Privacy Policy

01 · Who we are

This policy is issued by Canny Ventures Company, which makes Clarity (theclarity.app), a knowledge-graph self-reflection platform, and Careity, a full-spectrum doula and care-navigation practice powered by Clarity. It covers the Clarity app at theclarity.app; the company website at cannyventures.co, including its Clarity and Careity pages; and enquiries, waitlist sign-ups and consultation requests made through either.

Careity's direct care of families is also governed by the client agreement you sign when you begin working together, which takes precedence over this policy for anything it covers.

Contact: mark@theclarity.app. Every message reaches the founder.

02 · The short version

• What you write in Clarity is yours. We store it so you can use it. We do not read it, sell it, or use it for anything else.
• We do not collect your email address, your phone number or your legal name. Your account is a ClarID and a PIN. There is nothing in your account to sell even if we wanted to.
• No administrative surface is built to read another person's Journal, and the admin area is gated on the server. As a company rule, nobody reads a User's Journal — including the founder.
• We do not sell personal data and we do not use it for advertising. There are no advertising trackers and no third-party analytics in the app.
• Your answers are not used to train AI models. Clarity sends Journal content to an AI provider to generate your Resources; under that provider's commercial terms, it does not train on what we send.
• You control sharing. Nothing you write reaches another person unless you grant it or offer it, and you can revoke a grant at any time.
• You can export your Journal yourself, at any time. Deleting your account is done by writing to us — there is no self-serve button yet.
• Clarity is not therapy, diagnosis, medical advice, or a crisis service. If you are in crisis in the United States, call or text 988.

03 · What we collect, and why

What we do not collect. We do not ask for your email address, your phone number, your legal name or your precise location to use Clarity, and we do not buy data about you from anyone. An email address reaches us only if you write to us or join the waitlist on the website.

04 · Consumer health data

Some of what you write in Clarity may reveal something about your physical or mental health — a worry, a loss, a pregnancy, how you are sleeping, what you need. Several US states treat that as consumer health data and give it extra protection, most notably Washington's My Health My Data Act (RCW 19.373). We treat everything in your Journal, Compositions and Resources as consumer health data, wherever you live.

Washington requires a separate Consumer Health Data Privacy Policy. It is published at /health-data and linked from Clarity's entry screen. It says the same things as this section and stands on its own.

Access to Clarity is never conditional on authorising anything. You will never be asked to consent to a sale or a secondary use of your data in exchange for using Clarity, and every control over your own data — consent, visibility, revocation and export — is part of the free product, never a paid feature.

05 · Who can see your Journal

You. And a person you have connected with, only for the specific answers, Compositions or Resources you grant or offer them, and only for as long as you let that stand.

Not us. The founder holds the first ClarID and an administrative role for writing and publishing Clarity's own content. That role is not built to reach any other person's Journal, answers, Compositions, Resources or snapshots, and the admin area is gated on the server. The same rule binds anyone who ever holds the keys to the production system: development runs on synthetic data, and access to a real person's material is permitted only in an emergency tied to a named incident, is logged, and is disclosed in writing within a day.

The admin area includes a ledger of accounts. It shows each ClarID, the name its holder gave, any role tags and the date it was created; for accounts that are not marked as working with the company it also shows how many items the account holds and when it was last used. It never shows what anyone wrote.

People who work with the company are asked to hold a ClarID and to walk through Clarity once as a User. Nothing they answer is kept as a condition, nothing is shared, and nobody at the company can see what they did. Their account is marked as working with the company, and from then on the ledger shows that they hold a ClarID and nothing about how they use it.

06 · Service providers

We use a small number of providers to run Clarity. Each processes data only on our instructions and only to provide the service.

We do not share personal data with advertisers, data brokers, or anyone else for their own purposes.

07 · Sharing, exports and what we cannot prevent

Sharing happens only through connections you accept, grants you make, and offers the other person accepts. Either side can end a connection, and you can revoke a grant at any time. In a session, an item you write stays private until you offer it; if the other person declines it, it returns to your private lane and they are not told anything further.

Exports of your Journal carry a visible watermark — your ClarID and a timestamp — and are recorded in an export log. Your Journal is the only thing that can be exported today, in JSON or plain text; Resources and Compositions cannot be exported yet.

An honest limit. No web app can stop someone from photographing their screen or recording it. Clarity discourages copying — it blocks right-click on Resources and blurs content when the window loses focus — but it cannot make a screenshot impossible, and we will not claim otherwise.

08 · Your rights

Wherever you live, you may:

• confirm whether we hold data about you, and access it;
• export your Journal in a structured, machine-readable format;
• correct anything in your account;
• delete your Journal, your Compositions, or your whole account;
• withdraw consent to anything you previously agreed to; and
• revoke any sharing grant.

Which of these you can do yourself today: exporting your Journal, deleting a Composition, revoking a grant, ending a connection, and withdrawing an offer. Deleting your Journal or your whole account is done by writing to mark@theclarity.app — we are building the self-serve version and will say so here when it exists.

We will answer within 45 days, extended once by up to 45 more only where genuinely necessary and with notice to you, and we will not treat you differently for asking. If we decline a request, we will tell you why and how to appeal: reply to our decision at the same address, and we will answer your appeal in writing within 45 days. If we deny an appeal, we will tell you how to complain to your state attorney general.

Deletion and your account. Clarity keeps what you write for as long as you want it kept — permanence is a feature, not a default we impose. When something is deleted it is removed from the live service promptly, and from backups within 7 days as those backups rotate. When an account is deleted we keep a record that it happened — the ClarID, the date and the reason — and nothing else.

09 · Children and young people

Clarity is for people aged 1616have, we delete it. Users aged 16 and 17 receive the whole of the reflective product — the Map, Questions, your Journal and your Resources — and every privacy control over it.

The features that carry your writing to another person — Reconciliation sessions, Compositions offered on a relationship, and On Your Behalf — require you to be 18ever offered to anyone under 18 in exchange for their data.

10 · Security, and if something goes wrong

We protect accounts with a salted password hash, rate-limited sign-in and temporary lockout after repeated failed PIN attempts, and we encrypt data in transit. Our database provider encrypts data at rest.

We are candid about one limit: the sign-in throttle currently counts attempts within a single server process, so it is weaker across a distributed deployment than it will be. Strengthening it is open work, and we would rather record it here than describe a protection we do not yet fully have.

If personal or health data is ever accessed or disclosed without authorisation, we will notify affected Users, and where the law requires it the Federal Trade Commission and other authorities, without unreasonable delay.

11 · Cookies, tracking and Do Not Track

Clarity uses one cookie: a signed session token named clarity_session, which keeps you signed in for 30 days. The app also keeps some display preferences in your own browser's storage, which never reach us.

Neither site uses advertising cookies, cross-site tracking or third-party analytics, and no other party collects information about your activity across websites through our sites. Because we do not track you across sites, we treat every visitor as if a Do Not Track signal were on, and we do not respond to such signals differently.

12 · California residents

California law requires every website collecting personal information from California residents to post a privacy policy, which this is. It names the categories of data we collect and who receives them (Sections 03 and 06), how you can review and change your data (Section 08), how we tell you about changes (Section 13), when it takes effect (the date above), and how we handle Do Not Track signals and third-party tracking (Section 11).

We do not sell or share personal information for cross-context behavioural advertising, and we use sensitive personal information only to provide the service you asked for. The rights in Section 08 are offered to everyone, whether or not a given statute reaches us yet.

13 · Changes to this policy

If we change this policy in a way that matters, we will say so inside Clarity before the change takes effect, and we will never apply a less protective policy to data collected under a more protective one without asking you first.