Privacy Policy

1. Introduction

This Privacy Policy describes how Troy Di Lello ("Clovie," "we," "us," or "our") collects, uses, and shares information about you when you use the Clovie mobile application (the "Service"). By using Clovie, you agree to the collection and use of information in accordance with this policy.

Clovie is a wellness companion app that provides supportive conversations, mood tracking, and self-care features. Clovie is not a medical service, therapy service, or emergency service. If you are in crisis or need immediate help, please call or text 988 (Suicide & Crisis Lifeline) or call 911.

Back to top

2. Information We Collect

We collect information you provide directly, information collected automatically as you use the Service, and information from third-party services.

2.1 Information You Provide

• Account information: your email address, used for authentication and account recovery.
• Onboarding responses: answers you provide during Clovie's initial intake process, which may include information about your wellbeing goals, life circumstances, and preferences.
• Conversations: messages you send to and receive from Clovie during chat sessions.
• Wellness activity: your interactions with pillar features, including mood check-ins, streak data, and completion states.
• Preferences: settings such as reminder times, notification preferences, and quiet hours.

2.2 Information Collected Automatically

We collect the following information automatically when you use Clovie:

• Device information: device model and operating system version, collected only when an error occurs for crash reporting purposes.
• App information: the Clovie app version you are using.
• Timezone: your device's timezone, sent with API requests so content is displayed in your local time.
• IP address: used for rate limiting and to prevent abuse. We do not store IP addresses with your account identity for long-term use.
• Usage data: which features you access and timestamps of interactions.

We do not collect:

• The Apple Advertising Identifier (IDFA)
• The Android Advertising ID (AAID)
• The Apple Vendor Identifier (IDFV)
• Precise location (GPS coordinates)
• Information about other apps on your device
• Push notification tokens — reminders are scheduled on your device, not sent through a push notification service

2.3 Information We Do Not Collect

• We do not collect payment information (Clovie is currently free).
• We do not collect location data beyond what your device automatically provides for service delivery.
• We do not access your contacts, photos, or other apps unless you explicitly grant permission for a specific feature.

2.4 Nutrition and Food Data

If you use Clovie's nutrition features, we collect the following:

• Nutrition profile: your height, weight, date of birth, sex at birth (or "prefer not to say"), activity level, and goal (maintain, lose, or gain weight). If the date of birth you enter shows you are under 13, we do not create a nutrition profile and do not store that date.
• Calorie target: we calculate a daily calorie target from your nutrition profile using the Mifflin-St Jeor equation, which estimates your basal metabolic rate and total daily energy expenditure. We store the target with your profile. We do not set a target below 1,200 kcal per day if you answered female, or below 1,500 kcal per day if you answered male or "prefer not to say." Users under 18 receive a maintenance target only, with no calorie deficit or surplus.
• Meal logs: the meals you log, including each item's food name, quantity, calories, and macronutrients (protein, carbohydrates, and fat); the meal type (breakfast, lunch, dinner, or snack); the time of the meal and when it was logged; and how each item was added (food database search, barcode scan, manual entry, AI estimate from a description, or photo).
• Food search queries: the text you type when you search for a food. Our servers send this text to the USDA FoodData Central API. We also store the search text and its results in a shared cache that is not linked to your account.
• Barcodes: the barcode numbers you scan. Our servers send the barcode number to the Open Food Facts API. We also store the barcode number and its result in the same shared cache, which is not linked to your account.
• Meal descriptions for AI estimation: the text you type to get a calorie estimate (for example, "chicken curry and rice"), along with any portion hint you add. Our servers send this text to Anthropic's Claude Haiku model, which returns an itemized estimate. We do not store the description text in our logs. For operational monitoring, we log only the length of the text, whether a portion hint was provided, token counts, estimated cost, the outcome and number of items returned, and a one-way hashed version of your account identifier.
• Meal photos: when you use photo analysis, the photo is taken in the app, resized on your device, sent to our servers, and forwarded to Anthropic's Claude model to identify the foods in it. We do not store the photo on our servers or in our logs. The temporary resized image file on your device is deleted as soon as the photo has been prepared for sending. Anthropic's handling of the photo is described in Section 5.1.

Back to top

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Personalize your experience with Clovie based on your onboarding responses and interaction history.
• Enable Clovie to have context-aware conversations that reference what you have shared in previous sessions.
• Send reminders and notifications you have opted into.
• Provide nutrition features, including calculating your daily calorie target, logging and summarizing your meals, estimating calories and macronutrients from your typed descriptions, and identifying foods in photos you choose to analyze.
• Detect and prevent misuse, fraud, and safety-critical situations, including automated screening for crisis-related content.
• Communicate with you about the Service, including responding to your inquiries and providing customer support.
• Comply with legal obligations and enforce our Terms of Service.

Back to top

4. Safety and Crisis-Related Information

Clovie includes automated screening designed to identify messages that may indicate a user is in crisis. When such content is detected, Clovie is designed to display information about the 988 Suicide & Crisis Lifeline and other emergency resources rather than continue normal conversation.

When crisis-related content is detected, we may record that this occurred, along with a timestamp, in order to prevent misuse of our service and to improve our safety systems. We handle this information with elevated confidentiality and do not use it for any purpose other than safety operations.

