How Piaffo handles personal data.

1. Scope

This Privacy Policy explains how Clarity App Systems, s.r.o. collects, uses, stores, shares, and protects personal data when you use our websites, mobile applications, subscription features, support channels, and related digital services.

If a specific service or feature provides a separate privacy notice, that separate notice supplements this policy for that service or feature.

2. Data We Collect

Account and identity data

When you create or use an account, we may process your email address, account identifier, username, and other account credentials required for authentication. Password handling is performed through our authentication infrastructure and we do not store your password in plain text.

Profile and personalization data

We may process profile information you choose to provide, such as a username, onboarding goals, riding level, subscription status, an optional profile photo, and an optional home-screen background image.

Support communications

If you contact support through the app or by email, we may process your support subject, support message, account identifier, contact email, timestamps, delivery status, and related support metadata required to respond, retry failed delivery, and maintain a record of the support request.

Subscription and purchase data

If you purchase or restore premium access, we may process subscription status, entitlement status, store account identifiers, transaction-related metadata, and expiration data required to verify access. Payment card data is handled by the applicable platform provider, such as Apple, and is not received by us in full.

Diagnostics and operational telemetry

We may process crash reports, performance data, app version, device and operating system metadata, and limited product-interaction event data used to diagnose failures, investigate abuse, and maintain service reliability. In production, authenticated crash and diagnostic reports are linked to the internal account user ID so we can isolate and fix account-specific failures.

Saved library and product interaction data

We may process favorites, saved-library selections, restore actions, upgrade taps, and similar product-interaction data linked to your account so the app can keep your library state in sync and review feature reliability.

Voice Coach microphone and speech recognition

If you start Voice Coach, Piaffo requests microphone and speech-recognition access only for foreground command handling. On supported iOS devices, Voice Coach requires on-device speech recognition before spoken confirmation is enabled. Piaffo does not upload microphone recordings or speech transcripts to its own servers for this feature.

Local and offline device data

Some app data is stored locally on your device to support offline use and performance. This may include downloaded content, cached records, favorites, local settings, and download entitlement counters. Local device data may remain on your device until you remove it, clear app storage, or uninstall the app.

Permissions-based data

If you choose to add or change a profile photo, we may request access to your camera and photo library. We use these permissions only for the profile-photo and home-screen background features that you invoke. If you deny these permissions, core account access remains available, but image capture or upload will not work.

3. How We Use Data

• To create, authenticate, secure, and maintain accounts.
• To operate app features, profile settings, and personalized user flows.
• To verify subscription entitlements and deliver paid features.
• To process support requests and reply to service inquiries.
• To detect, investigate, and resolve technical failures or abuse.
• To improve reliability, performance, and product operations.
• To comply with legal obligations and enforce our contractual rights.

4. Legal Bases for Processing

Where GDPR or similar laws apply, we generally rely on the following legal bases:

• Contract: to provide the services you request, including account operation, subscription access, and support.
• Legitimate interests: to secure, monitor, improve, and defend our services and to prevent misuse.
• Consent: where a feature requires permission-based access, such as camera, photo library, microphone, or speech-recognition access.
• Legal obligation: to satisfy applicable legal, tax, accounting, or enforcement requirements.

5. Sharing and Service Providers

We share personal data only where necessary to operate our services, comply with the law, or protect rights and security.

Infrastructure and authentication

We use Supabase for authentication, database operations, storage, encrypted session handling, and server-side functions.

Crash reporting and diagnostics

We use Sentry to receive crash reports, performance traces, and limited product-interaction analytics events for production reliability and incident response.

Subscription infrastructure

We use RevenueCat to manage subscription offerings, entitlements, purchase state, restore flows, and in-app subscription management. Purchases are transacted by the applicable app store or platform provider.

Support delivery

We use Resend to deliver support emails generated from authenticated support requests.

Legal and corporate events

We may disclose data where required by law, regulatory process, or to protect the rights, safety, and security of users, the company, or third parties. We may also disclose data in connection with a merger, financing, acquisition, or corporate restructuring, subject to applicable law.

6. International Transfers

Our service providers may process data in countries outside your home jurisdiction. Where required, we use appropriate contractual, technical, and organizational safeguards for international transfers.

7. Data Retention

We retain personal data only for as long as reasonably needed for the purposes described in this policy, including service operation, support handling, security review, subscription administration, legal compliance, and dispute resolution.

When you delete your account through the in-app deletion flow, the account and associated server-side profile records, favorites, support-request records linked by account, RevenueCat webhook event records linked by account from both the current and legacy webhook event stores, and stored profile-avatar media (including the optional home-screen background image) are deleted from our service infrastructure, subject to any legally required retention.

Store operators and service providers such as Apple, Google, RevenueCat, Sentry, or email providers may retain certain records under their own policies and legal obligations.

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent where processing depends on consent.

Many core account details can be updated directly in the app. Account deletion is available in the app under Account Settings -> Danger zone -> Delete account.

If you purchased an auto-renewing subscription through an app store, deleting your account does not automatically cancel store-managed billing. Subscription cancellation must be completed through the applicable store account settings unless the platform provider states otherwise.

You may also contact us at contact@clarityappsystems.com to submit a privacy request.

9. Security

We use administrative, technical, and organizational measures designed to protect personal data. These measures include authenticated access controls, encrypted transport, and secure session storage on supported mobile platforms.

No system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you suspect unauthorized access.

10. Children

Our services are not directed to children under 13, or the higher minimum age required by local law without appropriate parental or guardian involvement. If you believe a child has provided personal data in violation of applicable law, contact us and we will investigate.

11. Changes to This Policy

We may update this Privacy Policy to reflect service changes, legal requirements, or operational improvements. The latest version will be posted at this URL with an updated effective date.

12. Contact

For privacy questions, account requests, or legal notices, contact: