Privacy Policy

Clara — describe a goal, get an automation

Last updated: June 18, 2026

This Privacy Policy explains how Clara (“the App”, “we”, “us”) collects, uses, and protects information when you use our mobile application and related services. Clara is operated by AiBanta. By using the App, you agree to this policy.

Data controller AiBanta
Email: contactus@aibanta.com

1. Who this policy applies to

This policy applies to users of the Clara app on Android, iOS, and other platforms where the App is offered. It covers data processed through the App and our backend API at clarabanta.up.railway.app.

2. Information we collect

Depending on how you use the App, we may process:

  • Account data — email, display name, user ID when you sign in (Google, Apple, or email via Supabase Auth).
  • Content you provide — goals, automation requests, clarification answers, voice recordings during voice compose, and attached sources (URLs, Gmail queries, Drive file references).
  • Automation data — generated workflows, names, schedules, run history, status, and outputs.
  • Integration tokens — OAuth tokens for connected services (Gmail, Google Drive, Calendar, Sheets, Telegram) stored to run your automations.
  • Push tokens — Firebase Cloud Messaging device tokens when you enable notifications.
  • Technical data — device type, OS, app version, language, IP address, and timestamps for security and troubleshooting.

Permissions: The App may request microphone access for voice compose, and notification permission for run-completion alerts. Integration features require you to connect third-party accounts explicitly.

3. How we use your information

  • Provide, maintain, and improve the App and backend;
  • Clarify requests and generate automations using AI-assisted processing;
  • Execute scheduled and on-demand workflows, including actions on connected services;
  • Store and sync workflows, profile, and run history;
  • Send push notifications you have opted into;
  • Respond to support requests;
  • Protect against abuse and security incidents;
  • Comply with legal obligations.

4. Legal basis (EEA / UK)

  • Contract — to provide the App and features you request;
  • Legitimate interests — to secure and improve our services;
  • Consent — where required (e.g. push notifications, optional communications);
  • Legal obligation — where applicable law requires processing.

5. Third-party services

We use trusted providers to operate Clara. Data may be shared only as needed:

  • Hosting — Railway (API and scheduler).
  • Database & auth — Supabase.
  • AI processing — OpenAI and/or Anthropic for clarification, workflow generation, summarization, and evaluation. Providers process data under their own terms.
  • Push notifications — Firebase Cloud Messaging (Google).
  • Subscriptions — RevenueCat (when billing is enabled).
  • Connected services — Google (Gmail, Drive, Calendar, Sheets) and Telegram when you authorize integrations.
  • Web search — Tavily, SerpAPI, Bing, or Anthropic search APIs when automations require live web data.
  • Fonts — Google Fonts may receive standard technical data per Google's Privacy Policy.

We do not sell your personal information. We do not use third-party advertising SDKs.

6. Data retention

We retain data while your account is active or as needed to provide the service. Workflow and run data are kept so you can access your library and history. You may request deletion of your account and associated data (see Section 8).

7. Security

We use reasonable technical and organizational measures including HTTPS encryption and access controls. No method of transmission or storage is completely secure.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your data, withdraw consent, or lodge a complaint with a supervisory authority.

Contact contactus@aibanta.com to exercise these rights.

You can stop collection by uninstalling the App and disconnecting integrations.

9. International transfers

Your data may be processed outside your country. Where required, we rely on appropriate safeguards for transfers from the EEA/UK.

10. Children

The App is not directed at children under 16. We do not knowingly collect data from children. Contact us if you believe a child has provided data and we will delete it.

11. Changes

We may update this policy. The revised version will be posted here with an updated date. Material changes may be communicated through the App where required by law.

12. Contact

contactus@aibanta.com
AiBanta