privacy & cookie policy

1. introduction

this site is operated by serendipiware, a software project based in patras, greece, founded by andrew chalikias. serendipiware acts as the data controller for all personal information collected through claire.im. this privacy policy explains what data we collect, how we use it, who we share it with, and what rights you have under the general data protection regulation (GDPR).

2. information we collect

• account information: when you create an account we collect your email address. we use supabase for authentication (OTP-based, no passwords stored).
• memory data: claire autonomously saves facts about you over time (e.g. your name, interests, life events) to maintain context across conversations. you can request deletion of this data at any time.
• voice data (pro users): if you use the voice reply feature, your message text is sent to elevenlabs to generate audio. no audio recordings of you are stored.
• payment data: subscriptions are handled by polar.sh (powered by stripe). we do not receive or store your card details. we receive only your subscription status and a customer identifier.
• analytics: we use umami, a privacy-friendly analytics tool, to collect anonymous page view data. no personal identifiers are tracked.
• support messages: if you contact us by email or use the in-app report form, we receive the details you provide.

3. how we use your information

• to operate and maintain the claire chat experience.
• to maintain long-term memory so claire can remember you across sessions.
• to process your subscription and manage your account.
• to send transactional emails (e.g. login codes) via supabase.
• to detect and prevent abuse and policy violations.
• to understand aggregate usage patterns via anonymous analytics.

we do not use your data for advertising, profiling for third parties, or any purpose beyond operating claire.

4. third-party data processors

we share data with the following providers solely to operate our services. we do not sell or rent your data to anyone.

• supabase (auth, database, real-time) — data stored in eu-north-1 (stockholm, sweden). privacy policy
• elevenlabs (pro users only) — message text sent for voice synthesis. privacy policy
• polar.sh / stripe — subscription and payment processing. privacy policy
• railway — backend server hosting. privacy policy
• cloudflare pages — frontend hosting and CDN. privacy policy
• umami — privacy-friendly anonymous analytics. no personal data collected. privacy policy

5. data storage & security

your account data and chat history are stored in the european union (supabase stockholm, sweden). we operate under GDPR regulations as a data controller based in greece (EU). we use reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse. all connections are encrypted via HTTPS/TLS.

6. data retention

we keep your data for as long as your account is active. if you delete your account, all your messages, memories, and profile data are permanently deleted from our systems. the only exception: if your account has been suspended for a serious policy violation (e.g. illegal content), data may be retained temporarily as evidence before deletion.

7. cookies

we use a single session cookie to keep you logged in. that's it. we do not use advertising cookies, tracking pixels, or any third-party cookies for behavioral profiling. umami analytics is fully cookieless.

8. your rights (GDPR)

as an EU resident you have the right to:

• access — request a copy of the personal data we hold about you.
• rectification — request correction of inaccurate data.
• erasure — delete your account and all associated data via the settings panel, or by contacting us.
• portability — export your full chat history as a JSON file via the settings panel at any time.
• objection — object to how we process your data.
• withdraw consent — you can stop using the service and request account deletion at any time.

to exercise any of these rights, contact us at [email protected]. we will respond within 30 days.

9. children's privacy

claire.im is not intended for users under 16 years of age. we do not knowingly collect personal data from children. if you believe a minor has created an account, please contact us at [email protected] and we will delete the data immediately.

10. changes to this policy

we may update this policy occasionally. when we do, we'll update the "last updated" date at the top. continued use of claire after changes means you accept the updated policy.

11. contact

if you have any questions about this privacy policy or how we handle your data, reach us at:

serendipiware
patras, greece (EU)
[email protected]