Privacy Policy

Who we are

Claritii is a study platform built for high school students (Year 11 - 12). We are a small team based in Australia. This policy explains how we collect, use, and protect your personal information.

Note for users under 18: Most Claritii users are minors. If you are under 18, please review this policy with a parent or guardian. We do not require your consent to process data beyond what is necessary to provide the service. If you have concerns about a minor's data, contact us at support@claritii.com. Jordan should double-check this policy against the Australian Privacy Act and any local minors'-consent requirements before relying on it.

What we collect and why

We collect data that is necessary to provide and improve the service:

• Account data (email, name, auth provider ID) - used for authentication via Supabase and Google OAuth. Required to create and manage your account.
• Study content (uploaded files, flashcards, quiz answers, notes) - stored in Supabase and used to personalise your roadmap, generate AI study content, and track mastery. You own this data.
• Payment data - processed by Stripe. We do not store credit card numbers or bank details. Stripe receives your billing info, subscription plan, and transaction history.
• Usage analytics (page views, feature usage, session data) - collected via PostHog (EU-hosted) to understand how the platform is used and improve it. This is opt-in via our cookie banner.
• Error logs (error messages, stack traces, browser info) - sent to Sentry (EU-hosted) to help us fix bugs and improve reliability.
• AI input data (your messages, uploaded content, quiz responses) - sent to OpenRouter and the underlying AI models (Qwen, DeepSeek, Mistral, and Gemini) for processing. Zero Data Retention (ZDR) is enabled - your content is not used for model training. Email addresses, phone numbers, and credit card patterns are redacted from your messages before AI processing.
• Cookies - essential cookies for authentication and session management. Analytics cookies are set only with your consent.

Service providers (processors)

We use the following third-party services to operate Claritii:

• Supabase (USA) - authentication, database, file storage. Your account data, study content, and app data are stored here.
• Google OAuth (USA) - optional social login. Only your email and name are shared with us.
• Stripe (USA) - payment processing. Handles all billing and subscription management.
• PostHog (EU, hosted at eu.posthog.com) - product analytics. Usage data with your consent.
• Sentry (EU, hosted at *.ingest.de.sentry.io) - error monitoring. Error logs and crash reports.
• OpenRouter - AI model gateway. Routes requests to Qwen (qwen3.5-flash), DeepSeek (deepseek-v4-flash), Mistral (mistral-small), and Gemini (gemini-3.1-flash-image). Zero Data Retention is enabled.

Data retention

We retain your account data and study content for as long as your account is active. If you delete your account, we delete or anonymise your data within 30 days, except where we are required to retain it for legal or billing purposes (typically 7 years for transaction records).

Analytics data in PostHog is retained for 12 months. Error logs in Sentry are retained for 90 days.

Your rights

You have the right to:

• Access your data - request a copy of all data we hold about you
• Export your data - download your study content and account info
• Delete your data - delete your account and all associated data
• Withdraw consent - opt out of analytics cookies at any time

To exercise any of these rights, email support@claritii.com. We will respond within 30 days.

Cookies

We use essential cookies for authentication and session management. With your consent, we set analytics cookies via PostHog to understand usage patterns. You can accept or decline analytics cookies using the banner that appears on your first visit. Your choice is stored in your browser's local storage.

Contact

For privacy questions, data requests, or concerns: support@claritii.com.