacy questions or to exercise your rights, contact us at [privacy email].