Privacy Policy

Last updated: August 25, 2026

This policy covers the Claro Care app and this website.

What Claro collects

Claro stores what you choose to give it: the messages you type, the symptoms, medications, activities, tasks, appointments, goals, and memories drawn from them, and — only if you connect them — summary health readings from Apple Health (heart rate, sleep, HRV), coarse weather context from your approximate location, and events from your calendar. If you sign in with Apple, Claro stores the identifier Apple provides and, if you share it, your email.

How it's protected

Your free-form content is encrypted on your device before upload, under a key held in your iCloud Keychain. Claro's servers store that content encrypted. On-device data is protected by iOS file protection. When you delete your account, the server key material protecting your content is destroyed immediately, making the content unrecoverable.

How it's used

Your data is used for one thing: showing you your own patterns. Care readings are generated by a language model running in attested confidential computing, where your data is decrypted only inside the secured environment for the duration of the generation. Claro does not sell your data, does not show ads, and does not use your health data for advertising or unrelated purposes.

Apple Health

Health data is read only with your permission, is used to attach context to what you log and to your Care readings, and is never written back to Apple Health. Health data is never used for marketing or shared with third parties.

Who else handles it

Claro runs on Cloudflare, stores records in a managed Postgres database (Neon), and generates Care readings inside an attested confidential-compute enclave operated by Tinfoil. Apple delivers push notifications and provides Sign in with Apple. Your free-form content is stored encrypted; to write a reading the server decrypts it in memory and passes it to the enclave over an encrypted channel, and it is never written back unencrypted. Claro does not share your data with anyone else.

How long it's kept

Claro keeps your record until you delete it. Deleting an entry removes it; deleting your account destroys the key material protecting your content immediately, making it unrecoverable, and removes your account.

Your controls

You can export everything Claro holds about you from Settings, delete individual entries and memories, and delete your entire account at any time — deletion is immediate and permanent. Notifications, Apple Health, location, and calendar access are each optional and controlled by you.

This website

The claro.care website is a marketing page. We don't use cookies, analytics, tracking pixels, or any third-party scripts to collect information about visitors. If you email us, we receive your message through standard email. The site is hosted on Cloudflare Pages, which may keep server access logs as part of standard hosting infrastructure.

Changes to this policy

This policy may change as the product develops. Material changes are surfaced in the app, and the date at the top of this page always reflects the current version.

Contact

Questions about this policy or your data: [email protected]