1. What data we collect
Chat messages
We do not store chat messages on our servers. They are transmitted to our AI providers for processing – currently Google (Gemini API, USA) as the primary provider, with Anthropic (Claude API, USA) as a fallback. After processing, the messages are discarded. There is no server-side storage of conversation histories.
Your conversation is stored on your device so that Claro can pick up where an earlier conversation left off. It stays on your device only, keeping the most recent 100 messages. When you send a new message, the last 20 are included so Claro can follow the thread – these are not stored by us either. You stay in control: the lock icon at the top right of the chat opens the privacy section. There you can switch off storing the conversation – which also deletes whatever is already stored – or delete the history on its own.
Anonymous usage statistics
So that we can see which features are used, we count events such as app start, completed exercise, or opening the subscription screen. What is transmitted is not your device ID but a value that rotates daily – enough to count daily users, not enough to recognise anyone across days. Content is never transmitted, neither from the chat nor from exercises. The data goes only to our own server, not to third parties. You can switch this off in the chat's privacy section.
Usage statistics (Freemium limit)
To manage the daily message limit, we store the following on our server:
- An anonymous device ID (randomly generated, cannot be traced back to you)
- The number of messages sent per day
This data is automatically deleted after 7 days.
Local data on your device
The following data is stored on your device (AsyncStorage). We do not store it on our servers and have no access to it:
- Exercise progress and streaks
- Favorites
- XP, level, and unlocked achievements (gamification)
- Onboarding status
- SUDS values from ERP exercises
- Your conversation with Claro
- Reminder settings (whether active, chosen time)
This data is automatically deleted when you uninstall the app.
Exception – practice context in the chat: When you write to Claro, a short summary of your practice history is sent along so that Claro can respond to what you have actually been doing. It contains: your current streak, the number of exercises completed, the titles of your most recent exercises, and the corresponding SUDS values. This summary is transmitted to the AI provider together with your message and is not stored by us. Free text from your exercises is never transmitted. If you do not use the chat, this data never leaves your device. You can switch this transmission off in the chat's privacy section; the AI provider then receives nothing about your exercises at all.
Reminders
If you enable daily reminders, they are created and scheduled entirely on your device. No push token is created, nothing is registered with Apple or with us, and we do not learn whether or when you practise. Permission for notifications is requested only when you switch reminders on, and can be withdrawn at any time in iOS Settings.
In-app purchases (Premium)
Premium subscription payments are processed via the Apple App Store and RevenueCat. We do not receive any payment data (such as credit card numbers). The privacy policies of Apple and RevenueCat apply.
No disclosure to third parties
We do not sell or share your data with third parties, except for:
- Google (Gemini API) – for the AI chat function, no permanent storage
- Anthropic (Claude API) – as a fallback for the AI chat function, no permanent storage
- Apple – for in-app purchases
- RevenueCat – for subscription management
2. Third-party providers
Google (Gemini API)
Chat messages are transmitted to Google (USA) for processing. Google is subject to the EU-US Data Privacy Framework. According to Google, API requests via the Gemini API are not used for model training.
Privacy Policy: policies.google.com/privacy
Anthropic (Claude API)
As a fallback provider, chat messages are transmitted to Anthropic (USA). Anthropic is subject to the EU-US Data Privacy Framework.
Privacy Policy: anthropic.com/privacy
RevenueCat
Subscription status and purchases are managed via RevenueCat.
Privacy Policy: revenuecat.com/privacy
3. Legal basis
Processing is based on:
- Art. 6(1)(b) GDPR – performance of a contract (providing the app's features)
- Art. 6(1)(f) GDPR – legitimate interests (managing the freemium limit)
4. Your rights
You have the right to access, delete, and lodge a complaint with the competent data protection authority. Device ID data will be deleted immediately upon request.
Contact: [email protected]
5. Minors
The app is intended for individuals aged 17 and older. We do not knowingly collect data from minors under the age of 13.
6. Changes
This Privacy Policy may be updated. The current version is always available in the app and on this website.