Privacy
Your data stays on your computer.
By default, your files, your questions and CLAIR's answers stay on your computer, and so does the AI model that reads them. You can choose to send things out: if you connect an outside AI service, it receives your questions and the data needed to answer them, and anything you email us, such as a screenshot or diagnostics file, reaches us. This page lists the few places CLAIR connects to by default, and why.
No cloud AI by default
The AI model runs on your computer. Your questions go to an outside AI service only if you connect one yourself.
Works offline once set up
Analysis needs no connection. The free early-access licence renews over the internet at least every 14 days, or CLAIR becomes read-only.
Usage statistics are your choice
They stay off unless you say yes, and they never include your data.
On your machine
Everything that matters happens here.
By default, your files, your questions, the answers and the AI model all live and run on your computer.
CLAIR does
- Reads your files on your computer
- Runs the AI model on your computer
- Keeps your questions and answers on your computer by default
- Keeps analysis working with no internet once set up, as long as the licence renews at least every 14 days
- Asks before it records anything about how it is used
By default, CLAIR does not
- Uploads your files, rows or column names
- Sends your questions or answers to anyone
- Sends your data to a cloud AI service, unless you connect one yourself
- Collects usage statistics unless you say yes
- Connects to anything before you accept the Terms
Leaves your computer only if you choose it
- An outside AI service you connect: your questions and the data needed to answer them go to that service, and its own terms apply.
- Anything you send us: support emails, screenshots and diagnostics files. Diagnostics files can contain dataset, column and file names, so review them first.
- Exports you share with other people.
What CLAIR connects to
A short, published list.
By default, CLAIR contacts eight hosts. None of them receives your analysis content.
This is the list of default destinations. The ones that are ours handle your sign-in and licence, updates, and usage statistics if you opted in. The others supply the AI model and a few components. Model downloads happen at setup, and usage statistics are off unless you say yes.
Downloads from these hosts may be redirected to content-delivery networks, which also see your IP address. And if you connect an outside AI service yourself, CLAIR contacts that service whenever you use it, and sends it your questions and the data needed to answer them. See sections 2 and 6 of the Privacy Policy.
Your analysis content
Your files, rows, column names, questions, answers, charts, models and exports. Not sent to any of these hosts by default.
Account and connection metadata
What the hosts do receive: your sign-in email, licence and device records (a one-way code, not your raw hardware ID), the Terms version you accepted, the app version, and your IP address, which is used for rate limiting. Third-party download hosts also see which file you asked for, which can reveal which AI model you chose.
Your computer
- Your files
- Your questions
- Answers
- The AI model
Your data stays inside by default.
Ours
- api.clairanalytics.org
- updates.clairanalytics.org
- telemetry.clairanalytics.org
- downloads.clairanalytics.org
Third party
- registry.ollama.ai
- github.com
- huggingface.co
- extensions.duckdb.org
The lines carry licences, updates and downloads, not your analysis content.
- api.clairanalytics.orgOursLicence activation and renewalOngoingAt sign-in, then quiet licence renewals in the background. The free early-access licence lasts 14 days, so CLAIR needs to reach this host at least that often.
- updates.clairanalytics.orgOursUpdate check and downloadOngoingChecks for updates in the background. Installs only if you agree.
- telemetry.clairanalytics.orgOursProduct telemetry (off unless you turn it on)OptionalOnly if you said yes to usage statistics.
- downloads.clairanalytics.orgOursCLAIR library packOne-timeThe first time you use a feature that needs the extra component pack, such as Predict.
- registry.ollama.aiThird partyChat model downloadOne-timeAt setup, and again if you change the AI model.
- github.comThird partyModel engine downloadPath: /ollama/ollamaOne-timeAt setup, to fetch the program that runs the AI model.
- huggingface.coThird partyAccelerated model downloadOne-timeThe first time you use the one feature that needs it.
- extensions.duckdb.orgThird partySearch and map components (Macs only)One-timeMacs only, on first launch, for keyword search and maps.
Offline mode in Settings, then Privacy, stops CLAIR's own connections, including licence renewal, so once your current licence period ends CLAIR is read-only until you go back online. It cannot stop AI model downloads you start, which Ollama makes itself, or DuckDB fetching a database extension the first time a feature needs it. Nothing connects before you accept the Terms.
Usage statistics
Only if you say yes.
They are optional and off by default. After you accept the Terms, CLAIR asks once, with the box unticked. If you do nothing, the answer is no.
Usage statistics are optional and off by default. They are not anonymous. Each event is linked to a random installation ID that CLAIR makes on your computer. It is not your name, email or device ID, and we do not link it to your account, but it lets us tell one install's events from another's, so we treat the events as personal information (pseudonymous). Read the Privacy Policy, section 4.
What would be sent
- How CLAIR performs
- Start-up time, how long answers take, crashes.
- Which features open
- Never what you did inside them.
- Your computer's size
- Memory and the AI model chosen. The graphics card name is scrambled one way before it leaves.
- Data size, as ranges
- For example 1K to 2.5K rows. Never the exact count.
- Error types
- A label from a fixed list, such as a timeout. Never the message.
Never sent
- Dataset content (cell values)
- Column, dataset or file names
- Your questions or CLAIR's answers
- Your name or email
Change your answer any time in Settings, then Privacy. The same page shows the events queued and already sent from this install.
Deleting. "Delete my data" in Settings, then Privacy, clears those events from your computer only. Events that have already reached our server stay there until you ask: turn usage statistics off and email [email protected], and we delete the events for your installation ID. Emailing privacy@ also deletes your account records on our server.
Security
Small, plain and local.
What CLAIR keeps on your computer, how the licence works (and what happens offline), and how updates arrive.
A local data folder
Your projects and datasets live in one folder on your computer. Settings, then Privacy, shows where it is and opens it. You can erase all research data there and get a written receipt. CLAIR itself stays installed.
Closed to the network
CLAIR's window talks to its own engine only on your computer, and a random key is made fresh each time it starts. Nothing on your network can reach it.
A licence tied to your device
The free early-access licence lasts 14 days and renews automatically, quietly, over the internet, so CLAIR needs to go online at least every 14 days. Renewing never interrupts an analysis in progress. If CLAIR cannot renew, it switches to read-only: you can still open, view and export your work, but not run new analysis. The Terms allow one device at a time and up to three devices on an account in total. A longer offline licence for a computer that is never online is available on request from [email protected].
Updates ask first
CLAIR checks for updates in the background and signed updates install only when you agree. Nothing is forced on you mid-task.
Sensitive data
Using CLAIR with sensitive data.
What the design can and cannot tell you.
By default, CLAIR keeps your data on your computer. With no upload to approve, that can make review simpler for data covered by an ethics board, HIPAA or FERPA, as long as you do not connect an outside AI service or send us files.
Whether you may use CLAIR with a particular dataset is your institution's decision. CLAIR does not certify compliance with any rule or law.
Do not send us patient, student, client or other confidential data in support emails, screenshots or diagnostics files.
For a review, Settings, then Privacy, can produce a plain-text record of the places CLAIR is set up to reach. It describes the app; it is not a certificate.
Questions from an IT team or review board?
Email [email protected]Read the Privacy Policy and the Terms of Use.