ClearWindow Privacy Policy

Effective Date: March 28, 2026

1. Introduction

ClearWindow is a privacy-first iOS app designed to help you build better habits and support your personal recovery journey. We understand that using this app involves sharing sensitive information about your habits and personal goals. That's why privacy and data protection are core principles of ClearWindow.

2. What Data We Collect

ClearWindow collects only the minimum data needed to function. Here's what we collect and where it's stored:

2.1 Local Data (Stored on Your Device)

The following data stays on your iPhone using SwiftData and is never sent to our servers unless you explicitly enable a feature that requires it:

• Habit Information: Names, descriptions, and categories of habits you're working with
• Tracking Records: Your check-ins, streaks, and progress notes
• HealthKit Data: Heart rate, heart rate variability (HRV), activity levels, and sleep data (read-only access)
• App Settings: Your preferences and configuration choices

2.2 Authentication Data (Firebase Authentication)

To use ClearWindow's cloud features (buddy system, AI Buddy, crisis alerts), you must create an account using:

• Apple Sign-In (recommended for privacy), or
• Email address and password

Firebase stores your authentication credentials securely. We do not access or store your Apple ID password.

2.3 Cloud Data (Optional, Firebase Firestore)

If you enable cloud features, the following data may be synced to Firebase Firestore:

• Buddy Relationships: Your buddy's name and relationship status (if you use the buddy system)
• Crisis Alerts: Emergency notifications sent between you and your buddy
• AI Buddy Conversations: Messages exchanged with the AI Buddy feature
• iCloud Sync (Opt-In): If enabled, your local habit data can sync across your Apple devices

2.4 Health & Financial Data (Third-Party Integrations)

Integration	Data Accessed	Purpose	Storage
HealthKit	Heart rate, HRV, activity, sleep	Correlate physical metrics with habit changes	Locally on device
Plaid (Optional)	Transaction metadata	Categorize spending patterns related to habits	Local processing; not stored by ClearWindow

3. How We Use Your Data

• Core App Functionality: To record your check-ins, track progress, and display your data
• AI Buddy Feature: To provide personalized support via Claude (Anthropic's AI), processed through secure Firebase Cloud Functions
• Buddy System: To enable connection and communication with accountability partners
• Crisis Alerts: To send urgent notifications when you or your buddy need support
• App Improvement: To identify bugs, crashes, and feature requests (limited, non-personal analytics)
• Legal Compliance: To respond to legal requests or protect against fraud

We do not: Sell, trade, or rent your data. Use your data for targeted advertising. Share your data with data brokers or marketing firms. Use HealthKit or financial data for profiling or discrimination.

4. Third-Party Services

ClearWindow uses trusted third-party services. Here's what they do and how:

4.1 Firebase (Google Cloud)

Purpose: Authentication, cloud storage, and AI feature support

Data Shared: Account information, buddy relationships, AI Buddy conversations, crisis alerts

Privacy: Firebase is a secure, industry-standard platform. Your data is encrypted in transit and at rest. Firebase Privacy Policy

4.2 OpenAI / Anthropic (AI Buddy)

Purpose: Provide AI-powered conversational support

Data Shared: Only messages you send to the AI Buddy feature, processed through encrypted Firebase Cloud Functions

Privacy: Messages are not used to train AI models. Anthropic has committed not to use user conversations for model training. Anthropic Privacy Policy

4.3 Plaid (Optional, for Financial Integration)

Purpose: Securely connect to your bank accounts for transaction categorization

Data Shared: Only transaction metadata; ClearWindow does not store or see your login credentials

Privacy: Plaid is SOC 2 Type II certified and encrypts all data. You can disconnect Plaid at any time. Plaid Privacy Policy

4.4 Firebase Cloud Messaging (Push Notifications)

Purpose: Deliver push notifications for buddy messages and crisis alerts

Data Shared: Device push token only (not personal information)

5. Local-Only Privacy Mode

ClearWindow offers a local-only mode for maximum privacy:

• Disable cloud sync entirely
• Skip buddy features and AI Buddy
• Keep all habit data entirely on your device
• No authentication or account creation required

This is fully supported and requires no special configuration—simply don't sign in.

6. Data Retention & Deletion

6.1 Local Data

Data stored on your device remains there until you delete the app or manually clear your data through app settings.

6.2 Cloud Data

If you use cloud features, you can:

• Delete individual entries or conversations within the app
• Request complete account deletion by contacting us (see section 9)

Upon account deletion, we will remove your authentication credentials, buddy relationships, and AI Buddy conversation history within 30 days. Some data may be retained if required by law.

6.3 Backup Data

If you use iCloud backup, your encrypted local data follows Apple's iCloud retention policies. You control iCloud settings on your device.

7. Security

Data Encryption:

• All communication between your device and our servers is encrypted (HTTPS/TLS)
• Firebase encrypts data at rest and in transit
• Sensitive data (passwords) are never stored locally or transmitted in plain text

App Security:

• ClearWindow uses standard iOS security practices and is regularly reviewed for vulnerabilities
• No hardcoded API keys or credentials in the app code
• Sensitive operations use secure cloud functions

Your Responsibility: Keep your device secure. Use a strong password if you choose email authentication. Don't share your login credentials.

8. Apple Privacy Manifest

ClearWindow complies with Apple's privacy manifest requirements:

• NSPrivacyAccessedAPICategoryUserDefaults: Required for app settings (CA92.1)
• NSPrivacyAccessedAPICategoryFileTimestamp: Required for local data caching (C617.1)
• No Data Collection: We do not collect IDFA, IP address for tracking, or other fingerprinting data
• No Tracking: ClearWindow is a tracking-free app

9. Your Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate data
• Right to Deletion: Request deletion of your account and associated data ("right to be forgotten")
• Right to Data Portability: Request your data in a portable format
• Right to Opt-Out: Disable cloud features and use local-only mode at any time

To exercise any of these rights, contact us (see section 10).

10. International Data Transfers

ClearWindow's servers are hosted by Google Cloud in the United States. If you're located outside the US (e.g., EU), your data may be transferred internationally for processing. By using ClearWindow, you consent to this transfer. We maintain appropriate safeguards under data protection agreements.

11. Children's Privacy

ClearWindow is not intended for children under 13 (or the applicable age of digital consent in your region). We do not knowingly collect data from children. If we discover that a child has provided data, we will delete it promptly. Parents or guardians concerned about a child's use should contact us immediately.

12. Changes to This Privacy Policy

We may update this privacy policy as the app evolves or regulations change. We will notify you of material changes via:

• An update notification in the app
• Email (if you have provided one)
• In-app alert before the change takes effect

Your continued use of ClearWindow after changes constitutes acceptance of the updated policy.

13. Contact Us