Privacy Policy

Last updated: May 22, 2026

1. Information We Collect

1.1 Information You Provide

When you use Cleo, you may provide information during onboarding, profile setup, journaling, and support interactions, including:

• Profile details: name, age, city, career, gender, sexuality, goals, preferences, and topics to include or avoid
• Relationship details: information about close people, family members, children, or other people you choose to mention
• Personal notes and requests: free-text context, manifestation requests, story modification requests, gratitude entries, and manifestation journal entries
• Voice and playback preferences: selected voice, favorites, recently played content, and playback progress
• Feedback and support reports: messages and information you submit through troubleshooting or support features

1.2 Information Collected Automatically

• Account identifiers: an anonymous app user ID used to store your profile and content
• Device information: device type, operating system, app version, platform, and push notification token if you grant notification permission
• Usage data: app opens, onboarding progress, paywall interactions, story generation events, audio playback events, favorites, and feature interactions
• Subscription data: subscription status, product identifier, trial status, renewal/expiration status, and purchase events provided by Apple and subscription management services
• Technical data: service usage metrics, error logs, and latency data used to operate and improve the service

1.3 Photos, Camera, and Microphone

• If you choose to attach an image to a manifestation entry, the App may request access to your camera or photo library.
• Photo access is optional and used only for the feature you choose to use.
• The App does not use your microphone for core functionality.
• We do not access your contacts.

1.4 Information We Do Not Sell or Use for Advertising Tracking

• We do not sell your personal information.
• We do not use third-party advertising SDKs.
• We do not track you across other companies' apps or websites for advertising purposes.
• We do not collect precise GPS location.

2. How We Use Your Information

We use the information we collect to:

• Provide and personalize Cleo: generate AI-powered manifestation stories, affirmations, playlists, and audio based on your profile and requests
• Save and sync your content: store your stories, affirmations, journal entries, profile, favorites, and voice preferences so they remain available across sessions
• Process subscriptions: validate access to Premium features, process trials, purchases, renewals, cancellations, and restore purchases through Apple and subscription management services
• Send notifications: deliver story-ready and related app notifications if you grant permission
• Improve and secure the Services: understand usage patterns, fix bugs, monitor cost and reliability, prevent abuse, and improve app performance
• Provide support: respond to your inquiries and troubleshooting reports

3. AI-Generated Content

Cleo uses artificial intelligence to generate personalized stories, affirmations, profile summaries, and audio based on the information you provide. Please note:

• Your profile data and prompts may be sent to AI providers such as OpenAI to generate text content for you.
• Story text may be sent to text-to-speech providers such as ElevenLabs and, where configured, Google Cloud Text-to-Speech to generate audio.
• AI-generated content is unique to your experience and may be stored so you can access it later.
• We may use aggregated or anonymized usage data to improve the App and monitor quality.
• We do not use your personal data to train AI models that are shared with third parties.

4. Data Storage and Security

• Your profile, generated stories, affirmations, journal entries, preferences, subscription status, analytics events, and support requests may be stored in cloud infrastructure.
• Some data, such as cached preferences, playback progress, and locally selected images, may also be stored on your device.
• Generated audio files may be stored in cloud storage so they can be replayed without regenerating them.
• We use HTTPS/TLS encryption for data transmitted between the App and our servers.
• We use access controls and service credentials to limit access to production systems.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use trusted third-party service providers to operate Cleo. These providers process information only as needed to provide their services to us. Providers may include:

• Apple App Store: subscription purchase processing, payment management, and purchase restoration
• RevenueCat: Premium entitlement management, purchase status, and subscription lifecycle events
• Supabase: cloud database, authentication, and storage for user profiles, generated content, preferences, and app data
• OpenAI: generation of personalized stories, affirmations, profile summaries, and related text content
• ElevenLabs: text-to-speech audio generation for stories you choose to play
• Google Cloud Text-to-Speech: optional fallback text-to-speech audio generation where configured
• Expo / Apple Push Notification service: delivery of notifications if you grant permission
• Render: backend API hosting and service operation
• Resend: support message delivery

These service providers have their own privacy practices governing their processing of information.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of your personal data
• Correction: update or correct inaccurate information
• Deletion: request deletion of your personal data (available via "Delete Account" in Settings)
• Portability: request your data in a portable format
• Opt-out: opt out of certain data processing activities where applicable

For EU/UK Users (GDPR)

We process your data based on: (a) your consent, (b) performance of a contract by providing the Services, and (c) our legitimate interests in improving and securing the App. You have the right to withdraw consent at any time and to lodge a complaint with your local data protection authority.

For California Users (CCPA/CPRA)

You have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, submit a request through Cleo Support or contact privacy@cleo.app.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. When you delete your account, we will delete or de-identify personal data within 30 days, except where retention is required by law, needed for fraud prevention, payment records, dispute resolution, or legitimate business operations.

8. Children's Privacy

Cleo is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We use appropriate safeguards required by applicable data protection laws for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the App after changes constitutes acceptance of the updated policy.

• May 22, 2026: Added named AI, text-to-speech, subscription, hosting, storage, notification, and support providers; added privacy request contact.
• May 19, 2026: Published App Store review privacy policy update.

11. Contact Us