--- title: "Data Privacy & Security" description: "Understanding how your data is protected, what we collect, and your privacy rights" category: "troubleshooting" lastUpdated: "2025-11-01" --- # Data Privacy & Security Your privacy is our top priority. This guide explains what data Clear Mornings collects, how it's protected, and your rights to control, export, or delete it. --- ## What Data Clear Mornings Collects ### Personal Information **Account Data**: - Email address (required for login) - Phone number (optional, if you use SMS auth) - Display name (optional, defaults to "User") - Profile photo (optional) - Timezone (auto-detected, used for accurate date tracking) **Authentication Data**: - OAuth provider info (if you log in with Google/Apple/GitHub) - Hashed password (we NEVER store plain-text passwords) - Session tokens (expire after 7 days) - Last login timestamp **Passwords are hashed using bcrypt**: Even Clear Mornings developers cannot see your password. If you forget it, we can't recover it - only reset it. ### Habit & Wellness Data **Trinity System Tracking**: - **Recovery habits**: Sleep hours, meditation time, rest days, mood scores - **Exercise habits**: Workout types, duration, intensity, exercise logs - **Nutrition habits**: Food items, protein intake, barcode scans, voice logs **Metadata**: - Habit creation/completion timestamps - Streak counts and achievement dates - 21-day sprint progress - Backfill history (when you log past days) ### AI Affirmation Data **For Habit-Specific Affirmations**: - Your active habits (to match with relevant authors) - Category preferences (Recovery/Exercise/Nutrition) - Last affirmation shown timestamp (to prevent repeats) **For Personal Affirmation Generators**: - Your curated author collections - Custom primer text (if you write personalized prompts) - Generator settings (rotation mode, categories) **AI Processing**: - We use OpenAI's API for voice transcription (Whisper) - We use Claude (Anthropic) for food parsing - Audio recordings are NOT stored after transcription - Voice transcripts are stored only for your food log accuracy **AI Data Processing**: Voice audio is sent to OpenAI for transcription, then IMMEDIATELY deleted. We do not train AI models on your data. See our [AI Data Policy](#ai-data-policy) below. ### Usage Analytics **What we track**: - Feature usage (which pages you visit, which buttons you click) - Error logs (if something breaks, we capture the error to fix it) - Performance metrics (page load times, API response times) - Device type (mobile/desktop, browser version) **What we DON'T track**: - ❌ Your exact habit names (we see "user created a habit" not "user created 'Quit smoking' habit") - ❌ Specific food items (we see "user logged food" not "user ate a burger") - ❌ Personal notes or journal entries - ❌ Your location (unless you grant permission for timezone detection) ### Payment & Billing Data **Stored by Stripe (NOT Clear Mornings)**: - Credit card numbers - Billing addresses - Payment history **Stored by Clear Mornings**: - Subscription tier (Basic/Premium/Premium+) - Subscription status (active/canceled/past_due) - Stripe customer ID (a reference, not your card data) **PCI Compliance**: Clear Mornings is PCI-DSS compliant through Stripe. We NEVER see your full credit card number - only the last 4 digits. --- ## How Your Data Is Encrypted ### Data in Transit (Network Security) **TLS 1.3 Encryption**: - All data between your browser and Clear Mornings is encrypted - Same security banks use for online banking - Prevents "man-in-the-middle" attacks **HTTPS Everywhere**: - `clearmorning.app` uses HTTPS by default - HTTP requests are automatically upgraded to HTTPS - No unencrypted data ever leaves your device ### Data at Rest (Storage Security) **Supabase PostgreSQL Database**: - AES-256 encryption for all stored data - Encrypted backups (30-day retention) - Geographic redundancy (data replicated across multiple regions) **File Storage** (for profile photos, exports): - Stored in Supabase Storage - AES-256 encryption - Access controlled by Row Level Security (RLS) ### Password Hashing **Bcrypt with Salt**: - Passwords are hashed using bcrypt (industry standard) - Each password has a unique salt (random data mixed in) - Even if the database leaked, passwords are unreadable - Rainbow table attacks are ineffective **Password Reset Tokens**: - One-time use - Expire after 60 minutes - Invalidated after use --- ## Who Can See Your Data ### You (Full Access) - ✅ View all your habits, food logs, progress charts - ✅ Export your data anytime (Premium+ only, see below) - ✅ Delete your account and all data (see [Deleting Your Account](#deleting-your-account)) ### Clear Mornings Developers (Extremely Limited) **What we CAN see**: - Aggregated, anonymized analytics (e.g., "500 users logged habits today") - Error logs (if your account triggers a bug, we see the error message) - Support requests (if you email us, we see what you write) **What we CANNOT see**: - Your individual habit names or completion data (blocked by RLS) - Your food logs or nutrition data (blocked by RLS) - Your AI affirmations or personal notes (blocked by RLS) **Exception**: If you explicitly grant us access for support (e.g., "Please look at my account to debug this