2f:I[226200,["/_next/static/immutable/chunks/3op5wx12g2ubt.js","/_next/static/immutable/chunks/0evyud4cwcdba.js","/_next/static/immutable/chunks/3-nq92tt4gome.js","/_next/static/immutable/chunks/0a779yn58159e.js","/_next/static/immutable/chunks/3mj0_xl5qd1pm.js","/_next/static/immutable/chunks/1b1np9van_b3o.js","/_next/static/immutable/chunks/0gv9al3p7-x88.js","/_next/static/immutable/chunks/3fl36oarpwors.js","/_next/static/immutable/chunks/2p_j1w0sxh61s.js","/_next/static/immutable/chunks/0-nwpybzwctv2.js","/_next/static/immutable/chunks/3dxtnxwov42dd.js","/_next/static/immutable/chunks/1ozcronvm0cwy.js","/_next/static/immutable/chunks/3spyxvg5tiu8a.js","/_next/static/immutable/chunks/1uwp6nebcpe8y.js","/_next/static/immutable/chunks/1ezzlphzrkdz_.js"],"Group"] 30:I[151082,["/_next/static/immutable/chunks/3op5wx12g2ubt.js","/_next/static/immutable/chunks/0evyud4cwcdba.js","/_next/static/immutable/chunks/3-nq92tt4gome.js","/_next/static/immutable/chunks/0a779yn58159e.js","/_next/static/immutable/chunks/3mj0_xl5qd1pm.js","/_next/static/immutable/chunks/1b1np9van_b3o.js","/_next/static/immutable/chunks/0gv9al3p7-x88.js","/_next/static/immutable/chunks/3fl36oarpwors.js","/_next/static/immutable/chunks/2p_j1w0sxh61s.js","/_next/static/immutable/chunks/0-nwpybzwctv2.js","/_next/static/immutable/chunks/3dxtnxwov42dd.js","/_next/static/immutable/chunks/1ozcronvm0cwy.js","/_next/static/immutable/chunks/3spyxvg5tiu8a.js","/_next/static/immutable/chunks/1uwp6nebcpe8y.js","/_next/static/immutable/chunks/1ezzlphzrkdz_.js"],"Breadcrumbs"] 31:I[55150,["/_next/static/immutable/chunks/3op5wx12g2ubt.js","/_next/static/immutable/chunks/0evyud4cwcdba.js","/_next/static/immutable/chunks/3-nq92tt4gome.js","/_next/static/immutable/chunks/0a779yn58159e.js","/_next/static/immutable/chunks/3mj0_xl5qd1pm.js","/_next/static/immutable/chunks/1b1np9van_b3o.js","/_next/static/immutable/chunks/0gv9al3p7-x88.js","/_next/static/immutable/chunks/3fl36oarpwors.js","/_next/static/immutable/chunks/2p_j1w0sxh61s.js","/_next/static/immutable/chunks/0-nwpybzwctv2.js","/_next/static/immutable/chunks/3dxtnxwov42dd.js","/_next/static/immutable/chunks/1ozcronvm0cwy.js","/_next/static/immutable/chunks/3spyxvg5tiu8a.js","/_next/static/immutable/chunks/1uwp6nebcpe8y.js","/_next/static/immutable/chunks/1ezzlphzrkdz_.js"],"Paper"] 32:I[693400,["/_next/static/immutable/chunks/3op5wx12g2ubt.js","/_next/static/immutable/chunks/0evyud4cwcdba.js","/_next/static/immutable/chunks/3-nq92tt4gome.js","/_next/static/immutable/chunks/0a779yn58159e.js","/_next/static/immutable/chunks/3mj0_xl5qd1pm.js","/_next/static/immutable/chunks/1b1np9van_b3o.js","/_next/static/immutable/chunks/0gv9al3p7-x88.js","/_next/static/immutable/chunks/3fl36oarpwors.js","/_next/static/immutable/chunks/2p_j1w0sxh61s.js","/_next/static/immutable/chunks/0-nwpybzwctv2.js","/_next/static/immutable/chunks/3dxtnxwov42dd.js","/_next/static/immutable/chunks/1ozcronvm0cwy.js","/_next/static/immutable/chunks/3spyxvg5tiu8a.js","/_next/static/immutable/chunks/1uwp6nebcpe8y.js","/_next/static/immutable/chunks/1ezzlphzrkdz_.js"],"MDXArticleContent",1] 33:T4a25,--- title: "Data Privacy & Security" description: "Understanding data collection, encryption, deletion, and your privacy rights" category: "troubleshooting" lastUpdated: "2026-08-22" --- # Data Privacy & Security Your privacy is our top priority. This guide explains what data Clear Mornings collects, how it's protected, and your rights to control, export, or delete it. --- ## What Data Clear Mornings Collects ### Personal Information **Account Data**: - Phone number (if you sign in by text) - Email address (if you sign in with Google, Apple or Facebook) - Display name (optional, defaults to "User") - Profile photo (optional) - Timezone (auto-detected, used for accurate date tracking) **Authentication Data**: - OAuth provider info (if you sign in with Google, Apple or Facebook) - Session tokens, refreshed automatically while you keep using the app - Last sign-in timestamp **We never store a password, because there isn't one.