Privacy Policy

Last updated: 16 June 2025

Clya ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use Clya ("the Service").

1. Information We Collect

We collect the following categories of information:

Account data — your email address, username, and password (stored as a secure hash via Supabase Auth).
Profile data — your chosen avatar, study level, country, and any curriculum notes you provide.
Study activity — study sessions, XP earned, streaks, flashcard interactions, MCQ responses, and pod participation.
User content — notes, flashcard sets, and concept definitions you create within the Service.
Social data — friends you add, pods you join or create, and online presence signals (last-seen timestamps).
Usage data — feature interactions and AI call counts used to enforce plan limits.

2. How We Use Your Information

To operate and maintain the Service, including authentication, progress tracking, and pod features.
To personalise your experience (adaptive study recommendations, leaderboards, streaks).
To enable social features — friends can see your online status and study activity within shared pods.
To enforce usage limits and manage subscription plans.
To improve the Service through aggregate, anonymised analytics.

3. Third-Party Processors

We share data with the following trusted processors only to the extent necessary to operate the Service:

Supabase — database hosting and authentication. Data is stored in EU/US regions. Supabase Privacy Policy.
Anthropic (Claude) — AI content generation (e.g. MCQ options, explanations). Prompts contain only your study content — no personal identifiers. Anthropic Privacy Policy.
Stripe — payment processing for Pro subscriptions. Clya never stores payment card details. Stripe Privacy Policy.

4. Data We Do Not Share

We do not sell, rent, or trade your personal data to any third party for advertising or marketing purposes.

5. Cookies & Local Storage

We use browser local storage to keep you signed in (via Supabase Auth tokens). We do not use third-party advertising cookies. Google Translate may set its own cookies if you use the translation feature.

6. Social Features & Visibility

When you add friends or join a pod, other members can see:

Your username and avatar.
Your online/active status within the pod.
Your pod streak and study time contributions.

You can remove friends or leave pods at any time from within the app.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us data, please contact us at [email protected] and we will delete it promptly.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account via the Danger Zone in Settings, your profile, study data, notes, and pods are permanently deleted within 30 days.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (use the in-app account deletion, or email us).
Object to or restrict certain processing.

To exercise any of these rights, email us at [email protected].

10. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and row-level security in our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

Questions or concerns? Email us at [email protected].