issue"), we can temporarily access your data to help you. ### Third-Party Services **OpenAI (Whisper API)**: - Receives: Audio recordings for voice transcription - Duration: Processed in real-time, NOT stored by OpenAI per their API policy - Purpose: Convert "chicken breast, 200 grams" into text **Anthropic (Claude API)**: - Receives: Transcribed text from voice logs (e.g., "chicken breast, 200 grams") - Duration: Processed in real-time, NOT used for training per their API policy - Purpose: Parse food text into structured data (name, calories, protein) **Stripe (Payment Processing)**: - Receives: Email, billing address, payment info - Duration: Stored as long as you have an active subscription (+ 7 years for tax records) - Purpose: Process payments, manage subscriptions **Vercel (Hosting)**: - Receives: Basic server logs (IP address, timestamp, page requested) - Duration: 30 days - Purpose: Infrastructure monitoring, DDoS protection **No Data Selling**: Clear Mornings does NOT sell, rent, or trade your personal data. Ever. We're a subscription business - you pay us, not advertisers. ### No One Else - ❌ Advertisers - We don't have ads - ❌ Data brokers - We don't sell data - ❌ Insurance companies - We don't share health data - ❌ Other users - Your data is private by default (no social features) --- ## Row Level Security (RLS) Explained Simply ### What is RLS? **Row Level Security** is a database feature that ensures users can ONLY see their own data. **Example**: - Alice creates a habit "Morning Meditation" - Bob creates a habit "Evening Run" - Database query: `SELECT * FROM habits` - **Without RLS**: Alice sees Bob's habit (security breach!) - **With RLS**: Alice sees ONLY her own habit ### How RLS Works in Clear Morning **Every database table has RLS policies**: ```sql -- Example policy for habits table CREATE POLICY "Users can only see their own habits" ON habits FOR SELECT USING (auth.uid() = user_id); ``` **Translation**: "When selecting rows from `habits`, only return rows where the `user_id` matches the currently logged-in user's ID." **What this protects**: - ✅ Habits - ✅ Food logs - ✅ Exercise logs - ✅ Affirmation generators - ✅ Subscription data - ✅ Profile information ### RLS in Action **When you query the database**: 1. You send: `SELECT * FROM habits` 2. Supabase automatically adds: `WHERE user_id = YOUR_USER_ID` 3. You receive: Only YOUR habits (never anyone else's) **Even if a hacker compromised the API**: - They'd need YOUR session token to see YOUR data - Session tokens expire after 7 days - They're unique per user, per login ### When RLS Doesn't Apply **Admin functions** (requires explicit elevated permissions): - Database migrations (adding/removing tables) - Server-side analytics (aggregated data only) - Support debugging (only with your permission) **Developer Note**: Clear Mornings uses Supabase MCP tools for database operations. Even Claude (the AI helping build Clear Mornings) can only SELECT data via MCP - INSERT/UPDATE/DELETE require explicit human approval. --- ## Deleting Your Account ### What Gets Deleted **Immediately deleted**: - Your profile (email, name, photo) - All habits and completion data - All food logs and nutrition data - All exercise logs - All affirmation generators - Session tokens (logs you out everywhere) **Retained for 30 days** (for accidental deletion recovery): - Encrypted backup of your data (in case you change your mind) - After 30 days: Permanently purged from backups **Retained for 7 years** (legal requirement): - Payment history (if you were a paid subscriber) - Tax records (required by law) - Anonymized (name/email removed, only transaction IDs remain) ### How to Delete Your Account ``` 1. Log in to Clear Morning 2. Go to Settings > Account 3. Scroll to "Danger Zone" 4. Click "Delete Account" 5. Type your email to confirm 6. Click "Permanently Delete My Account" ``` **Before deleting, consider**: - Download your data export (Premium+ only, see below) - Cancel your subscription first (to avoid next billing cycle) - This action is IRREVERSIBLE after 30 days **No Undo After 30 Days**: If you delete your account and change your mind after 30 days, we CANNOT recover your data. The encryption keys are destroyed. ### Deleting Specific Data (Without Deleting Account) **Can be deleted manually**: - Individual habits: Go to habit > Settings > Delete Habit - Food logs: Swipe to delete on mobile, or click trash icon - Exercise logs: Same as food logs - Affirmation generators: Settings > Generators > Delete **Cannot be deleted individually** (account-level only): - Profile information (can be edited, not deleted) - Login credentials (reset password instead) - Subscription history (legal requirement) --- ## Exporting Your Data ### Who Can Export - **Basic tier**: No export access - **Premium tier**: No export access - **Premium+ tier**: Full export access **Why Premium+ only?