** Clear Mornings is passwordless. You sign in with a single-use 6-digit code we text you, or with an account you already have elsewhere. There is no password to leak, guess, or reset. ### Habit & Wellness Data **Trinity System Tracking**: - **Recovery habits**: Sleep hours, meditation time, rest days, mood scores - **Exercise habits**: Workout types, duration, intensity, exercise logs - **Nutrition habits**: Food items, protein intake, barcode scans, voice logs **Metadata**: - Habit creation/completion timestamps - Streak counts and achievement dates - 21-day sprint progress - Backfill history (when you log past days) ### AI Affirmation Data **For Habit-Specific Affirmations**: - Your active habits (to match with relevant authors) - Category preferences (Recovery/Exercise/Nutrition) - Last affirmation shown timestamp (to prevent repeats) **For Personal Affirmation Generators**: - Your curated author collections - Custom primer text (if you write personalized prompts) - Generator settings (rotation mode, categories) **AI Processing**: - We use OpenAI's API for voice transcription (Whisper) - We use Claude (Anthropic) for food parsing - Audio recordings are NOT stored after transcription - Voice transcripts are stored only for your food log accuracy **AI Data Processing**: Voice audio is sent to OpenAI for transcription, then IMMEDIATELY deleted. We do not train AI models on your data. See our [AI Data Policy](#ai-data-policy) below. ### Usage Analytics **What we track**: - Feature usage (which pages you visit, which buttons you click) - Error logs (if something breaks, we capture the error to fix it) - Performance metrics (page load times, API response times) - Device type (mobile/desktop, browser version) **What we DON'T track**: - ❌ Your exact habit names (we see "user created a habit" not "user created 'Quit smoking' habit") - ❌ Specific food items (we see "user logged food" not "user ate a burger") - ❌ Personal notes or journal entries - ❌ Your location (unless you grant permission for timezone detection) ### Payment & Billing Data **Stored by Stripe (NOT Clear Mornings)**: - Credit card numbers - Billing addresses - Payment history **Stored by Clear Mornings**: - Subscription tier (Free/Member, plus any Trainer plan) - Subscription status (active/canceled/past_due) - Stripe customer ID (a reference, not your card data) **PCI Compliance**: Clear Mornings is PCI-DSS compliant through Stripe. We NEVER see your full credit card number - only the last 4 digits. --- ## How Your Data Is Encrypted ### Data in Transit (Network Security) **TLS 1.3 Encryption**: - All data between your browser and Clear Mornings is encrypted - Same security banks use for online banking - Prevents "man-in-the-middle" attacks **HTTPS Everywhere**: - `clearmorning.app` uses HTTPS by default - HTTP requests are automatically upgraded to HTTPS - No unencrypted data ever leaves your device ### Data at Rest (Storage Security) **Supabase PostgreSQL Database**: - AES-256 encryption for all stored data - Encrypted backups (30-day retention) - Geographic redundancy (data replicated across multiple regions) **File Storage** (for profile photos and uploads): - Stored in Supabase Storage - AES-256 encryption - Access controlled by Row Level Security (RLS) ### Sign-In Security **No stored credentials**: - Passwordless by design, so there is no password database to breach - Sign-in codes are single-use and short-lived - Sign-in with Google, Apple or Facebook uses PKCE, the current standard for handing an app an identity without exposing a credential to it - Session tokens live in your own browser and refresh in the background --- ## Who Can See Your Data ### You (Full Access) - ✅ View all your habits, food logs, progress charts - ✅ Export your data anytime (Member only, see below) - ✅ Delete your account and all data (see [Deleting Your Account](#deleting-your-account)) ### Your Coach (If You Have One) If you accept an invitation from a trainer, you're connected to them, and they can see the information needed to coach you: - ✅ The workouts they program and whether you complete them - ✅ Your progress toward nutrition goals **they** set (a coach doesn't see nutrition goals you set for yourself) - ✅ Messages between you and your coach - ✅ Your profile photo — but if you turn on **Lock my photo**, they can't change it A coach connection is something **you opt into** by accepting. Texting from your coach requires your **consent**, and you can opt out of texts anytime (you'll still be able to message in the app). For the full picture, see [When a Coach Adds You](/kb/working-with-a-coach/when-a-coach-adds-you) and [Messaging Your Coach](/kb/working-with-a-coach/messaging-your-coach). ### Clear Mornings Developers (Extremely Limited) **What we CAN see**: - Aggregated, anonymized analytics (e.g., "500 users logged habits today") - Error logs (if your account triggers a bug, we see the error message) - Support requests (if you email us, we see what you write) **What we CANNOT see**: - Your individual habit names or completion data (blocked by RLS) - Your food logs or nutrition data (blocked by RLS) - Your AI affirmations or personal notes (blocked by RLS) **Exception**: If you explicitly grant us access for support (e.g., "Please look at my account to debug this issue"), we can temporarily access your data to help you. ### Third-Party Services **OpenAI (Whisper API)**: - Receives: Audio recordings for voice transcription - Duration: Processed in real-time, NOT stored by OpenAI per their API policy - Purpose: Convert "chicken breast, 200 grams" into text **Anthropic (Claude API)**: - Receives: Transcribed text from voice logs (e.g., "chicken breast, 200 grams") - Duration: Processed in real-time, NOT used for training per their API policy - Purpose: Parse food text into structured data (name, calories, protein) **Stripe (Payment Processing)**: - Receives: Email, billing address, payment info - Duration: Stored as long as you have an active subscription (+ 7 years for tax records) - Purpose: Process payments, manage subscriptions **Vercel (Hosting)**: - Receives: Basic server logs (IP address, timestamp, page requested) - Duration: 30 days - Purpose: Infrastructure monitoring, DDoS protection **Supabase (Database, storage and sign-in)**: - Receives: everything you store in Clear Mornings, plus your sign-in identity - Purpose: This is where your account and your data live **Twilio (Text messaging)**: - Receives: Your phone number, your sign-in codes, and the contents of texts between you and your coach - Purpose: Sending and receiving SMS **Resend (Email)**: - Receives: Your email address and the contents of emails we send you - Purpose: Transactional email **Upstash (Caching)**: - Receives: Short-lived copies of things we'd otherwise re-fetch constantly, such as your subscription tier and your affirmation feed - Purpose: Making the app fast **Thryve (Health device connections)**: - Receives: Only if you connect a device. Sleep, heart rate, activity and recovery data from your wearable - Purpose: Bringing your device data into Recovery and Exercise **Instacart (Grocery ordering)**: - Receives: Only if you send a grocery list. The contents of that list - Purpose: Handing your list to a store **Google and Meta (Advertising measurement)**: - Receives: Anonymous signals about visits and sign-ups that arrive from our ads - Purpose: Knowing which ads work. We do not send them your habits, logs or health data **No Data Selling**: Clear Mornings does NOT sell, rent, or trade your personal data. Ever. We're a subscription business - you pay us, not advertisers. ### No One Else - ❌ Data brokers - We don't sell data - ❌ Insurance companies - We don't share health data - ❌ Advertisers - We show no ads inside Clear Mornings. We do run ads elsewhere and measure whether they worked, which is the Google and Meta line above. That measurement never carries your health data. **Other people, only where you chose it.** Your data is private by default, but Clear Mornings does have places where you share on purpose: messaging, friends, community events, and above all a coach. When a trainer adds you, you control what they can see. See [When a Coach Adds You](/kb/working-with-a-coach/when-a-coach-adds-you). --- ## Row Level Security (RLS) Explained Simply ### What is RLS? **Row Level Security** is a database feature that ensures users can ONLY see their own data. **Example**: - Alice creates a habit "Morning Meditation" - Bob creates a habit "Evening Run" - Database query: `SELECT * FROM habits` - **Without RLS**: Alice sees Bob's habit (security breach!) - **With RLS**: Alice sees ONLY her own habit ### How RLS Works in Clear Morning **Every database table has RLS policies**: ```sql -- Example policy for habits table CREATE POLICY "Users can only see their own habits" ON habits FOR SELECT USING (auth.uid() = user_id); ``` **Translation**: "When selecting rows from `habits`, only return rows where the `user_id` matches the currently logged-in user's ID." **What this protects**: - ✅ Habits - ✅ Food logs - ✅ Exercise logs - ✅ Affirmation generators - ✅ Subscription data - ✅ Profile information ### RLS in Action **When you query the database**: 1. You send: `SELECT * FROM habits` 2. Supabase automatically adds: `WHERE user_id = YOUR_USER_ID` 3. You receive: Only YOUR habits (never anyone else's) **Even if a hacker compromised the API**: - They'd need YOUR session token to see YOUR data - Session tokens expire after 7 days - They're unique per user, per login ### When RLS Doesn't Apply **Admin functions** (requires explicit elevated permissions): - Database migrations (adding/removing tables) - Server-side analytics (aggregated data only) - Support debugging (only with your permission) **Developer Note**: Clear Mornings uses Supabase MCP tools for database operations. Even Claude (the AI helping build Clear Mornings) can only SELECT data via MCP - INSERT/UPDATE/DELETE require explicit human approval. --- ## Deleting Your Account ### What Gets Deleted **Immediately deleted**: - Your profile (email, name, photo) - All habits and completion data - All food logs and nutrition data - All exercise logs - All affirmation generators - Session tokens (logs you out everywhere) **Retained afterwards**: - Personal data is deleted within 30 days of your request - Backup copies are purged within 90 days - Payment and tax records are kept as long as the law requires, stripped of your name and email so only transaction IDs remain ### How to Delete Your Account Account deletion is handled by a person, not a button. Email [support](/support) from the address on your account, or send us the phone number you sign in with, and ask us to delete it. We will confirm the request with you before anything is removed, so nobody can delete your account by guessing your email. **Before you ask, consider**: - Request a copy of your data first if you want to keep it (see below) - Cancel your subscription separately, so you aren't billed again while the request is processed - Deletion is permanent **There is no self-serve Delete Account button**, and no "Danger Zone" in Settings. If you find a page claiming otherwise, it's out of date. Deletion always goes through support. ### Deleting Specific Data (Without Deleting Account) **Can be deleted manually**: - Individual habits: Go to habit > Settings > Delete Habit - Food logs: Swipe to delete on mobile, or click trash icon - Exercise logs: Same as food logs - Affirmation generators: Settings > Generators > Delete **Cannot be deleted individually** (account-level only): - Profile information (can be edited, not deleted) - Subscription history (legal requirement) --- ## Getting a Copy of Your Data You can ask for a copy of everything we hold about you, on any plan. Email [support](/support) from the address on your account, or give us the phone number you sign in with, and we'll put it together and send it to you. **What we include**: - ✅ All habits (names, categories, goals, creation dates) - ✅ All habit completions (timestamps, values, notes) - ✅ All food logs (items, calories, protein, timestamps) - ✅ All exercise logs (type, duration, intensity) - ✅ Affirmation generators (authors, primers, settings) - ✅ Profile data (name, contact details, timezone) - ✅ Subscription history (tier, dates, status) **What we don't**: - ❌ Session tokens (they're worthless once expired, and a security risk to send) - ❌ Payment card details (Stripe holds those, we never do) **There is no self-serve export button in the app today.** Some older help pages described one, along with JSON/CSV/PDF options and an emailed download link. That was never built. The request route above is the real one, it's free, and it isn't limited to paid plans. There are two narrower exports that DO exist in the app, and neither is an account-data export: you can send a grocery list out as plain text, and Member accounts can save a meal plan or document as a PDF. --- ## Your Privacy Rights (GDPR/CCPA) If you're in the EU, UK, or California, you have additional rights: ### Right to Access - Request a copy of all data we have about you - Free, on every plan (see [Getting a Copy of Your Data](#getting-a-copy-of-your-data)) ### Right to Rectification - Correct inaccurate data (via Settings > Profile) - Request changes if you can't edit directly ### Right to Erasure ("Right to be Forgotten") - Ask us to delete your account (see [Deleting Your Account](#deleting-your-account)) - Exceptions: records the law requires us to keep, such as payment history ### Right to Data Portability - Ask us for your data in a machine-readable format and we'll send it that way - Same request route as Right to Access ### Right to Restrict Processing - Pause data processing while we investigate a complaint - Email: privacy@clearmorning.app ### Right to Object - Object to data processing for specific purposes - We'll stop unless we have compelling legal grounds ### Right to Withdraw Consent - You can revoke permissions (e.g., microphone access) anytime - Doesn't affect past data already collected **To exercise these rights**: - Email: privacy@clearmorning.app - Include: the email or phone number on your account, and what you're asking for - We'll verify it's you before acting, using the same sign-in code we'd text you anyway. We will never ask you for a password, because your account doesn't have one. --- ## AI Data Policy ### Voice Transcription (OpenAI Whisper) **Data sent to OpenAI**: - Audio recording of your voice log (e.g., "I ate 200 grams of chicken") **How it's processed**: - Audio sent to Whisper API via HTTPS - Transcribed to text in real-time - Audio is NOT stored by OpenAI (per their API policy as of 2025) **What we store**: - The transcript ("I ate 200 grams of chicken") - NOT the audio ### Food Parsing (Anthropic Claude) **Data sent to Anthropic**: - Transcribed text (e.g., "I ate 200 grams of chicken") **How it's processed**: - Parsed into structured data: `{ name: "Chicken breast", calories: 330, protein: 62 }` - Processed in real-time - NOT used for AI training (per Anthropic's API policy as of 2025) **What we store**: - The structured data (food name, calories, protein) - NOT the original text (unless you added manual notes) ### Affirmation Discovery **Data sent out**: - The habit category and author pool a request is for (for example "recovery, Brené Brown"), never your logs, your name, or your contact details **How it's processed**: - Real quotes are discovered and attributed to their source, then reviewed before they enter the library - Once a quote is in the library, showing it to you needs no outside call at all **What we store**: - The quote, its author, and its source citation - Which quotes you favorited **AI Training Opt-Out**: Clear Mornings uses API endpoints with "no training" flags set. Your data is processed but NOT used to improve OpenAI or Anthropic models. --- ## Data Breach Protocol ### If We Detect a Breach **Within 72 hours**, we will: 1. ✅ Contact all affected users 2. ✅ Notify relevant authorities (GDPR/CCPA requirement) 3. ✅ Publish a public incident report 4. ✅ Invalidate every active session, signing everyone out (if auth data affected) **What we'll tell you**: - What data was accessed - How the breach happened - What we're doing to fix it - What you should do **Our security practices**: - Penetration testing every 6 months - Automated vulnerability scanning (daily) - Security audits by third-party experts (annually) - Bug bounty program (report vulnerabilities for rewards) ### If You Suspect a Breach **Signs of compromise**: - Sign-in codes arriving by text when you didn't ask for one - Habits or logs you didn't create **What to do**: 1. **Never share a sign-in code**, with anyone, including anyone claiming to be us. A code is the whole key to your account, and we will never ask you for one. 2. **Sign out**, from the profile menu or your account details screen 3. **Email security@clearmorning.app** with details, and we can end every active session on your account --- ## Questions About Privacy? - **Read our full Privacy Policy** - [Privacy Policy](/privacy) - **Read our Terms of Service** - [Terms](/terms) - **Email our Privacy Officer** - privacy@clearmorning.app - **General support** - support@clearmorning.app **Privacy Updates**: We'll email you 30 days before any major privacy policy changes. You can opt out by deleting your account during that window. 25:["$","$L17",null,{"size":"md","py":"xl","children":["$","$L19",null,{"gap":"xl","children":[["$","$L2f",null,{"children":["$","$L1c",null,{"href":"/en/kb/troubleshooting","underline":"never","style":{"display":"flex","alignItems":"center","gap":4},"children":[["$","svg",null,{"ref":"$undefined","xmlns":"http://www.w3.org/2000/svg","width":18,"height":18,"viewBox":"0 0 24 24","fill":"none","stroke":"currentColor","strokeWidth":2,"strokeLinecap":"round","strokeLinejoin":"round","className":"tabler-icon tabler-icon-arrow-left ","children":["$undefined",["$","path","svg-0",{"d":"M5 12l14 0"}],["$","path","svg-1",{"d":"M5 12l6 6"}],["$","path","svg-2",{"d":"M5 12l6 -6"}],"$undefined"]}],["$","$L1b",null,{"size":"sm","children":["Back to ","Troubleshooting"]}]]}]}],["$","$L30",null,{"children":[["$","$L1c",null,{"href":"/en/kb","children":"Knowledge Base"}],["$","$L1c",null,{"href":"/en/kb/troubleshooting","children":"Troubleshooting"}],["$","$L1b",null,{"children":"Data Privacy & Security"}]]}],["$","$L31",null,{"p":"xl","radius":"md","withBorder":true,"children":["$","$L32",null,{"rawContent":"$33","locale":"en"}]}],"$L34"]}]}]