Privacy Policy

• Account details — your email address, used to sign you in with a one-time code. We don't store passwords.
• Household & members — the names, colours, roles, characters/avatars and optional birthdays you add for the people in your household.
• Your content — the events, tasks, routines, chores, meal plans, recipes, lists, rewards, notes and photos you create or upload.
• Connected calendars — if you connect Google, Microsoft or Apple/iCloud, we access the calendar events, tasks and reminders you authorise so they appear in Clan, and (where you enable it) write back events and tasks you create in Clan.
• Photos & images — photos you upload for the family slideshow or to generate a character; these are stored in our file storage.
• Payment information — if you subscribe, our payment processor (Stripe) handles your card details. We never see or store full card numbers; we keep only a customer/subscription reference and your plan status.
• Notifications — if you enable reminders, your browser's push subscription so we can send them.
• Technical data — standard server logs (such as IP address and request data) needed to run, secure and debug the service.

We use your information only to provide and improve Clan for you and your household: showing and organising your calendar, syncing the accounts you connect, sending the reminders and briefings you enable, running the AI features you choose to use, processing your subscription, keeping your data available across your devices, and keeping the service secure. We do not sell your personal information, and we do not use it for advertising or ad profiling.

Some optional features use Google's Gemini API to help you — for example turning a photo of a school notice into events, drafting a weekly briefing, answering the in-app assistant, planning meals, or generating a cartoon character from a photo you upload.

When you use one of these features, the relevant content — such as the text or photo you submit, or the event details needed to generate a summary — is sent to Google's Gemini API to produce a result shown only to you. This processing is done to provide the feature you requested. Content sent to the Gemini API in this way is not used to train or improve AI models. AI output can be imprecise, so please review anything it suggests before relying on it.

You choose whether to connect a Google account, and you can disconnect it at any time. When you do, we request only the calendar and tasks access needed for the sync features, store the resulting access credentials encrypted, and never expose them to your browser or to any other household.

Clan's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google Calendar and Google Tasks data solely to provide and improve the user-facing calendar and task features within Clan; we do not transfer this data to others except as necessary to provide those features, comply with applicable law, or as part of a merger or acquisition with appropriate protections; we do not use it for advertising; and we do not allow humans to read it except with your consent, for security or debugging, or where required by law.

If you connect Microsoft (Outlook) or Apple/iCloud, we access the calendars, tasks and reminders you authorise on the same basis: only to provide the sync features, with credentials encrypted at rest, and removable by disconnecting the account. Your use of those services also remains subject to Microsoft's and Apple's own terms and privacy policies.

We don't sell your data. We share it only with a small set of trusted service providers that process it on our behalf so Clan can work:

• Supabase — database, authentication and file/photo storage (hosted in Sydney, Australia).
• Fly.io — application hosting (Sydney, Australia).
• Stripe — payment processing for subscriptions.
• Google (Gemini API) — only for the AI features described above, and only for content you submit to them.
• Open-Meteo — weather forecasts (based on a coarse location derived from your household time zone, not precise device location).
• Email delivery — to send sign-in codes and notifications.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety and security of our users and the service.

Your household data is stored in Australia (Supabase and Fly.io, Sydney region). Some providers above (for example Stripe and Google) may process limited data overseas under their own safeguards. By using Clan you consent to this processing.

We protect your data with encryption in transit (HTTPS), encryption at rest for connected-account credentials, database access rules that isolate each household's data, and least-privilege access. No system is perfectly secure, but we take reasonable steps to protect your information and to keep credentials from ever reaching your browser or another household.

We keep your information for as long as your household is active. You can edit or delete your content at any time, and disconnecting a linked account removes the data Clan pulled from it. To delete your household and all associated data, email hello@heystarky.com.au — we'll action it, subject to any records we must keep for legal or accounting reasons.

Clan is designed for a parent or guardian to organise their household. Any information about children is added and controlled by the adult who manages the household. Clan is not intended for children to create their own independent accounts, and we don't knowingly collect data directly from children.

You can access, correct or delete your information, disconnect any linked account, and opt out of notifications at any time. If you're in Australia and have a concern we can't resolve, you may contact the Office of the Australian Information Commissioner (OAIC). To exercise any right, email hello@heystarky.com.au.

We use a secure cookie to keep you signed in, and your browser's local storage to remember preferences such as your calendar view. We don't use advertising or cross-site tracking cookies.

We may update this policy from time to time; we'll revise the date above when we do, and for significant changes we'll aim to give you notice. Continued use of Clan means you accept the current version.