Privacy Policy

Our approach

CLRTY is a men's wellbeing community. We collect the minimum information needed to run the Service, we never sell personal data, and we share aggregate, not individual, wellbeing signals with partner organisations.

What we collect

• Account data, name, email, password (hashed), sign-in provider.
• Profile data, display name, city, postcode area, interests, bio.
• Community data, posts, comments, meetups you host or join, direct messages, memorial entries and any photos or files you attach.
• Wellbeing data, your daily feeling check,ins (Lifted, Steady, Okay, Heavy, Low), streaks, saved or completed Wellbeing Hub resources. This is self,reported and is health,related information.
• Activity data, walks and runs you choose to track, including distance, duration and the GPS route. Precise location is only read while the tracker is running, and never in the background.
• Safety data, optional phone number, emergency contact and “safe person” details you add, plus any reports or blocks you submit.
• Enquiry data, partnership enquiries submitted via our website.
• Technical data, device, browser and IP address used to secure the Service, plus first,party usage events (which screen was opened) and crash reports (error message, page address, device description) used to fix faults.

Membership status only. We never see or store your card details, and we do not collect your contacts, calendar, browsing history or biometric data.

How we use it

• To provide and secure the Service (account, sign-in, messaging, meetups).
• To surface nearby people and meetups based on your postcode area.
• To show you your own check,in streak, and, if you switch it on, to nudge the people in your Circle when you log several heavy or low days in a week.
• To trace and save a walk or run while you have the tracker open.
• To send service emails (sign-in, password reset, meetup activity).
• To respond to enquiries and partnership requests.
• To keep the community safe and enforce our Terms.
• To diagnose crashes and understand which parts of the app are used, using our own systems only.

Tracking and advertising

We do not track you. CLRTY contains no advertising, no analytics SDKs from other companies, no advertising identifier, and no cross-app or cross-site tracking. We do not sell personal data and we never share it with data brokers or ad networks. Usage and crash information stays inside our own backend.

Health information and safety

CLRTY is a peer,support and wellbeing community. It is not a medical service and does not provide diagnosis, treatment or clinical advice. Your check,ins are not a clinical record, are not shared with employers, insurers or partner organisations, and are visible only to you, unless you turn on Circle nudges. We do not connect to Apple Health, Google Fit or Health Connect. If today is hard, contact Samaritans on 116 123, NHS 111, or 999 in an emergency.

Legal basis (UK GDPR)

We rely on your consent (creating an account), contract (providing the Service you signed up for), and legitimate interests (keeping the community safe, preventing abuse).

Sharing

We use trusted providers to run CLRTY: hosting and database (Supabase / Lovable Cloud), email delivery (Lovable Emails), authentication (Supabase Auth, Google Sign-in, Sign in with Apple), and payment processing (Stripe). These providers process data on our instructions. We never share individual data with employers, universities or partner organisations.

Payments

CLRTY membership is processed by Stripe. When you subscribe we share your email address and a customer identifier with Stripe so they can charge your payment method. Card details are entered directly into Stripe's PCI-compliant checkout and are never seen or stored by CLRTY. Stripe may act as the merchant of record for your transaction, in which case they are the data controller for billing and tax purposes and their privacy policy applies to payment data. We retain a record of your subscription status and billing history for accounting and legal compliance.

Your rights

You can access, correct or delete your account data at any time from Your Details in the app (hqclrty.co.uk/app/me). Deleting your account cancels any active membership and removes your profile, posts, messages, photos, check,ins and activity history. You can also request this by emailing clrtyhq@gmail.com. UK/EU residents may also complain to their local data-protection authority (in the UK, the ICO).

Retention

We keep your account data while your account is active. When you delete your account we remove personal data within 30 days, except where retention is required for safety, legal or fraud-prevention reasons.

• Account and profile data, kept until you delete your account, then erased within 30 days.
• Community posts, messages and photos, deleted with your account; copies quoted or reported by other members may be retained for up to 12 months for safety review.
• Wellbeing check,ins and activity routes, deleted with your account.
• Safety reports and blocks, kept for up to 24 months to protect other members.
• Billing records, kept for 7 years where required by tax and accounting law.
• Crash and error logs, kept for 90 days.

You can request deletion at any time from hqclrty.co.uk/delete-account, with no need to sign in first.

How we protect your data

Data is encrypted in transit (HTTPS/TLS) and encrypted at rest by our hosting provider. Access to the database is protected by row-level security, so members can only read their own data and the community content shared with them. Passwords are stored as salted hashes and are never visible to us. Card details never touch our servers. Access to production systems is limited to the CLRTY operator.

Children

CLRTY is for adults aged 18 and over. We do not knowingly collect data from children. If we learn that an account belongs to someone under 18 we delete it.

International transfers

CLRTY is operated from the United Kingdom. Some providers (for example Stripe and our hosting provider) may process data outside the UK/EEA. Where that happens the transfer is covered by Standard Contractual Clauses or an equivalent safeguard.

Cookies

We use strictly-necessary cookies for authentication and to keep you signed in. We do not use advertising or third-party tracking cookies.

Contact

Data controller: CLRTY. Email clrtyhq@gmail.com.

We respond to privacy and deletion requests within 30 days. If this policy changes we update the date at the top of this page and notify members in-app or by email where the change is material.