Legal

Privacy policy

Last updated: February 24, 2026

1. Introduction

At Clatri, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services ("the Service").

Clatri is an agentic AI assistant designed to help you manage your money, health, and personal life simply and without friction. The AI agent acts autonomously on your behalf to organize your finances, track your health, and boost your personal productivity. Given the sensitive nature of this information, we are committed to protecting your privacy and handling your data with the utmost care.

2. Information We Collect

2.1 Information You Provide

When you use Clatri, you may provide us with:

  • Account information: Name, email address, and authentication data (through Google or Apple Sign-In)
  • Financial data: Income, expenses, account balances, transactions, and financial goals you choose to track
  • Health data: Medical history, symptoms, medications, health metrics, and wellness information you choose to record
  • Personal content: Journal entries, tasks, notes, reminders, and calendar events
  • Media files: Photos, documents (such as receipts or invoices), and voice messages you upload

2.2 Automatically Collected Information

  • Device information: Device type, operating system, unique device identifiers
  • Usage data: Features used, interaction patterns, and app performance metrics
  • Log data: Access times, error logs, and diagnostic information

2.3 Information from Automated Services

When you connect external services or enable automated features within Clatri, we may collect:

  • Bank transactions: Transaction data obtained through automated reading of connected financial accounts
  • Connected service data: Information retrieved from third-party services you authorize Clatri to access

These automated services require your initial setup and operate continuously on your behalf once activated.

3. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Process your requests, store your data, and deliver personalized insights through our AI agent
  • Improve the Service: Analyze usage patterns to enhance features and user experience
  • Aggregate analytics: Analyze anonymized and aggregated data across the platform to produce global behavior statistics and insights that help us improve the Service and offer value to our users
  • Automated services: Automatically read and process data from connected services (such as bank transactions) to keep your records current
  • Send notifications: Medication reminders, task alerts, payment due dates, and other notifications you've configured
  • Customer support: Respond to your inquiries and troubleshoot issues
  • Security: Detect and prevent fraud, abuse, and security incidents

4. Data Security

We implement robust security measures to protect your personal information:

  • Row Level Security (RLS): Your data is isolated at the database level. Only you and users with whom you share entities can access the associated records.
  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest
  • Secure authentication: We use industry-standard OAuth 2.0 through Google and Apple Sign-In
  • Infrastructure: Our services are hosted on Supabase with enterprise-grade security

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

5. Administrative Access to Data

Clatri administrators may access user data for the following purposes:

  • System analysis and improvement: To identify issues, optimize performance, and enhance the Service
  • Global statistics: To generate aggregated, anonymized statistics about user behavior that help us understand usage patterns and improve the platform
  • Debugging and support: To investigate and resolve technical issues

This access is limited to authorized personnel and is conducted in accordance with strict internal protocols. Clatri commits to never selling, trading, or sharing user data for commercial purposes with third parties. Administrative access is solely for improving the Service and ensuring its proper operation.

6. AI Processing and Third-Party AI Services

Clatri uses artificial intelligence to understand your requests, provide insights, and execute actions on your behalf. We obtain your explicit consent before sending any personal data to third-party AI services. This consent is obtained when you accept our Terms of Service and Privacy Policy, and—when applicable—through a consent screen before your first use of the chat feature.

6.1 What Data We Send to Third-Party AI Services

When you use the chat, voice input, or document features, the following data may be transmitted to third-party AI providers for real-time processing:

  • Your messages: The text of your chat messages and requests
  • Voice transcriptions: Audio recordings of voice notes are sent for transcription (speech-to-text) and then processed as text
  • Images and documents: Photos, receipts, invoices, and other files you upload for analysis or extraction of information
  • Conversation context: Recent chat history (your prior messages and our responses) to maintain conversation continuity
  • Entity context: Relevant summaries of your data—such as account names, transaction categories, or health metrics—when needed to answer your questions or execute actions (e.g., "How much did I spend on groceries?" requires access to your expense records)

This data is sent solely for real-time AI processing. It is not stored, retained, or used by these third-party providers to train their models, in accordance with their respective data processing commitments.

6.2 Who Receives Your Data

Your data is processed by external artificial intelligence service providers (for example, companies that offer large language models such as GPT, Claude, Gemini, and similar technologies). We select providers that commit, in their terms and privacy policies, to not using API data to train or improve their models. Data is processed in real time and is not retained by these services for training purposes.

6.3 How We Collect and Use This Data

  • Collection: Data is collected when you send a message, record a voice note, or upload a file in the app.
  • Transmission: Data is sent from our servers to the applicable third-party AI provider over encrypted connections.
  • Use: The provider processes the data to generate a response or perform an action, and returns the result to our systems. Your data is not used for any purpose other than serving your request.
  • Storage: Your full data remains stored in our infrastructure (Supabase). Only the subset of data necessary for each request is sent to AI providers, and that subset is not persistently stored by them.

6.4 Your Consent

Before your personal data is sent to any third-party AI service, we obtain your permission by:

  1. Requiring acceptance of our Terms of Service and this Privacy Policy when you create an account
  2. Presenting a consent screen before your first use of the AI chat (when applicable), which explains that your messages and related data will be processed by third-party AI providers
  3. Allowing you to decline—if you do not consent, you may choose not to use the chat or AI-powered features

You may withdraw consent at any time by ceasing to use the chat and AI features. Note that features that rely on AI will not function without this processing.

7. Data Sharing

We do not sell, trade, or monetize your personal information. We will never provide your individual data to third parties for their commercial benefit. We may share your data only in the following circumstances:

  • Entity sharing: With other Clatri users you have explicitly granted access to through the entity sharing feature
  • Third-party AI providers: With external artificial intelligence service providers (described in Section 6.2) for real-time processing of your messages, voice, documents, and context. This sharing occurs only with your explicit consent and is necessary to provide the AI features. These providers are contractually and by policy committed to not using your data to train their models.
  • Service providers: With trusted partners who help us operate the Service (hosting, analytics). These partners process data on our behalf and are bound by data processing agreements.
  • Legal requirements: When required by law or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • With your consent: When you explicitly authorize sharing

8. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide you the Service. Clatri allows you to delete your data instantly and download your information with ease directly from the app: in Settings you will find options to export your data or delete your account. If you delete your account, all your personal data is permanently and immediately deleted from our systems. Clatri does not retain any user data after account deletion, except where required by applicable law.

9. Experimental Nature of the Service

Clatri is an experimental project under active development. While we are committed to providing a reliable service, you acknowledge that:

  • The AI agent may occasionally produce errors in its responses or actions
  • The Service may experience interruptions or downtime
  • There is a possibility of data loss despite our best efforts to prevent it

Clatri commits to continuously improving reliability, implementing safeguards, and transparently communicating any issues that may affect your data or experience.

10. Consent for Data Collection and Processing

AI and third-party AI services: Before we send any personal data (messages, voice, documents, context) to third-party AI providers, we obtain your explicit consent—through acceptance of our Terms and Privacy Policy, and when applicable, a consent screen before your first use of the chat. See Section 6 for full details.

Other features: By using other features of Clatri, you consent to the data collection and processing associated with those features. This includes but is not limited to:

  • Automated reading and categorization of bank transactions when you connect financial accounts
  • Automated health tracking when you record medical information
  • Storage and use of your data within our infrastructure to power AI-powered analysis and actions

Each service activated by the user implies acceptance of the specific data processing required for that service to function. You may withdraw consent for AI features by ceasing to use the chat and AI-powered capabilities. For other features, you may withdraw consent by deactivating them within the app.

11. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Delete your data instantly (including account deletion) from Settings in the app
  • Export: Download your information with ease from Settings in the app
  • Restriction: Request restriction of processing
  • Objection: Object to certain types of processing

You can exercise the rights to deletion and export directly in the app. For other rights, contact us at contacto@gurwi.com.

12. Permissions We Request

The Clatri app may request the following device permissions:

  • Camera: To take photos of documents, receipts, or for health tracking photos
  • Microphone: To record voice messages for the AI assistant
  • Photo Library: To select and upload images from your gallery
  • Notifications: To send medication reminders, task alerts, and payment notifications

These permissions are only used for their stated purposes and can be revoked at any time through your device settings.

13. Children's Privacy

Clatri is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly.

14. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: