Privacy Policy

Last Updated: June 27, 2026

1. Introduction

Welcome to Clear Morning. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our habit tracking and wellness application.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Authentication provider (Google, GitHub, or email link)
  • Display name (optional)
  • Profile picture (optional)

2.2 Habit Tracking Data

To provide our core service, we collect:

  • Habits you create and track
  • Check-in timestamps and completion data
  • Affirmation preferences and custom primers
  • Photos you upload (optional)
  • Nutrition logs (food items, calories, macros)
  • Exercise logs and workout data
  • Recovery metrics (sleep, mood)

2.3 Wearable Device Data (Premium+ Only)

If you connect wearable devices (Premium+ feature), we access:

  • Supported devices: Fitbit, WHOOP, Oura Ring, Strava, Polar, Garmin
  • Sleep data: Duration, sleep stages, and quality metrics
  • Heart rate data: Resting heart rate and HRV (heart rate variability)
  • Activity data: Steps, exercise sessions, active minutes, workouts
  • Recovery data: Readiness scores, strain, recovery metrics

Important: We only read your wearable device data via secure OAuth 2.0 connections. We never write, modify, or delete any data in your connected accounts. Your health data is stored securely in our database and is only used to display recovery metrics within Clear Morning. You can disconnect any device at any time from the Devices page.

2.4 Usage Data

We automatically collect:

  • Device type and operating system
  • Browser type and version
  • IP address (anonymized)
  • App usage patterns (pages visited, features used)
  • Error logs and crash reports

2.5 Health & Fitness Profile (Optional)

If you choose to complete your Health & Fitness profile, we collect the information you self-report, which may include:

  • Date of birth and sex
  • Height and weight
  • Physical-activity-readiness (PAR-Q) answers
  • Injuries and areas to protect
  • Health conditions and any free-text notes you add
  • Training preferences (experience level, goals, equipment, availability)

This information is optional and self-reported. It is private to you by default and is only shared with a coach if you explicitly choose to (see Section 4.2). It is not protected health information under HIPAA and is governed by this Policy and applicable state consumer-privacy laws.

3. How We Use Your Information

We use your data to:

  • Provide the service: Track your habits, display analytics, sync across devices
  • Improve the app: Fix bugs, add features, optimize performance
  • Personalize experience: Generate AI affirmations, recommend habits, calculate recovery scores
  • Send notifications: Habit reminders, streak alerts, feature updates (if enabled)
  • Process payments: Handle subscriptions via Stripe (we never store payment card details)
  • Comply with legal obligations: Respond to lawful requests, enforce our Terms of Service

4. How We Share Your Information

We DO NOT sell your personal data. We only share data in these limited circumstances:

4.1 Service Providers

  • Supabase: Database hosting and authentication
  • Vercel: Application hosting and deployment
  • Stripe: Payment processing
  • OpenAI/Anthropic: AI affirmation generation (we send anonymized prompts only)
  • Wearable APIs: Fitbit, WHOOP, Oura, Strava, Polar, Garmin (OAuth connections for health data)
  • Food databases: OpenFoodFacts (nutrition data lookup)
  • Twilio: SMS/text messaging delivery between trainers and members

4.2 Sharing Health Data With Your Coach

If you connect with a coach, you can choose to share parts of your self-reported Health & Fitness profile with them so they can program safely and appropriately for you. This sharing is off by default and is opt-in for each category — nothing is shared until you turn it on.

You control, separately, which of the following an actively connected coach may see:

  • PAR-Q safety flags: your physical-activity-readiness answers that affect workout intensity
  • Injuries & areas to protect: so your coach can program around them
  • Health conditions: e.g. asthma, blood pressure
  • Height & weight: used to calibrate training loads

Only a coach you are actively connected to can see what you allow. We do not sell this data, share it for advertising, or make it public. You can change or revoke any of these choices at any time, and access ends automatically if the coaching relationship ends. We keep a record of your sharing choices so we can honor them, and you can review your sharing history at any time.

4.3 Public Sharing (Optional)

If you enable public profile sharing, your chosen habits and stats become visible via a shareable link. You control what's public and can disable this anytime.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety or that of others.

5. Data Security

We implement industry-standard security measures:

  • All data transmitted over HTTPS (encrypted connections)
  • Passwords are hashed using bcrypt
  • Database access is restricted and audited
  • Row-level security policies protect user data
  • Regular security audits and updates

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Texas Data Breach Notification: In the event of a data breach affecting Texas residents, we will notify you as required by Texas Business & Commerce Code § 521.053 without unreasonable delay and in compliance with applicable state and federal law.

