Privacy Policy

1. Information We Collect

1.1 Account Information

When you sign in with Google, we receive:

• Name and email address from your Google profile
• Profile photo URL for display within the app
• Unique identifier to associate your data with your account

1.2 User Content

Content you create and store in Clio, including:

• Notes, documents, and text content
• Uploaded files (images, audio, video, PDFs)
• AI chat conversations and voice transcripts
• Generated content (documents, images, videos, websites, code)
• Playlists and music metadata
• Automation configurations

1.3 Usage Data

We collect information about how you interact with the Service:

• Device type, operating system, and app version
• Feature usage patterns and preferences
• Error logs and crash reports
• Timestamps of activity

1.4 Location Data

If you grant permission, we collect approximate location data to provide:

• Weather information
• Location-aware AI features

Location data is processed locally on your device and is not stored on our servers beyond what is needed for the immediate request.

1.5 Push Notification Tokens

If you enable push notifications, we store your device token to deliver notifications about completed tasks, automation results, and shared content.

2. How We Use Your Information

Purpose	Data Used
Provide and operate the Service	Account info, user content
AI features (chat, generation, voice)	Conversation content, prompts
Cloud task execution	Task inputs, generated outputs
Content sharing between users	Shared content, email addresses
Push notifications	Device tokens, notification content
Weather and location features	Approximate location
Error diagnosis and improvement	Crash logs, usage patterns
Google service integrations	OAuth tokens, connector data

3. Third-Party Services

Clio uses the following third-party services that may process your data:

3.1 Infrastructure

• Supabase — Database, authentication, and file storage. Data is stored in Supabase-managed PostgreSQL databases and cloud storage. Supabase Privacy Policy
• E2B — Sandboxed code execution for cloud tasks. Task inputs and outputs pass through E2B infrastructure. E2B Terms
• Microsoft Azure — Web hosting and CI/CD. Microsoft Privacy Statement

3.2 AI Providers

When you use AI features, your prompts and conversations are sent to:

• OpenAI — Text generation, image generation (GPT, DALL-E, Sora), realtime voice chat. OpenAI Privacy Policy
• Anthropic — Text generation (Claude). Anthropic Privacy Policy
• Google AI — Gemini models for text, image generation, and search. Google Privacy Policy
• ElevenLabs — Text-to-speech and audio generation. ElevenLabs Privacy Policy

AI providers may process your inputs according to their own privacy policies. We do not control how third-party AI providers use data sent to their APIs.

3.3 Google Services

If you connect Google integrations (Calendar, Drive, Gmail), Clio accesses your Google data through OAuth with scopes you explicitly authorize. You can revoke access at any time through your Google Account settings.

3.4 Firebase

We use Firebase Cloud Messaging (FCM) for push notification delivery. Firebase Privacy

4. Data Sharing

We do not sell or rent your personal information. We may share your information only in these circumstances:

• With your consent — When you explicitly share content with other Clio users
• Service providers — Third-party services listed above that help us operate the Service
• Legal requirements — When required by law, court order, or governmental authority
• Safety — To protect the rights, safety, or property of our users or the public

5. Data Storage and Security

Your data is stored on Supabase infrastructure with the following protections:

• Data is encrypted in transit (TLS) and at rest
• Row-level security (RLS) policies ensure users can only access their own data
• File storage uses signed URLs with expiration for access control
• Authentication is handled through Supabase Auth with Google OAuth

While we implement reasonable security measures, no system is completely secure. We cannot guarantee absolute protection of your data.

6. Data Retention

• User content — Retained as long as your account is active. Deleted content is removed from our systems, though backups may persist for a limited period.
• Account information — Retained until you delete your account.
• Usage logs — Retained for up to 90 days for debugging, then deleted.
• Cloud task artifacts — Retained until you delete them or your account.

7. Your Rights

You have the right to:

• Access your personal information stored in the Service
• Correct inaccurate information in your profile
• Delete your content and account data
• Export your notes and files
• Revoke Google integration permissions at any time
• Withdraw consent for location data, push notifications, or other optional features

To exercise these rights, contact us at clioapp336@gmail.com.

8. Children's Privacy

Clio is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. International Users

Clio is operated from the United States. If you access the Service from outside the U.S., your data may be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and revising the effective date. Your continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: