Privacy Policy

1. Introduction

Welcome to Clear Morning. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our habit tracking and wellness application.

2. Information We Collect

3. How We Use Your Information

We use your data to:

• Provide the service: Track your habits, display analytics, sync across devices
• Improve the app: Fix bugs, add features, optimize performance
• Personalize experience: Generate AI affirmations, recommend habits, calculate recovery scores
• Send notifications: Habit reminders, streak alerts, feature updates (if enabled)
• Process payments: Handle subscriptions via Stripe (we never store payment card details)
• Comply with legal obligations: Respond to lawful requests, enforce our Terms of Service

4. How We Share Your Information

We DO NOT sell your personal data. We only share data in these limited circumstances:

5. Data Security

We implement industry-standard security measures:

• All data transmitted over HTTPS (encrypted connections)
• Passwords are hashed using bcrypt
• Database access is restricted and audited
• Row-level security policies protect user data
• Regular security audits and updates

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Texas Data Breach Notification: In the event of a data breach affecting Texas residents, we will notify you as required by Texas Business & Commerce Code § 521.053 without unreasonable delay and in compliance with applicable state and federal law.

6. Your Rights and Choices

You have the right to:

• Access: View all your personal data
• Correct: Update inaccurate information
• Delete: Request complete account deletion (Settings → Delete Account)
• Export: Download your data in JSON format
• Opt-out: Disable notifications, public sharing, or Google Fit sync
• Revoke: Disconnect Google Fit integration anytime

7. Data Retention

We retain your data as long as your account is active. When you delete your account:

• Your personal data is deleted within 30 days
• Anonymized analytics may be retained for service improvement
• Backup copies are purged within 90 days

8. Children's Privacy

Clear Morning is not intended for users under 13 years old. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Clear Morning, you consent to this transfer. We ensure adequate safeguards are in place to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use after changes indicates acceptance.

11. Contact Us

If you have questions about this Privacy Policy or your data:

12. Wearable Device API Disclosure

Clear Morning's use and transfer of information received from wearable device APIs (Fitbit, WHOOP, Oura, Strava, Polar, Garmin) adheres to each provider's respective API Terms of Service and User Data Policy, including Limited Use requirements where applicable.

Specifically, Clear Morning:

• Only requests the minimum scopes necessary to provide the Devices feature
• Only reads data from connected devices (never writes or modifies your device data)
• Stores health data securely and never shares it with third parties for marketing or advertising
• Uses health data solely to display recovery metrics within Clear Morning
• Allows you to revoke access at any time from the Devices page
• Complies with HIPAA exemptions (we are NOT a HIPAA-covered entity)