** Data exports require significant server processing and storage. This is a premium feature to offset infrastructure costs. ### What Gets Exported **Included in export**: - ✅ All habits (names, categories, goals, creation dates) - ✅ All habit completions (timestamps, values, notes) - ✅ All food logs (items, calories, protein, timestamps) - ✅ All exercise logs (type, duration, intensity) - ✅ Affirmation generators (authors, primers, settings) - ✅ Profile data (name, email, timezone) - ✅ Subscription history (tier, dates, status) **NOT included**: - ❌ Passwords (for security reasons) - ❌ Session tokens (expired after export anyway) - ❌ Payment card data (stored by Stripe, not Clear Mornings) ### Export Formats **JSON** (machine-readable): - Best for importing into other apps - Developer-friendly - Preserves all data types **CSV** (spreadsheet-friendly): - Open in Excel, Google Sheets, Numbers - Separate CSVs for habits, food logs, exercise logs - Easier for manual analysis **PDF** (human-readable): - Formatted report with charts - Good for archival/printing - NOT machine-readable (can't import into other apps) ### How to Export Your Data ``` 1. Log in to Clear Mornings (Premium+ account required) 2. Go to Settings > Data & Privacy 3. Click "Export My Data" 4. Choose format (JSON/CSV/PDF) 5. Click "Generate Export" 6. Wait 30-60 seconds (you'll get an email when ready) 7. Download from link in email (expires in 24 hours) ``` **Export limitations**: - One export per 24 hours (to prevent abuse) - Exports expire after 24 hours (download promptly) - Maximum file size: 50 MB (contact support if you exceed this) --- ## Your Privacy Rights (GDPR/CCPA) If you're in the EU, UK, or California, you have additional rights: ### Right to Access - Request a copy of all data we have about you - Same as "Export Data" feature (but available to all tiers on request) ### Right to Rectification - Correct inaccurate data (via Settings > Profile) - Request changes if you can't edit directly ### Right to Erasure ("Right to be Forgotten") - Delete your account (see [Deleting Your Account](#deleting-your-account)) - Exceptions: Legal obligations (payment records for 7 years) ### Right to Data Portability - Export your data in machine-readable format (JSON) - Same as "Export Data" feature ### Right to Restrict Processing - Pause data processing while we investigate a complaint - Email: privacy@clearmorning.app ### Right to Object - Object to data processing for specific purposes - We'll stop unless we have compelling legal grounds ### Right to Withdraw Consent - You can revoke permissions (e.g., microphone access) anytime - Doesn't affect past data already collected **To exercise these rights**: - Email: privacy@clearmorning.app - Include: Your email, specific request, identity verification (we'll ask for your account password reset to confirm it's you) --- ## AI Data Policy ### Voice Transcription (OpenAI Whisper) **Data sent to OpenAI**: - Audio recording of your voice log (e.g., "I ate 200 grams of chicken") **How it's processed**: - Audio sent to Whisper API via HTTPS - Transcribed to text in real-time - Audio is NOT stored by OpenAI (per their API policy as of 2025) **What we store**: - The transcript ("I ate 200 grams of chicken") - NOT the audio ### Food Parsing (Anthropic Claude) **Data sent to Anthropic**: - Transcribed text (e.g., "I ate 200 grams of chicken") **How it's processed**: - Parsed into structured data: `{ name: "Chicken breast", calories: 330, protein: 62 }` - Processed in real-time - NOT used for AI training (per Anthropic's API policy as of 2025) **What we store**: - The structured data (food name, calories, protein) - NOT the original text (unless you added manual notes) ### Affirmation Generation **NOT sent to AI**: - Affirmations are pre-written by experts - AI is NOT used to generate affirmations - Your habit data does NOT leave Clear Mornings's database **How it works**: - You have a Recovery habit → We match you with recovery-focused authors - Rotation is deterministic (no AI needed) **AI Training Opt-Out**: Clear Mornings uses API endpoints with "no training" flags set. Your data is processed but NOT used to improve OpenAI or Anthropic models. --- ## Data Breach Protocol ### If We Detect a Breach **Within 72 hours**, we will: 1. ✅ Email all affected users 2. ✅ Notify relevant authorities (GDPR/CCPA requirement) 3. ✅ Publish a public incident report 4. ✅ Force password reset for all users (if auth data affected) **What we'll tell you**: - What data was accessed - How the breach happened - What we're doing to fix it - What you should do (e.g., change passwords elsewhere) **Our security practices**: - Penetration testing every 6 months - Automated vulnerability scanning (daily) - Security audits by third-party experts (annually) - Bug bounty program (report vulnerabilities for rewards) ### If You Suspect a Breach **Signs of compromise**: - Unexpected password reset emails - Login from unfamiliar devices - Habits/data you didn't create **What to do**: 1. **Change your password immediately** (Settings > Security) 2. **Log out of all devices** (Settings > Security > Log Out Everywhere) 3. **Email security@clearmorning.app** with details 4. **Check linked apps** (Settings > Connected Accounts) --- ## Questions About Privacy? - **Read our full Privacy Policy** - [Privacy Policy](/privacy) - **Read our Terms of Service** - [Terms](/terms) - **Email our Privacy Officer** - privacy@clearmorning.app - **General support** - support@clearmorning.app **Privacy Updates**: We'll email you 30 days before any major privacy policy changes. You can opt out by deleting your account during that window.