Privacy Policy

Last Updated: October 9, 2026

1. Introduction

Welcome to Clear Morning. We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our habit tracking and wellness application.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Authentication provider (Google, GitHub, or email link)
  • Display name (optional)
  • Profile picture (optional)

2.2 Habit Tracking Data

To provide our core service, we collect:

  • Habits you create and track
  • Check-in timestamps and completion data
  • Affirmation preferences and custom primers
  • Photos you upload (optional)
  • Nutrition logs (food items, calories, macros)
  • Exercise logs and workout data
  • Recovery metrics (sleep, mood)

2.3 Wearable Device Data (Member Plan)

If you connect wearable devices, which the Member plan includes, we access:

  • Supported devices: Fitbit, WHOOP, Oura Ring, Strava, Polar, Garmin
  • Sleep data: Duration, sleep stages, and quality metrics
  • Heart rate data: Resting heart rate and HRV (heart rate variability)
  • Activity data: Steps, exercise sessions, active minutes, workouts
  • Recovery data: Readiness scores, strain, recovery metrics

Important: We only read your wearable device data via secure OAuth 2.0 connections. We never write, modify, or delete any data in your connected accounts. Your health data is stored securely in our database and is only used to display recovery metrics within Clear Morning. You can disconnect any device at any time from the Devices page.

2.4 Usage Data

We automatically collect:

  • Device type and operating system
  • Browser type and version
  • IP address (anonymized)
  • App usage patterns (pages visited, features used)
  • Error logs and crash reports

2.5 Payments to Your Coach

If you pay a Clear Mornings coach directly (Terms Section 18), we store what we need to show that purchase to you and to your coach:

  • The name and price of what you bought, and the currency
  • Whether it is active, past due, cancelled or refunded, and when it started and ended
  • For a session pack, how many sessions it held and how many are left, and which scheduled session used each one
  • Identifiers Stripe gives us for the payment, the customer record and the subscription

We never see or store your card number, security code or expiry date. Those go directly to Stripe on its own payment page. Payment records are kept for as long as your coaching relationship exists and then under the retention rule in Section 7.

2.6 Health & Fitness Profile (Optional)

If you choose to complete your Health & Fitness profile, we collect the information you self-report, which may include:

  • Date of birth and sex
  • Height and weight
  • Physical-activity-readiness (PAR-Q) answers
  • Injuries and areas to protect
  • Health conditions and any free-text notes you add
  • Training preferences (experience level, goals, equipment, availability)

This information is optional and self-reported. It is private to you by default and is only shared with a coach if you explicitly choose to (see Section 4.2). It is not protected health information under HIPAA and is governed by this Policy and applicable state consumer-privacy laws.

3. How We Use Your Information

We use your data to:

  • Provide the service: Track your habits, display analytics, sync across devices
  • Improve the app: Fix bugs, add features, optimize performance
  • Personalize experience: Generate AI affirmations, recommend habits, calculate recovery scores
  • Send notifications: Workout reminders, coach and plan updates, and notices about your account, by email, in the app, and by text if you agree to texts (Section 13)
  • Process payments: Handle subscriptions via Stripe (we never store payment card details)
  • Comply with legal obligations: Respond to lawful requests, enforce our Terms of Service

4. How We Share Your Information

We DO NOT sell your personal data. We only share data in these limited circumstances:

4.1 Service Providers

  • Supabase: Database hosting and authentication
  • Vercel: Application hosting and deployment
  • Stripe: Payment processing
  • OpenAI/Anthropic: AI affirmation generation (we send anonymized prompts only)
  • Wearable APIs: Fitbit, WHOOP, Oura, Strava, Polar, Garmin (OAuth connections for health data)
  • Food databases: OpenFoodFacts (nutrition data lookup)
  • Twilio: SMS/text messaging delivery between trainers and members
  • Google Ads and Meta: Advertising measurement. When you arrive from one of our ads and sign up, apply as a trainer or buy a plan, we send them a hashed (one-way scrambled) form of your email address and the ad's click id, so we can tell which ads work. We never send your health, workout or message content.

