CLAIR Privacy Policy
Effective October 11, 2026 · Version 1.2
The short version. CLAIR analyzes your spreadsheets on your own computer. During normal use it does not send your files, your questions or CLAIR’s answers to us. We do receive anything you choose to send us, such as a support email or a diagnostics file, and if you connect CLAIR to an outside AI service, your questions go to that service. We collect a small amount of information to run sign-in and licensing, to let you download CLAIR, to reply when you write to us, and (only if you turn it on) to understand how the app performs. This policy explains what we collect, why, how long we keep it, and your rights.
1. Who is responsible for your information
Raaif Yousuf, doing business as CLAIR Analytics (“CLAIR”, “we”, “us”), a sole proprietor based in the United States, is responsible for the personal information described in this policy. Where the EU or UK General Data Protection Regulation (“GDPR”) applies, we are the “controller”. You can reach us at [email protected].
2. What stays on your computer
Everything you import into CLAIR, every question you ask, every answer, chart, model and export, and the AI model itself are stored in CLAIR’s data folder on your computer. CLAIR does not send them to us, and we have no remote access to that folder.
They leave your computer only if you send them somewhere yourself, for example by:
- setting up CLAIR to use an AI server or proxy that is not on your computer (CLAIR then sends your questions and the data needed to answer them to that service);
- emailing us a diagnostics file, screenshot or report; or
- sharing an export with someone.
CLAIR also keeps on your computer a copy of your account email and license (to keep you signed in), a random install ID, and app logs. Our server keeps its own records of your account and license, described in Section 3. When you uninstall CLAIR, your data folder is kept unless you check the option to delete it.
3. Information we collect
Needed to provide CLAIR. We need the first two rows of this table to sign you in, license the app and protect our service. If you do not want to provide them, you cannot use CLAIR’s analysis features. Optional. The other rows are optional, and CLAIR works fully without them.
| What | When | Why we use it | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|---|
| Needed: Email address, license records, a one-way code derived from your device’s hardware ID, the devices linked to your account, sign-in and renewal dates, and the version of the Terms you accepted and when | When you sign in and when the app renews your license | To create your account, sign you in, issue and renew your license, and enforce the device limits in the Terms | Performing our contract with you | Until 12 months after your last license renewal, or until you delete your account if sooner. Sign-in codes expire within minutes and are not kept. Records of which Terms you accepted are kept for as long as you have an account and for 3 years after, in case of a dispute |
| Needed: IP address and app version | Every connection to our servers | To deliver the connection, prevent abuse (rate limits, blocking fake sign-ups) and keep our servers secure | Legitimate interests (security and fraud prevention) | A pseudonymous code derived from your IP address is kept for 7 days for rate limiting. Our network provider, Cloudflare, also processes connection data under its own policies |
| Optional: Download survey answers: the kind of work you do, your role or field, the kinds of data you plan to analyze, the tools you use today, and how you heard about CLAIR. The survey does not ask for your name, email or organization, and the answers are not linked to your account or your download | If you fill in the survey on our download page | To understand who uses CLAIR and what to build next | Your consent, given by choosing to answer the survey, which says next to the questions that your answers will be stored. Answers are saved as you fill it in, and you can clear an answer by un-selecting it | Until you ask us to delete it, or 24 months after you submit it, whichever is sooner |
| Optional: Usage and performance data (see Section 4) | Only if you turn on “Share usage data” | To find bugs, crashes and slow features, and to decide what to improve | Your consent | Individual events: 18 months. Totals that cover many installs and cannot be traced to one: kept indefinitely |
| Optional: Messages you send us and anything you attach | When you email us or use the feedback link in the app (which opens your own email program) | To reply and fix the problem you reported | Legitimate interests (supporting users) | 3 years after the conversation ends. Attachments containing sensitive data are deleted as soon as we notice them (Section 8) |
| Records of service emails we send you (sign-in codes, security notices, changes to our terms or pricing) | While you have an account | To run the service and show we gave the notices we promised | Performing our contract with you; legitimate interests | 12 months |
Backups. Our server data is backed up daily in encrypted form. Backups are deleted automatically after 90 days, so information we delete can remain in a backup until then. If we ever restore a backup, we delete again anything that was deleted after that backup was made.
We do not collect payment details. If we introduce paid plans, we will update this policy before collecting any.
No automated decisions. We do not make decisions about you by automated means that have legal or similarly significant effects on you.
4. Usage data
Usage data is off unless you turn it on. CLAIR asks you the first time you open it, before sending anything. You can change your mind at any time in Settings, then Privacy. When you turn usage data on, CLAIR records the date and the version of this notice you were shown, so that we can show you consented.
If you turn it on, CLAIR sends us, about every 15 minutes and when you close the app:
- a random install ID created on your device (it is not your name, email or device ID, and we do not link it to your account);
- the app version, operating system and general hardware class (for example, amount of memory and type of graphics processor, but not exact model names);
- which features and screens you use and how long tasks take;
- errors and crashes, as error categories rather than error text; and
- the size of datasets as ranges (for example, “1,000 to 10,000 rows”), never their names or contents.
The install ID is a pseudonymous identifier: it does not reveal who you are, but it does let us tell one install’s events apart from another’s, so we treat these events as personal information. CLAIR never sends us cell values, column, dataset or file names, file paths, your questions, CLAIR’s answers, database queries, your name or your email as usage data. CLAIR checks every event against a fixed list of allowed fields and discards any event that does not match.
To delete the usage data from your install, turn usage data off and email [email protected]. We will tell you how to find your install ID, delete its events, and keep only a record of the install ID so that we do not store further events from it unless you turn usage data on again.
5. Who we share information with
We do not sell or rent personal information, and we do not share it for advertising. We share it only with service providers who handle it for us under contract:
| Provider | What they do for us | Information involved | Where |
|---|---|---|---|
| Hetzner Online GmbH | Hosts our license and usage-data servers | Everything in Sections 3 and 4 that reaches our servers | Germany |
| Cloudflare, Inc. | Network security, domain services, file downloads and encrypted backups | Connection data; encrypted backups of our server data | Global network; United States company |
| Resend, Inc. | Sends sign-in codes and service emails | Your email address and the content of those emails | United States |
| Google LLC (Google Workspace) | Our email and documents | Messages you send us and our replies; outreach correspondence (Section 11) | United States and other countries |
We also use Better Stack, Inc. to check that our servers are online. It contacts our servers’ public health-check address and receives no account or usage information.
We may also disclose information if the law requires it, or where needed to protect the rights, safety or property of our users or others.
If CLAIR changes hands. If we form a company to run CLAIR, or if CLAIR or its assets are sold, merged or transferred, the personal information we hold may be transferred as part of that transaction. Before a sale, a prospective buyer and its advisers may review summary information under a confidentiality agreement; we do not give them your account details or survey answers before the sale completes. The new owner must handle your information as this policy describes, and we will tell you before your information becomes subject to a different privacy policy.
6. Services CLAIR contacts on your behalf
To set up or update its components, CLAIR downloads files from third parties. They see your IP address and which file was requested (which can reveal, for example, which AI model you chose), but nothing about your data:
- Ollama (registry.ollama.ai and github.com), for the AI model and the program that runs it;
- Hugging Face (huggingface.co), for some optional AI components; and
- DuckDB (extensions.duckdb.org), for database extensions.
These services may redirect downloads to content-delivery networks, which also see your IP address. Their own privacy policies apply.
Offline mode, in Settings, then Privacy, stops every connection CLAIR itself makes: update checks, downloads from our servers, usage data and license renewal (so after your current license period, the app switches to read-only mode until you go back online). Two things it cannot stop, because they happen inside other components: AI model downloads that you start, which Ollama makes itself, and DuckDB fetching a database extension the first time a feature needs it. An outside AI service you have set up is also contacted whenever you use it.
7. International transfers
We are based in the United States, so when you sign in, fill in the survey or write to us, you are giving your information to a US business, and we access it from the United States. Our servers are in Germany. Some of our service providers are in the United States. Where one of our providers moves personal information from the EU, the UK or Switzerland to the United States, it does so under the safeguards in its own data processing terms, which rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where that provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses and the UK addendum to them. You can ask us for details of these safeguards.
8. How we protect information
All connections to our servers are encrypted. Licenses are digitally signed. Device identifiers are stored only as one-way codes. Our signing keys and service credentials are kept on our servers with access limited to the developer, and server access requires key-based authentication. Backups are encrypted. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant regulators as the law requires.
If you send us sensitive data by mistake. We ask you not to send us health information, student records or other people’s personal data. If an email or attachment contains it anyway, we will not open more of it than needed to recognize it, we will delete it from our mailbox and tell you, and we will ask you to send a version without it.
9. Your rights
Wherever you live, we let you ask us to:
- give you a copy of the personal information we hold about you;
- correct it;
- delete it, including your whole account;
- send it to you in a portable format;
- restrict how we use it, or stop using it for a particular purpose; and
- withdraw consent you gave (for example, to usage data or the survey), without affecting earlier processing.
Email [email protected]. If you have an account, write from the email on your account. If you do not (for example, you only filled in the survey), tell us what you submitted and when, and we will confirm the request comes from you in a proportionate way. We will answer within one month. If a request is complex, we may extend this by up to two more months where the law allows, and we will tell you why. If we cannot fully meet a request, for example because we must keep a record to resolve a dispute or to honor a do-not-contact request, we will explain why. We will not treat you differently for using these rights.
Deleting your account deletes your server records and ends license renewal, so CLAIR switches to read-only mode on your computer. Your data on your computer is not affected. Withdrawing consent to usage data or the survey does not affect your account.
Some of these rights are legal rights only in some places. We extend them to everyone voluntarily. EU and UK residents may also object to processing based on legitimate interests, and may complain to their data protection authority. Australian residents may contact the Office of the Australian Information Commissioner (oaic.gov.au) if they are not satisfied with our response. California and other US state residents: we do not sell or share personal information for cross-context behavioral advertising.
Our website. Our website sets no cookies and runs no analytics, advertising or tracking scripts. It loads no fonts or content from other companies. Like any web server, it processes your IP address to deliver pages. Because we do not track you, we treat Do Not Track and Global Privacy Control signals the same as any other visit.
10. Children
CLAIR is for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
11. People we contact by email
We sometimes write to researchers and university staff whose work email address is published on their institution’s website. We do this for two purposes: to discuss their published research, and, separately, to tell them about CLAIR or ask for their feedback on it. For both, we keep your name, work email, institution, role, the page where we found your address, and our correspondence. Our legal basis is our legitimate interest in contacting relevant professionals about their work. Every email we send about CLAIR tells you how to opt out. You can ask us to stop at any time, by replying “stop” or by emailing [email protected]. If you do, we stop, and we keep only your email address on a do-not-contact list so that we do not contact you again. Otherwise, we delete your details 12 months after our last exchange, unless you become a CLAIR user (then Section 3 applies) or the conversation becomes a support request (then the support row applies).
12. Changes to this policy
We will post changes on this page and update the effective date. If a change is significant, we will tell you by email or in the app at least 30 days before it takes effect. Previous versions are available on request.