1. Who we are and what this covers
Clary is made by TOPSOL ("we", "us", "our"), based in Pakistan. This Privacy Policy explains what information the Clary app handles, where it goes and the choices you have. It covers the iOS and Android app in all five modes — pregnancy, postpartum, period, trying to conceive and perimenopause — and the optional connected features described below. Questions: topsol.org@gmail.com.
2. Summary
Most of what you track stays on your phone. Your logs, photos, plans and settings are kept in the app's local storage on your device, and we do not upload them unless you turn on one of three optional connected features: Clary AI, Communities or Partner Access. Each asks for your agreement before anything leaves the device, and each can be left or deleted from inside the app.
We do not sell your personal information, the app shows no third-party advertising, and we do not track you across other apps or websites.
3. Information stored on your device
Depending on your mode and the tools you use, the app stores on your device:
- your profile — name, age range, active mode, cycle and pregnancy dates, and your baby's birth date in postpartum mode;
- daily logs of symptoms, mood, flow, discharge and notes; period, ovulation and basal-temperature entries;
- kick-counter and contraction sessions; weight, blood-pressure and blood-sugar readings;
- medicines and whether you took them; diet-plan preferences, body measurements and meals;
- postpartum recovery check-ins and your baby's feeds, nappies, sleep and growth;
- appointments and their attachments; bump photos and their notes;
- hospital-bag, shopping, to-do and birth-plan lists; baby-name shortlists; and app preferences.
This data is included in your device's own backup (iCloud or Google) and in any backup file you export from Profile, which you control. Doctor reports, weekly recaps and journey keepsakes are generated on the device and leave it only when you choose to share them. Home-screen widgets read a short summary from the app's local storage and upload nothing.
4. Clary AI (optional)
Clary AI is the in-app health assistant. It runs on our server, but there is no account: when you first accept the Clary AI notice, the app creates a random device identifier and a secret that is stored in your phone's Keychain or Keystore. Losing that secret means losing the conversations — we cannot link them back to you.
When you ask a question we send the message, your mode, your current pregnancy week, postpartum week or cycle day, and your age range. Accepting the notice also lets the app upload a weekly chart so the answers match your own tracking: days with entries, symptoms from a fixed list, mood and sleep quality, weight, blood-pressure and blood-sugar readings, your medicine list, daily counts of baby-care events in postpartum mode, and the notes you wrote on those days. "What Clary AI can see" inside the chat shows exactly what has been shared. Your name, contact details, photos and the rest of the app are never sent.
Messages and charts are processed by our server and by a third-party AI model provider acting on our instructions to generate the reply. They are not used to train AI models and are not sold. Conversations are kept on our server so you can come back to them; you can delete any conversation from the chat, and "Delete All Data & Reset" in Profile deletes everything held for your device. Fair-use limits apply. Each request carries a Firebase App Check token (Google Play Integrity or Apple App Attest) proving it came from a genuine copy of the app.
Dictation uses your phone's on-device speech recognition. Your voice is transcribed on the device and is never sent to us.
5. Communities (optional)
Communities are group conversations with people at the same stage as you. Joining creates an anonymous account with our backend provider, Supabase — no email address, phone number or real name. Other members see only the display name and avatar you choose, your messages and your reactions. There are no direct messages and no photos.
Messages are stored on Supabase and removed automatically after the group's retention period, which is shown in each group (30 days for topic groups, 90 days for due-date cohorts). You can report or block a member; a message reported twice is hidden, and we review reports and can remove accounts from our moderation dashboard.
If you allow notifications for new messages, your device's push token is registered with our backend and notifications are delivered through Firebase Cloud Messaging; you can mute a group at any time. Anonymous accounts that never join a group are deleted after 30 days. Deleting your cloud account from Profile removes you from every group.
6. Partner Access (optional)
Partner Access lets one partner follow the categories you choose to share. As the owner you verify an email address with a one-time code, which creates your cloud account; the partner joins anonymously with an invite code and needs no email. Only the categories you enable are copied to a private Supabase project, protected by account sign-in, row-level security, a private photo bucket and expiring links. Turning a category off deletes its cloud copy; revoking, leaving or deleting either account ends the link and removes the shared data.
If you choose Partner Access, Clary uploads only the categories you enable to a private Supabase project so one authenticated partner can read them. Depending on what you turn on, that can include:
- your due date, pregnancy week and baby-size comparison;
- upcoming appointments — title, type, date, time, location and status, without notes or attachments;
- kick sessions — when each started and ended, how long it lasted and how many kicks you counted, including a session while it is running;
- the photos in your bump gallery, with their week and date, without captions or notes;
- health insights — trends from your pregnancy log (days logged and your logging streak, average pain, sleep and stress, exercise days, water intake, and your most frequent symptoms and moods), plus each weight, blood-pressure and blood-sugar reading in the range you choose, with its date and, for blood sugar, whether it was taken fasting, after a meal or at another time;
- your birth plan — the built-in choices you have picked, and any you mark as most important;
- your hospital bag — which of the standard items are packed;
- your baby-name shortlist, with your partner’s reactions and suggestions (see below);
- your baby’s sex and when you revealed it, only after you choose to share the reveal;
- during labour, your contraction pattern — how far apart and how long they are, and whether the 5-1-1 pattern has been reached — which expires automatically twelve hours after your last update.