4.2 Sharing Health Data With Your Coach

If you connect with a coach, you can choose to share parts of your self-reported Health & Fitness profile with them so they can program safely and appropriately for you. This sharing is off by default and is opt-in for each category — nothing is shared until you turn it on.

You control, separately, which of the following an actively connected coach may see:

  • PAR-Q safety flags: your physical-activity-readiness answers that affect workout intensity
  • Injuries & areas to protect: so your coach can program around them
  • Health conditions: e.g. asthma, blood pressure
  • Height & weight: used to calibrate training loads

Only a coach you are actively connected to can see what you allow. We do not sell this data, share it for advertising, or make it public. You can change or revoke any of these choices at any time, and access ends automatically if the coaching relationship ends. We keep a record of your sharing choices so we can honor them, and you can review your sharing history at any time.

4.3 Public Sharing (Optional)

If you enable public profile sharing, your chosen habits and stats become visible via a shareable link. You control what's public and can disable this anytime.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety or that of others.

5. Data Security

We implement industry-standard security measures:

  • All data transmitted over HTTPS (encrypted connections)
  • Passwords are hashed using bcrypt
  • Database access is restricted and audited
  • Row-level security policies protect user data
  • Regular security audits and updates

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Texas Data Breach Notification: In the event of a data breach affecting Texas residents, we will notify you as required by Texas Business & Commerce Code § 521.053 without unreasonable delay and in compliance with applicable state and federal law.

6. Your Rights and Choices

You have the right to:

  • Access: View all your personal data
  • Correct: Update inaccurate information
  • Delete: Ask us to delete your account from Settings → Account, or by email from the address on your account. We confirm the request with you and carry it out within 30 days
  • Export: Ask support for a copy of your data
  • Opt-out: Disable notifications, public sharing, or Google Fit sync
  • Revoke: Disconnect Google Fit integration anytime
  • Control health-data sharing: Turn coach access to each health category on or off at any time, and view your sharing history (Profile → Health & Fitness → Sharing & privacy)

7. Data Retention

We keep your data while your account is open. After you ask us to delete it:

  • We confirm the request with you and remove your personal data within 30 days.
  • Archive copies kept for recovery are purged 30 days after that, and database backups roll off within 90 days.
  • Payment and consent records stay for as long as tax and consumer law require, up to 7 years. They hold transaction ids, amounts, dates and the policy version you accepted, and no longer link to a profile.
  • Usage figures that identify nobody may be kept.

Questions you ask in Ask Clear Mornings are kept for 12 months and then deleted, or sooner when your account is deleted.

8. Children's Privacy

Clear Morning is not intended for users under 13 years old. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. By using Clear Morning, you consent to this transfer. We ensure adequate safeguards are in place to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use after changes indicates acceptance.

11. Contact Us

If you have questions about this Privacy Policy or your data:

Clear Mornings LLC

8409 Racine Trl

Austin, TX 78717

Email: legal@clearmornings.com

Support: support@clearmornings.com

Website: clearmornings.com

12. Wearable Device API Disclosure

Clear Morning's use and transfer of information received from wearable device APIs (Fitbit, WHOOP, Oura, Strava, Polar, Garmin) adheres to each provider's respective API Terms of Service and User Data Policy, including Limited Use requirements where applicable.

Specifically, Clear Morning:

  • Only requests the minimum scopes necessary to provide the Devices feature
  • Only reads data from connected devices (never writes or modifies your device data)
  • Stores health data securely and never shares it with third parties for marketing or advertising
  • Uses health data solely to display recovery metrics within Clear Morning
  • Allows you to revoke access at any time from the Devices page
  • Complies with HIPAA exemptions (we are NOT a HIPAA-covered entity)

13. SMS / Text Messaging

Clear Mornings texts phone numbers in three ways: (1) one-time verification codes for account sign-in, sign-up, and phone number changes; (2) Clear Mornings texts, the optional program of reminders, updates and coach messages a member agrees to in the app; and (3) optional alerts to a coach's own phone. All three are governed by the disclosures in this section and described in detail in our SMS Terms.

13.1 Account Verification (One-Time Codes)

When you sign up, sign in, or change your phone number, we send a one-time verification code (OTP) via SMS to the number you provide. You initiate every code by entering your phone number on the Clear Mornings sign-in screen and tapping "Send code" — codes are never sent without an explicit user action. Codes are valid for 5 minutes, used solely to confirm phone ownership, and never contain marketing content or links.

Frequency: up to 2 messages per sign-in or sign-up attempt — typically one verification code, plus an optional resend if the first didn't arrive.

Your phone number is stored securely and used only for account verification and, if you opt in separately, Clear Mornings texts. It is never used to advertise, profile, or contact you for unrelated purposes.

13.2 Clear Mornings Texts

If you agree to Clear Mornings texts in the app, Clear Mornings texts you workout, meal plan and food log reminders, schedule and plan updates, grocery lists and news about a coach request, and the coaches you choose to work with can text you messages, check-ins and pay links. You agree by ticking a box or tapping a button beside the disclosure, or by replying ACCEPT or YES to a coach's invitation, and we send one text confirming it. Agreeing is optional, and the rest of Clear Mornings works without it. Every place that asks is shown on our SMS Consent page.

Texts between you and your coach go through a Clear Mornings phone number provided by Twilio, so you never see your coach's personal mobile number. Your coach sees the number you agreed on in your client profile. A reply to your coach's text goes to your coach. A reply to a text from Clear Mornings itself goes to Clear Mornings support as a support request. Conversation history is retained for audit purposes and is visible only to you, your coach, and platform administrators for moderation.

When you agree, we record your phone number, the time, the place in the app or the keyword you replied, the exact words you saw, the version of that wording, your IP address and your browser's user agent. We keep that record after you turn texts off, as proof of what you agreed to.

A coach can also have their clients' texts and schedule alerts forwarded to their own phone. We send that number one text asking for a reply of ACCEPT, after the coach saves it in the app or, for a coach who signed up with their phone number, as the welcome text sent when their application is approved. Alerts start only after the coach replies ACCEPT from that number.

13.3 Information Collected for SMS

If you opt in to receive SMS messages, we collect:

  • Your mobile phone number
  • Opt-in timestamp, IP address, browser user agent, and the exact consent language you agreed to
  • Message content exchanged between you and your coach
  • The text of any reply you send to a text from Clear Mornings itself, kept as a support request
  • Delivery status and opt-out requests (STOP keywords)

13.4 No Sharing of Mobile Information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of information described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use Twilio as our SMS service provider to deliver messages on our behalf. Twilio processes your phone number and message content solely to transmit SMS and is contractually prohibited from using this data for any other purpose.

13.5 Message Frequency, Rates, and Opt-Out

  • Message frequency varies. How many you get depends on the workouts and plans you have and how often your coaches write to you.
  • Message and data rates may apply. Check with your mobile carrier for details.
  • Reply STOP at any time to stop every Clear Mornings text, coach text and coach alert to your number. Sign-in codes are not affected. Reply HELP for assistance.
  • Carriers are not liable for delayed or undelivered messages.
  • You can also turn texts off at any time from Profile → Settings → "Texts and emails".

14. Trainer Instructional Videos & YouTube

Trainers can attach a short instructional video to an exercise. When a trainer links a YouTube video, Clear Mornings displays it using YouTube's embedded IFrame Player — meaning the app uses YouTube API Services. Our use of those services is governed by the YouTube Terms of Service and the Google Privacy Policy.

When you play an embedded YouTube video, the YouTube player may store, access, or collect information on or from your device (including through cookies or similar technologies) in order to render and play the video, as described in the Google Privacy Policy linked above. This data is collected by Google/YouTube, not by Clear Mornings.

When a trainer uploads their own clip instead of linking YouTube, the file is stored in our own secured storage and shown only to that trainer's clients; it is not shared with YouTube or Google. Any member can report a video for review using the in-app Report control.

This Privacy Policy is effective as of April 16, 2026 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.