6. Your Rights and Choices

You have the right to:

  • Access: View all your personal data
  • Correct: Update inaccurate information
  • Delete: Request complete account deletion (Settings → Delete Account)
  • Export: Download your data in JSON format
  • Opt-out: Disable notifications, public sharing, or Google Fit sync
  • Revoke: Disconnect Google Fit integration anytime
  • Control health-data sharing: Turn coach access to each health category on or off at any time, and view your sharing history (Profile → Health & Fitness → Sharing & privacy)

7. Data Retention

We retain your data as long as your account is active. When you delete your account:

  • Your personal data is deleted within 30 days
  • Anonymized analytics may be retained for service improvement
  • Backup copies are purged within 90 days

8. Children's Privacy

Clear Morning is not intended for users under 13 years old. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Clear Morning, you consent to this transfer. We ensure adequate safeguards are in place to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use after changes indicates acceptance.

11. Contact Us

If you have questions about this Privacy Policy or your data:

Clear Mornings LLC

8409 Racine Trl

Austin, TX 78717

Email: legal@clearmornings.com

Support: support@clearmornings.com

Website: clearmornings.com

12. Wearable Device API Disclosure

Clear Morning's use and transfer of information received from wearable device APIs (Fitbit, WHOOP, Oura, Strava, Polar, Garmin) adheres to each provider's respective API Terms of Service and User Data Policy, including Limited Use requirements where applicable.

Specifically, Clear Morning:

  • Only requests the minimum scopes necessary to provide the Devices feature
  • Only reads data from connected devices (never writes or modifies your device data)
  • Stores health data securely and never shares it with third parties for marketing or advertising
  • Uses health data solely to display recovery metrics within Clear Morning
  • Allows you to revoke access at any time from the Devices page
  • Complies with HIPAA exemptions (we are NOT a HIPAA-covered entity)

13. SMS / Text Messaging

Clear Mornings runs two SMS messaging programs: (1) one-time verification codes for account sign-in, sign-up, and phone number changes; and (2) optional trainer ↔ member coaching conversations. Both programs use the same phone number you provide, are governed by the disclosures in this section, and are described in detail in our SMS Terms.

13.1 Account Verification (One-Time Codes)

When you sign up, sign in, or change your phone number, we send a one-time verification code (OTP) via SMS to the number you provide. You initiate every code by entering your phone number on the Clear Mornings sign-in screen and tapping "Send code" — codes are never sent without an explicit user action. Codes are valid for 5 minutes, used solely to confirm phone ownership, and never contain marketing content or links.

Frequency: up to 2 messages per sign-in or sign-up attempt — typically one verification code, plus an optional resend if the first didn't arrive.

Your phone number is stored securely and used only for account verification and (if you opt in separately) trainer communication. It is never used to advertise, profile, or contact you for unrelated purposes.

13.2 Trainer Messaging

If you have a trainer on Clear Mornings, you can opt in to receive SMS messages from them — workout reminders, feedback, check-ins, and plan adjustments. You are prompted in-app before any trainer SMS is sent, and you can revoke consent at any time from Profile → Settings → SMS from your coach, or by replying STOP to any message.

Your phone number is never shared directly with your trainer. Messages route through a Clear Mornings phone number provided by Twilio, so neither party sees the other's personal mobile number. Conversation history is retained for audit purposes and is visible only to you, your trainer, and platform administrators for moderation.

Frequency: up to approximately 10 messages per week, varying with your trainer's activity and your interactions. Trainer messaging is entirely optional and the rest of Clear Mornings continues to work if you decline.

13.3 Information Collected for SMS

If you opt in to receive SMS messages, we collect:

  • Your mobile phone number
  • Opt-in timestamp, IP address, and the exact consent language you agreed to
  • Message content exchanged between you and your trainer
  • Delivery status and opt-out requests (STOP keywords)

13.4 No Sharing of Mobile Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of information described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use Twilio as our SMS service provider to deliver messages on our behalf. Twilio processes your phone number and message content solely to transmit SMS and is contractually prohibited from using this data for any other purpose.

13.5 Message Frequency, Rates, and Opt-Out

  • Message frequency varies based on your interaction with your trainer and program activity.
  • Message and data rates may apply. Check with your mobile carrier for details.
  • Reply STOP at any time to unsubscribe from all SMS messages. Reply HELP for assistance.
  • Carriers are not liable for delayed or undelivered messages.
  • You can also revoke SMS consent at any time from your account settings.

14. Trainer Instructional Videos & YouTube

Trainers can attach a short instructional video to an exercise. When a trainer links a YouTube video, Clear Mornings displays it using YouTube's embedded IFrame Player — meaning the app uses YouTube API Services. Our use of those services is governed by the YouTube Terms of Service and the Google Privacy Policy.

When you play an embedded YouTube video, the YouTube player may store, access, or collect information on or from your device (including through cookies or similar technologies) in order to render and play the video, as described in the Google Privacy Policy linked above. This data is collected by Google/YouTube, not by Clear Mornings.

When a trainer uploads their own clip instead of linking YouTube, the file is stored in our own secured storage and shown only to that trainer's clients; it is not shared with YouTube or Google. Any member can report a video for review using the in-app Report control.

This Privacy Policy is effective as of April 16, 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.