Never uploaded for Partner Access: your raw daily logs and their dates, notes, flow, discharge, medication, cycle history, Clary AI chats, diet plan, questions for your doctor, anything you typed yourself into your birth plan or hospital bag, and any other health data outside the categories you enable.
Access is protected by account authentication, row-level security, a private photo bucket, expiring links and immediate owner revocation. This design is not end-to-end encrypted; Supabase processes the shared data on our behalf. Turning a category off deletes its cloud copy. Revoking, leaving or deleting either cloud account ends the link and removes the shared data.
If notifications are allowed, each phone’s push token is registered with our backend so the other phone can be told when something new is shared — for example an appointment, the start of labour or a reaction to a baby name. These notifications are delivered through Firebase Cloud Messaging and say only what kind of update is waiting, never its details. The partner can mute them.
If you share baby names, the names on your shortlist, whether each one is for a boy or a girl, and your partner’s reactions to them are stored with the rest of the shared projection. Your notes on names are never uploaded. Turning baby names off, or ending partner access, deletes the names and the reactions from the cloud.
If your partner suggests names, what they type, and whether you added or passed on each one, is stored until they remove it, baby names stop being shared, or partner access ends. If you choose blind match, the catalogue names on your shortlist and the names your partner likes are stored as catalogue references, so the app can find the ones you both chose. Neither of you can see the other’s likes — only the names you both like. Names you typed yourself and your notes are never used for blind match. Switching blind match off, or ending partner access, deletes the likes and the matches.
7. Analytics and attribution
We use Firebase Analytics (Google) to understand how the app is used: screens viewed, features opened, onboarding and subscription steps, your app language and active mode, and device and app-version details. Analytics events never include your health readings, notes, messages or photos, and collection is off in development builds.
On iOS, on first launch, the app asks Apple's AdServices framework whether the install came from an Apple Search Ads campaign. The answer contains campaign and keyword identifiers, not personal details, and is recorded once in analytics. We do not use advertising SDKs.
8. Purchases
Premium is an auto-renewing subscription — monthly or yearly, with a free trial where offered — sold through the App Store or Google Play. Payment is handled entirely by Apple or Google; we never see your card details. We receive only what is needed to unlock Premium (the plan, its status and renewal date) and keep it on your device.
9. Device permissions
Each permission is requested only when you use the feature that needs it, and can be revoked in your device settings:
- Calendar and Reminders — to add your appointments to your calendar;
- Camera and Photos — for bump photos and appointment attachments (we do not scan your library);
- Notifications — for reminders, weekly updates and new Communities messages;
- Microphone and Speech Recognition — for on-device dictation to Clary AI;
- Exact alarms (Android) — so medicine and appointment reminders fire on time.
10. Security
Data in transit is encrypted with TLS. The Clary AI secret lives in your phone's Keychain or Keystore. Cloud data for Communities and Partner Access is protected by authentication and row-level security; it is not end-to-end encrypted, and Supabase processes it on our behalf. No method of storage or transmission is perfectly secure — protect your device with a passcode and keep it updated.
11. Retention
Local data stays until you delete it in the app or uninstall. Clary AI conversations and charts stay until you delete them. Community messages are removed after the group's retention period, and an unused anonymous account after 30 days. Partner Access data is removed when you turn a category off or the link ends. Analytics data is retained by Google under Firebase's standard settings. Support emails are kept only as long as needed to help you.
12. Your choices and rights
- Delete everything on the device — and your Clary AI data — with Profile → Delete All Data & Reset.
- Delete your cloud account (Communities and Partner Access) from Profile.
- Leave a group, mute its notifications, or revoke any permission in your device settings.
- Manage or cancel Premium in your App Store or Google Play account.
Depending on where you live you may have rights to access, correct, delete or port personal information, or to object to its processing. To exercise them for data we hold, email topsol.org@gmail.com; we may need to verify your identity first.
13. International processing
We operate from Pakistan. The connected features use Supabase, Google (Firebase) and a third-party AI model provider, which may store and process data in other countries. Apple and Google handle purchases in the countries where they operate.
14. Children
Clary is for adults and older teens managing their own reproductive health. It is not directed at children under 13 and we do not knowingly collect their information; if you believe a child has given us data, contact us and we will delete it. Postpartum mode records your baby's feeds, sleep and growth as part of your own health record; it stays on your device except for the daily counts included in a Clary AI chart if you use Clary AI.
15. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top will change when we do, and material changes may also be announced in the app or the store listing. Continued use of the app after an update means you acknowledge the revised policy.
16. Contact
TOPSOL, Pakistan. Email: topsol.org@gmail.com.