Privacy Policy

We believe in collecting as little personal information as possible to run Klarytea smoothly. Here is a clear breakdown of what is stored and why:

• Your Preferred Name: An optional nickname or display name stored locally on your device so Klarytea knows how to greet you during onboarding.
• Anonymous Device ID: A non-personal identifier generated by your device (Google Play AppSet ID). This acts as your unique key to track active subscriptions, manage your daily local processing limits, and grant cloud credits without requiring passwords or personal logins.
• Prompts & Uploaded Content: Text, documents, voice recordings, or receipt images you submit to generate flashcards or summaries. Local tasks stay on your device, while cloud requests are streamed transiently through our encrypted proxy and erased once completed.
• Feedback & Feature Requests: If you submit feedback or request new features inside the app, we save your request text and selected category alongside your anonymous ID so our support team can review and respond.
• Basic App Usage & Health Logs: Minimal system records—such as token counts, credit deductions, and error logs—stored securely in our backend database to prevent abuse, track credit refills, and fix bugs.

To power features like scanning receipts, recording voice notes, or streaming AI responses, Klarytea requests specific permissions. You are always in control and can manage or revoke these at any time in your device settings:

• Internet Access: Required to sync your subscription credits, check cloud processing status, and securely process high-performance AI requests through our server proxy.
• Camera Access: Required only when you choose to snap photos of receipts, study materials, or physical documents for instant digitizing and flashcard generation. We never open your camera in the background or access your private photo gallery.
• Microphone Access: Required only when you actively tap to record audio for voice notes or voice-to-email utilities. Audio is recorded locally, and your microphone is strictly turned off when you stop recording.
• Notifications (Optional): Used purely to alert you when background tasks complete (like processing a large document) or when your weekly credit balance refreshes.

We operate on a transparent privacy model. Your information is used strictly to provide and maintain the utilities you request:

• Fulfilling AI Requests: Generating smart summaries, study flashcards, checklists, and document or receipt OCR scans.
• Subscriptions & In-App Purchases: We offer auto-renewable subscriptions (Weekly Pass or Yearly Premium) processed securely via RevenueCat and Google Play Billing. Active subscribers receive a batch of 100 fast-track cloud credits that refresh every 7 days from purchase or top-up.
• Credit Sync & Daily Limits: Managing your daily free local credits and syncing active cloud credit balances against your anonymous device ID.
• Improving App Stability: Reviewing error logs and token metrics to ensure API availability, prevent spam, and fix crashes.
• Zero Advertising Policy: We NEVER sell, rent, trade, or share your data with third-party advertisers or data brokers.

Your uploaded documents, voice recordings, and generated study materials belong entirely to you. We use a privacy-first processing model:

• Unlimited On-Device Processing: Whenever possible, tasks run locally on your phone hardware. This includes local text generation and local audio-to-text transcription. Audio recorded for transcription stays on your phone and never leaves your device.
• Encrypted Cloud AI: When utilizing cloud credits for high-performance tasks, prompts and temporary images are transmitted over an encrypted SSL/TLS connection to our secure server proxy. These inputs are processed strictly in transient memory and deleted immediately once the response streams back to you.

Klarytea integrates trusted third-party services to handle payment processing, app distribution, and backend API routing. These partners process data on our behalf strictly according to their own privacy policies and do not have independent rights to use your information beyond delivering these core functions:

• Google Play Services & Google Play Billing: Google Privacy Policy — Used for app distribution, device integrity verification (AppSet ID), and secure in-app purchase handling.
• RevenueCat: RevenueCat Privacy Policy — Manages subscription status, validates receipt tokens, and syncs active weekly/yearly premium access.
• Cloudflare: Cloudflare Privacy Policy — Powers our secure, encrypted server proxy worker to stream cloud AI responses transiently without persistent storage.

You maintain full transparency and control over your purchases, local storage, and stored information at all times:

• Subscription Management: You can restore existing purchases or cancel and manage your active subscription at any time directly through Google Play Store Account Settings or via the in-app Paywall.
• Local Data Control: You can instantly clear your local app database, cached scan images, audio recordings, and document history directly through the in-app settings or by clearing the app data in your Android device settings.
• Backend Data Deletion & Requests: To request the deletion of your backend record (such as submitted feedback or credit usage logs linked to your anonymous device ID) or to request a copy of your stored data, simply email our team at [email protected]. We will process your request promptly.

Klarytea is designed as a general-audience productivity utility and does not knowingly collect, store, or solicit personal information from children under the age of 13 (or under 16 in certain legal jurisdictions).

• No Account Creation Required: Because Klarytea operates using anonymous device identifiers (AppSet ID/UUID) rather than user accounts or passwords, personal details like birth dates or personal identity records are never requested or stored.
• Compliance & Local Processing: All diagnostic usage logs and local processing workflows comply with applicable child privacy laws, including COPPA and GDPR-K.

If you believe a child has inadvertently submitted personal information or sensitive content through our services, please contact us immediately at [email protected] so we can promptly delete the associated records from our system.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for processing your data includes:

• Contractual Necessity: To deliver the AI utilities, credits, and subscription services you request.
• Legitimate Interests: To prevent fraud, log usage metrics, and secure our API infrastructure.

Your information may be transferred to and processed on servers located outside your home country (such as Cloudflare and Google server nodes). We ensure all transfers comply with standard data protection safeguards.

We may update this Privacy Policy from time to time to reflect changes in our app features, underlying AI architecture, or applicable legal regulations.

• Effective Date Updates: Whenever updates are made, we will revise the "Last updated" date at the top of this page.
• Material Changes: For significant changes that affect how your data is handled, we will notify you through an in-app notice or release update.

We encourage you to review this Privacy Policy periodically. Your continued use of Klarytea after any changes or revisions signifies your acceptance of the updated terms.