Privacy Policy
Clockitt Data Handling, AI Processing & Security Policy
Your privacy matters. This Privacy Policy explains what data Clockitt collects, why we collect it, how we use it, and your rights regarding your data. We are committed to handling your information transparently and responsibly.
1. Data We Collect
1.1 Account Data
When you create a Clockitt account, we collect:
- Email address — used for authentication and essential communications
- Display name — the name you choose during onboarding
- Password — stored as a secure hash, never in plain text
- Timezone preference — used to fire alarms at the correct local time
- Account creation date and trial expiry date
1.2 Task and Usage Data
- Task titles and descriptions you create
- Deadline times you assign to tasks
- Task completion status (pending, verified, failed, snoozed)
- Timestamp of alarm firing, proof submission, and verification
- Snooze usage per task
- Incomplete task reasons (if you choose to provide one)
1.3 Proof Photographs
When you submit a photo as proof of task completion:
- The photograph is uploaded to secure cloud storage (Supabase Storage)
- The photograph is transmitted to Anthropic's Claude AI for verification analysis
- The photograph URL and Claude's verdict are stored against your task record
- Photographs are stored privately — only you can access them
- We do not view, share, or use your photographs for any purpose other than task verification
1.4 Gamification and Progress Data
- Points balance and level (1–5)
- Current and longest streak
- Total tasks completed lifetime
- Achievement badges earned
- Last active date (for streak calculation)
1.5 Payment Data
Payments are processed by Dodo Payments. We do not collect or store your credit card number, bank account details, or other financial information. We receive only a confirmation of successful payment and a transaction reference ID from Dodo Payments.
1.6 Device and Technical Data
- Expo Push Token — used to deliver alarm notifications to your device
- Device timezone (for alarm scheduling accuracy)
- App version
- Basic crash and error logs (if errors occur)
1.7 What We Do NOT Collect
2. How We Use Your Data
| Purpose | Description |
|---|---|
| Authentication | To verify your identity and maintain your login session |
| Alarm delivery | To send push notifications at your deadline times |
| Task verification | To send proof photos to Claude AI for analysis |
| Streak and points | To calculate and display your gamification progress |
| App functionality | To store your tasks, deadlines, and history |
| Payment confirmation | To unlock paid access after successful payment |
| App improvement | To identify and fix bugs using error logs |
| Legal compliance | To meet applicable legal obligations if required |
We do not use your data for advertising, we do not sell your data, and we do not share your data with third parties for their marketing purposes.
3. Third-Party Services
Clockitt uses the following third-party services to operate. Each has its own privacy policy governing how they handle data.
| Service | Privacy Policy | What They Process |
|---|---|---|
| Supabase | supabase.com/privacy | Database storage, user authentication, and proof photo storage |
| Anthropic | anthropic.com/privacy | Claude AI processes proof photos for task verification only |
| Dodo Payments | dodopayments.com/privacy | Processes the one-time $5 payment securely |
| Expo / EAS | expo.dev/privacy | Delivers push notifications via Expo Push service |
| Vercel | vercel.com/legal/privacy-policy | Hosts API routes and the Clockitt landing page |
4. Data Storage and Security
Your data is stored on Supabase's servers with the following protections:
- All database tables use Row Level Security (RLS) — you can only access your own data
- Connections between the app and our servers use HTTPS/TLS encryption
- Passwords are hashed using industry-standard bcrypt — never stored in plain text
- Proof photographs are stored in private buckets accessible only to authenticated users
- API routes that handle sensitive operations require authentication tokens
- We do not store payment card details — Dodo Payments handles all payment data
While we take reasonable technical measures to protect your data, no system is completely immune to security risks. We encourage you to use a strong, unique password for your Clockitt account.
5. Data Retention
| Data Type | Retention |
|---|---|
| Account data | Retained until account deletion |
| Task records | Retained until account deletion |
| Proof photographs | Retained until account deletion |
| Payment records | Retained for 7 years (legal/accounting requirements) |
| Error logs | Deleted automatically after 30 days |
| Push tokens | Deleted when you sign out or delete account |
When you delete your account, all personal data, tasks, and proof photographs are permanently deleted from our systems within 30 days, except where retention is required by law.
6. Your Rights and Choices
You have the following rights regarding your personal data:
- Access — You can view your task history, proof photos, and account data within the App at any time.
- Correction — You can update your display name and email address in the Settings screen.
- Deletion — You can delete your account from Settings > Delete Account. This permanently removes all your data within 30 days.
- Data export — To request a copy of your data, email contact@useclockitt.app. We will respond within 30 days.
- Notification control — You can disable push notifications at any time in your device settings or in the App settings. Note that disabling notifications will prevent alarms from firing.
- Opt out of communications — We send very few emails — primarily account-related notices. You can opt out of non-essential communications by contacting us.
7. Children's Privacy
Clockitt is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@useclockitt.app and we will delete the information promptly.
Users between 13 and 18 years of age should have parental consent before using Clockitt. Parents are encouraged to monitor their children's use of the App.
8. International Users
Clockitt is available globally. Your data may be processed and stored on servers located outside your country of residence. By using the App, you consent to the transfer of your data to these servers.
If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights under those laws (including GDPR). To exercise any additional rights, contact us at contact@useclockitt.app.
9. AI Processing of Proof Photos
Your proof photograph is analyzed by AI. Please be aware of the following:
- Do not submit photos containing sensitive personal information, confidential business data, or third parties without their consent
- Clockitt stores the verification verdict and photo URL — not the raw photo content in our database directly
10. Changes to This Privacy Policy
We may update this Privacy Policy as Clockitt evolves. When we make significant changes, we will notify you through the App or via email. The "Last Updated" date at the top of this policy reflects the most recent revision. We encourage you to review this policy periodically.
11. Contact Us About Privacy
Email: contact@useclockitt.app
Website: useclockitt.app/privacy
Response time: Within 30 days for data requests, within 7 days for general inquiries