Privacy Policy

Clarity (the “Service”) is operated by AlphaPoint Corporation, a New York corporation (“AlphaPoint,” “we,” “us,” or “our”). For privacy purposes AlphaPoint is the “controller” (GDPR) and “business” (CCPA) for the personal information you provide while using Clarity.

We collect only what we need to run Clarity for you:

• Account information: your display name, email address, and a hashed password.
• Profile and preferences: the answers you give during intake, the intake summary the AI generates from those answers, your coaching template preference (Open, Gottman, NVC), and any settings you change in-app.
• Conversation content: every message you send to Clarity, the AI responses returned to you, the topic and brief you set for each case, and the joint-session metadata (who is invited, who has joined, what stage the session is in).
• Invitation data: when you invite a partner to a joint session, the partner’s name and email so we can send the invite.
• Payment information: the email and minimal billing identifiers needed to manage your subscription. Stripe handles your card number; we do not store full card numbers on our servers.
• Technical and usage data: log lines that record API calls, error traces, IP addresses, browser and device type, and event-level usage (e.g., a session was created, an intake was completed). When you allow analytics cookies, we also receive page-view and conversion events through Google Analytics 4 and the Meta Pixel.
• Marketing attribution data: if you arrive at Clarity from a paid ad, the campaign parameters (UTM tags) so we can measure which campaigns lead to sign-ups.

• Deliver the service. Generate AI responses, save your conversations, send invitations, run joint sessions, and provide account functionality.
• Manage your subscription. Charge your card, send billing emails, and offer self-serve cancellation.
• Provide support. Respond to your support emails and investigate problems you report.
• Improve Clarity. Measure feature usage, debug errors, and improve the quality and safety of our service. We do not use your conversations to train third-party AI foundation models.
• Keep Clarity safe and reliable. Detect and prevent abuse, fraud, or violations of our Terms, and apply rate limits.
• Marketing and analytics, with your consent. When permitted by your cookie choices, measure ad performance and conversion through Meta Pixel and Google Analytics 4.
• Comply with law. Respond to lawful requests and meet our legal obligations.

If you are in the EU, EEA, or UK, our legal bases are:

• Contract — to deliver the service you signed up for (account, AI coaching, billing).
• Legitimate interest — to keep the service secure, reliable, and improving, and to communicate with you about it.
• Consent — for non-essential cookies and ad-targeting tracking (Meta Pixel, GA4); you can grant or withdraw consent at any time.
• Legal obligation — to comply with applicable law.

Clarity uses AI to generate coaching responses. Specifically, your messages and the relevant context (your intake summary, the case topic and brief, recent conversation history, and any joint-session participants’ messages if applicable) are sent to our AI provider, Anthropic, through their commercial API. Anthropic returns an AI-generated response, which we save in your conversation and show back to you.

Under Anthropic’s commercial API terms, Anthropic does not use our API inputs or outputs to train Anthropic’s foundation models, and Anthropic retains API logs for a short period (currently 7 days at the time of this policy) before automatic deletion. Anthropic acts as our “data processor” (GDPR) and “service provider” (CCPA).

Inside Clarity, we maintain strict privacy boundaries between coaching modes:

• In private coaching, the AI sees only your messages, your intake summary, and your case context. It does not see messages from any partner you have invited to a separate joint session.
• In a joint session, the AI sees both participants’ messages and is instructed to coach both sides equally without taking sides. Each participant’s private intake summary stays private to that participant.
• The pre-joint “synthesis” guidance the AI prepares for each party before a joint session is generated separately for each party and shown only to that party.

AI outputs can be wrong, incomplete, or out of date. The AI is not a licensed professional. See our Terms of Service, Section 4.

Clarity relies on a small set of trusted vendors to operate the service. We share with each vendor only the data they need to perform their role.

• Anthropic — AI inference (commercial Claude API). Receives conversation content and context. Does not train on our inputs/outputs. Anthropic Privacy Policy.
• Stripe, Inc. — payment processing, subscription management, and customer portal. Receives your email, billing details, and card number (Stripe stores the card; we do not). Stripe Privacy Policy.
• Resend — transactional email delivery (welcome, password reset, partner invitations). Receives recipient email and message content. Resend Privacy Policy.
• Render — cloud hosting for our application servers and database. Receives all data we store, encrypted in transit and at rest. Render Privacy Policy.
• Meta Platforms (Facebook/Instagram) — Meta Pixel. When allowed by your cookie preferences, the Meta Pixel records page views and conversion events (sign-up, subscribe) so we can measure ad performance. This includes “sharing” personal information for cross-context behavioral advertising as defined by CCPA. You can opt out (see “Your rights”). Meta Privacy Policy.
• Google LLC — Google Analytics 4. When allowed by your cookie preferences, GA4 records page views, events, and conversions to help us understand product usage. We use Google Consent Mode v2 where supported. Google Privacy Policy.

We use a small set of cookies and similar technologies:

• Strictly necessary — session and authentication cookies that make the product work; these cannot be disabled.
• Analytics (Google Analytics 4) — loaded only when allowed by your cookie preferences; measures product and feature usage.
• Advertising (Meta Pixel) — loaded only when allowed by your cookie preferences; measures the effectiveness of ads that brought you to Clarity and lets us build similar audiences.

You can change your cookie preferences at any time using the cookie controls in our footer. We honor the Global Privacy Control (GPC) signal where your browser sends it; receiving GPC is treated as a request to opt out of the sale and sharing of personal information.

• Account, conversations, intake summary, and case data: retained for as long as your account is active.
• After account deletion: we delete your personal information from our active systems within 30 days, except where we are required to keep it for legal, accounting, audit, or fraud-prevention purposes. Encrypted backups roll off within 30 days.
• Anthropic API logs: automatically deleted by Anthropic on the timeline described in Section 5 (7 days as of the date of this policy).
• Payment records: retained by Stripe per their retention schedule; we retain the minimum tax and accounting records required by law.
• Server and security logs: retained for up to 90 days for security and debugging.

You have rights over your personal information. Depending on where you live, these may include:

• Access — ask what personal information we hold about you.
• Correction / rectification — ask us to fix inaccurate information.
• Deletion — ask us to delete your account and personal information. You can also self-serve deletion from the Clarity profile page.
• Portability — ask for a copy of your data in a portable format.
• Objection / restriction — ask us to stop or restrict certain processing.
• Opt out of sale or sharing (CCPA/CPRA) — tell us not to share your personal information for cross-context behavioral advertising. You can do this through cookie preferences, by sending the GPC signal, or by emailing us.
• Limit use of sensitive personal information (CCPA/CPRA).
• Non-discrimination — we will not deny service or charge a different price because you exercised a privacy right.
• Withdraw consent (GDPR) for any processing that relies on consent.
• Lodge a complaint with your local supervisory authority (e.g., an EU data-protection authority) if you believe we are not complying with applicable law.

To exercise any of these rights, email us at support@heyclarity.io. We will respond within the timeframe required by applicable law (typically 45 days under CCPA, one month under GDPR, extendable as permitted).

Clarity is not directed to children under 18 years old, and we do not knowingly collect personal information from people under that age. If we learn that we have collected information from someone under 18, we will delete it. If you believe we have information about a child, please contact us at support@heyclarity.io.

Clarity is operated from the United States and our infrastructure is hosted in the United States. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction outside the United States, your personal information will be transferred to and processed in the United States. Where required by law, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

We use industry-standard measures to protect your information, including TLS encryption in transit, encryption at rest where supported by our infrastructure, password hashing, the principle of least privilege for internal access, audit logging, and rate limiting. No service can guarantee perfect security; if a breach occurs that affects your personal information, we will notify you and the relevant authorities as required by law.

Clarity is a coaching tool that uses an AI to help you reflect on your relationships and prepare for difficult conversations. It is not a substitute for therapy, counseling, psychiatric care, or any other licensed mental-health, medical, or legal service. The AI is not a licensed professional and does not diagnose, treat, or prescribe. If you are in emotional crisis, contemplating self-harm or harm to others, or otherwise need urgent support, please contact a licensed professional in your country or, in the United States, call or text 988 (the Suicide & Crisis Lifeline).

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the latest version. For material changes we will provide additional notice (for example, by email or by an in-product banner) before the changes take effect.

For privacy questions or to exercise any of your rights, email support@heyclarity.io.

Effective 2026-05-11.