Back to top

5. How We Share Your Information

We share information with third parties only in the limited circumstances described below.

5.1 Service Providers

We work with third-party service providers who help us operate Clovie. These providers have access to information necessary to perform their functions but are contractually obligated to protect it and use it only for the purposes we specify:

• Supabase — provides database and authentication infrastructure. This includes storing your nutrition profile, your meal logs, and the shared food lookup cache.
• Anthropic — provides the Claude large language model that generates Clovie's conversational responses. Your messages are sent to Anthropic's API to generate responses. Under our standard API agreement, conversation content is not used to train Anthropic's models and is retained only as required by Anthropic's standard retention policies (up to 30 days for abuse monitoring). For nutrition features, Anthropic also receives the meal descriptions you submit for calorie estimation and the meal photos you submit for food identification, through the same API and under the same terms. Anthropic's privacy policy: https://www.anthropic.com/privacy
• Railway — provides application hosting infrastructure.
• Expo — provides the app development framework and on-device scheduling for reminders you have opted into. Expo does not receive your reminder content or notification history.
• Sentry — provides crash reporting for the mobile app only. When an error or crash occurs, Sentry receives a one-way hashed version of your account identifier (not your email), your device model, and your operating system version. We filter error reports before sending to exclude personal information, chat content, and expected responses (including crisis-related interactions). Native crashes may include technical details such as the API path that failed. Sentry does not receive your IP address, screenshots, or your interactions outside of error moments.
• PostHog — may be used to understand how features are used and to measure referral activity. When PostHog is active, it may receive information about which features you interact with, session timestamps, and anonymized device information. PostHog does not receive conversation content.

For nutrition features, our servers also send limited information to two public food databases. These are public data sources, not contracted service providers. The requests come from our servers and do not include your account information or your IP address:

• USDA FoodData Central (U.S. Department of Agriculture) — receives the text of your food searches and returns matching foods from its public nutrition database.
• Open Food Facts (a non-profit open database project based in France) — receives the barcode numbers you scan and returns product information. Open Food Facts' privacy policy: https://world.openfoodfacts.org/privacy

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

5.3 Business Transfers

If Clovie is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share information for other purposes when you provide your consent.

5.5 What We Do Not Do

• We do not sell your personal information.
• We do not share your information with advertisers.
• We do not use your conversations with Clovie to train third-party AI models.

Back to top

6. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. When you delete your account, we begin the process of deleting your data as follows:

• Account information and conversations: deleted from our active database immediately upon account deletion. Deletion is permanent and cannot be undone.
• Nutrition profile: kept until you delete it in Settings → Nutrition → Delete nutrition profile, or until you delete your account. Deleting the nutrition profile removes it from our active database immediately. It does not remove your logged meals.
• Meal logs: kept until you delete your account, at which point they are deleted from our active database along with your nutrition profile.
• Meal photos: not retained on our servers. They are processed in real time and discarded when the request completes.
• Meal descriptions sent for AI estimation: the text is not retained in our logs. Only the metadata described in Section 2.4 is logged.
• Shared food lookup cache: food search text and barcode numbers are stored without any link to your account, so they are not removed when you delete your account.
• Backup copies: may persist in encrypted backups for up to 90 days after account deletion, after which they are purged as part of our routine backup rotation.
• Aggregated or anonymized data that does not identify you: may be retained indefinitely for analytics and Service improvement.
• Information we are legally required to retain: kept for the duration required by applicable law.

Back to top

7. Data Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security review. However, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of your information.

Back to top

8. Your Rights and Choices

You have the following rights regarding your information:

8.1 Access and Portability

You can request a copy of the personal information we hold about you by contacting us at the address in Section 12. This includes your nutrition profile and meal logs.

8.2 Correction

You can update most of your account information directly in the app. For other corrections, contact us.

8.3 Deletion

You can delete your account at any time using the "Delete Account" option in Settings. This begins the deletion process described in Section 6.

You can delete your nutrition profile at any time in Settings → Nutrition → Delete nutrition profile. This removes your height, weight, date of birth, sex, activity level, goal, and calorie target. It does not remove your logged meals. Deleting your account removes your nutrition profile and all of your logged meals.

8.4 Notification Choices

You can manage push notifications through your device settings and in-app notification preferences.

8.5 California Residents

If you are a California resident, you may have additional rights under California law, including the right to request information about the categories of personal information we collect and disclose. To exercise these rights, contact us at the address in Section 12.

Back to top

9. Children’s Privacy

Clovie is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with information, please contact us so we can take appropriate action.

Users between 13 and 17 should have parental or guardian consent to use Clovie. We recommend that parents review this Privacy Policy with their teens before permitting use of the Service.

Back to top

10. International Users

The Service is distributed only through the United States App Store and Google Play region. We do not actively target users outside the United States. Clovie is operated from the United States, and your information is stored and processed in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. Data protection laws in the United States may differ from those in your country of residence.

This includes the nutrition features: food searches are processed by the USDA and meal descriptions and photos are processed by Anthropic, both in the United States. One exception is barcode lookups, which are sent to Open Food Facts, a project based in France, as described in Section 5.1.

Back to top

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the Effective Date above and, where appropriate, by providing notice through the Service or by email. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

Back to top

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Back to top