Privacy Policy
Last updated: March 27, 2026
1. Introduction
Clarity.Do LLC ("we", "our", or "us") operates the Clarity.Do task management application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.
By using Clarity.Do, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
When you use Clarity.Do, we may collect the following types of information:
- Account Information: Username and password when you create an account.
- Task Data: Tasks, subtasks, descriptions, due dates, importance levels, urgency levels, focus status, recurrence settings, and other content you create within the application.
- Email Address: If you choose to provide one for daily digest emails, email verification, or account communications.
- Device Information: Device type, operating system, app version, device identifiers, and last activity timestamps for synchronization and session management.
- Usage Data: General usage patterns, feature interactions, and performance metrics to improve the application experience.
- Network and Log Data: IP address, general location, access times, error logs, and performance metrics.
- Subscription Information: Subscription status, platform of purchase, and related billing identifiers provided by third-party app stores.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Clarity.Do Service.
- Synchronize your tasks across your devices in real time.
- Send daily digest emails if you opt in to this feature.
- Manage your subscription and Pro or Premium features.
- Manage device sessions and enforce connection limits.
- Provide customer support and respond to inquiries.
- Ensure the security, integrity, and availability of our Service.
- Comply with legal obligations.
4. Data Storage and Location
Your data is stored on servers located in the United States. We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of data in transit using HTTPS/TLS.
- Passwords are stored using strong, one-way hashing and are never stored in plain text.
- Access controls and authentication mechanisms to restrict data access.
- Regular security audits and vulnerability assessments.
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
5. Data Retention
We retain your data as follows:
| Data Type | Retention Period |
|---|---|
| Active tasks | Retained while your account is active |
| Deleted tasks | Permanently removed after 30 days |
| Completed tasks | Permanently removed after 90 days |
| Completion history | User-configurable: 1, 3, 7, 14, or 30 days (default: 3 days) |
| Device sessions | Marked as expired after 30 days of inactivity |
| Sync transaction journal | Up to 10,000 records per user; oldest entries pruned automatically |
| Abandoned accounts | Beginner accounts inactive for 3 months are deemed abandoned and may be deleted without notice. Lapsed Pro or Premium accounts are downgraded to Beginner. |
When you request account deletion, we will delete or anonymize your personal data within 90 days, subject to any legal retention obligations. See our Account Deletion page for step-by-step instructions, what data is deleted, and what is retained for legal compliance.
6. Third-Party Services
We use the following third-party services to operate Clarity.Do:
- Railway — Application hosting and infrastructure.
- Resend — Email delivery for daily digest emails and verification messages.
- Apple App Store — iOS and macOS app distribution and subscription management.
- Google Play Store — Android app distribution and subscription management.
- Microsoft Store — Windows app distribution and subscription management.
- Netlify — Website hosting and web application hosting.
These services may process certain data on our behalf in accordance with their own privacy policies. We only share the minimum information necessary for these services to function.
7. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:
- With your explicit consent.
- With third-party service providers as described in Section 6, solely to operate the Service.
- To comply with applicable laws, regulations, or legal processes.
- To protect our rights, privacy, safety, or property, or that of our users or the public.
- In connection with a merger, acquisition, or sale of assets, with notice to affected users.
8. Your Rights
Regardless of your location, you have the right to:
- Access your task data through the application.
- Request deletion of your account and associated data.
- Opt out of daily digest emails at any time through your preferences.
- Manage and revoke device sessions.
- Update or delete your email address.
To exercise any of these rights, contact us at privacy@m26.clarity.do or use the relevant controls within the application. For account deletion specifically, see our Account Deletion page.
9. GDPR Rights (European Economic Area Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data.
- Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Object: Object to processing of your personal data for certain purposes.
- Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority.
Our legal basis for processing your data is the performance of our contract with you (providing the Service), your consent (for optional features like digest emails), and our legitimate interests (security, service improvement).
To exercise your GDPR rights, contact us at privacy@m26.clarity.do. We will respond within 30 days.
10. CCPA/CPRA Rights (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of your personal information.
- Right to Opt-Out: We do not sell or share your personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise your rights, contact us at privacy@m26.clarity.do. We will verify your identity before fulfilling your request.
11. Children's Privacy
Clarity.Do is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. In jurisdictions where the GDPR applies, the minimum age is 16.
If we learn that we have collected personal information from a child below the applicable minimum age, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@m26.clarity.do.
12. Cookies and Local Storage
Clarity.Do uses minimal browser storage to provide core functionality:
- Authentication Token: Stored locally to maintain your session.
- Theme Preference: Stored locally to remember your light/dark mode choice.
- Application State: Scroll positions, expansion states, and UI preferences stored locally for a better user experience.
We do not use third-party tracking cookies. We do not engage in cross-site tracking or behavioral advertising.
We may introduce analytics tools in the future to better understand how users interact with the Service. If we do, we will update this policy and provide appropriate notice before collecting any additional data.
If we introduce marketing communications in the future, we will require your explicit consent before sending them. You will be able to withdraw consent at any time.
13. Data Breach Notification
In the event of a data breach that compromises your personal information, we will:
- Notify affected users as soon as reasonably practicable.
- Notify relevant data protection authorities as required by applicable law.
- Take immediate steps to contain and remediate the breach.
- Provide information about the nature of the breach and recommended protective actions.
14. International Data Transfers
Your data is stored and processed in the United States. If you access Clarity.Do from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For users in the EEA, UK, or Switzerland, we rely on appropriate legal mechanisms for international data transfers. Our third-party service providers maintain their own data protection agreements and compliance measures to safeguard data transferred internationally.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will:
- Post the updated policy on this page with a revised "Last updated" date.
- Notify users through the application or via email where appropriate.
Your continued use of Clarity.Do after changes are posted constitutes acceptance of the revised policy.
16. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
privacy@m26.clarity.do
Clarity.Do LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801