Effective Date: July 30, 2026
Last Reviewed: October 7, 2026

1. About Us:

We are Clearafi LLC (“Clearafi”), an AI reliability source that acts as a data controller for all personal information processed on our Platform. Your privacy is very important to us, and the following will inform you of the information that we may collect from you, and how it is used. By using our Website or any Clearafi application, including our mobile apps, you agree to be subject to the practices described in this policy. Questions about this privacy policy may be directed to privacy@clearafi.ai.

2. Privacy Policy Scope:

This policy applies to personal information collected by Clearafi on any of its platforms including but not limited to any website, software, computer platform, web application, or mobile application (iOS and Android) operated by Clearafi. Section 11.17 explains what is specific to the mobile apps.

2.1 Language of this Policy:

This policy, and the Platform itself, are available in English, Spanish, French, German, Portuguese (Brazil), Italian, Japanese, Hebrew, and Hindi. The version you are reading was selected automatically from your browser's language settings, as described in §3(d). You can change it at any time using the language selector at the top of this page.

The English version is the reference version: it is the one we draft, maintain, and update first. Translations are provided so that you can read this policy in the language you actually use, and they are intended to carry the same meaning. Where a translation and the English version genuinely conflict, the English version governs — except where the law of your country gives the version in your own language precedence, in which case that version governs as to you.

3. Information Collection

a. As part of our operation, Clearafi collects data provided directly from users and reserves the right to process this information. Such information may include but is not limited to the following:

• User Names, and Physical Addresses, especially as needed for payment processing.
• User email addresses
• User usage data
• User phone numbers
• OAuth identity as needed for 2 Factor Authorization (Google, Apple, Microsoft login)
• Username
• Profile Photo
• Organization/Company name
• User's organizational tax number and company address
• User's Job title
• User's subscription status
• User's payment status
• Date of birth, asked once at sign-up (on the web and in the app) for one purpose only: confirming that you are 18 or older, as our Terms require. It is stored with your account, deleted with it, and not used for marketing, advertising or personalisation.

b. In addition to data actively requested by users, Clearafi reserves the right to collect data collected passively from users for the enhancement of user experience and for legitimate Clearafi business purposes. Such information includes but is not limited to the following:

• Login frequency
• User trust score
• Session duration
• Password reset patterns
• MFA usage
• Referral source
• Workspace/team hierarchy usage
• Telemetry
• Browser behavior
• APIs
• Cookies
• Device signals
• Embeddings
• Analytics SDKs
• Model interaction logs
• User Operating System
• DNS
• IP Address
• Browsing History

c. Derived location. Where a question's correct answer depends on where you are, we derive an approximate location at the time you ask it. This comes from two sources: your IP address, resolved to a city and region using a local database (never a street or an address); and, for signed-in accounts that have not turned it off, an approximate position from your device, rounded to roughly one kilometre before it leaves your device. Your browser asks your permission before sharing the second. Neither is stored in your account, our database, or our logs, and neither is used for advertising or profiling. See §11.11 for the full detail and how to turn the device signal off.

d. Language and locale. We show you the Platform and this policy in the language you are most likely to read, rather than asking you to find a menu. That language is derived from the preference your browser sends with every request (the standard Accept-Language header) and, where that is absent or ambiguous, from the approximate country resolved from your IP address as described in §3(c). Your language — whether detected for you or chosen by you — is remembered in your browser so that we do not have to ask again; see §10.2. Language is a display preference, not an identifier. We do not use it to advertise to you, to profile you, or to infer your nationality, ethnicity, or immigration status. Selecting a language yourself always takes precedence over detection.

3.1 Automatic Processing:

For Clearafi.ai enterprise clients, automatic profiling options are available for use as needed by clients. Such profiling is based on pricing plan and features included in each plan the user opts in for. Plans will be for individuals and for enterprise multi users. Individuals who use under enterprise multi user plans have the right to request human intervention where their employer applies such processing to their use of the platform and have the right to contest any decisions reached and to comment on the profiling where such profiling occurs.

4. User Rights Disclosure

Clearafi respects the privacy rights of all its users and here we list the policies granted under EU and Britain (GDPR) and California Privacy (CCPA/CPRA) regimes. Per those regimes, we list user rights which can be exercised by emailing us ad dev@clearafi.ai. Those rights are detailed as follows:

4.1 Rights Under GDPR:

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests or direct marketing
• Rights related to automated decision-making and profiling (Art. 22)
• Right to withdraw consent at any time (without affecting prior processing)
• Right to lodge a complaint with your supervisory authority

4.2 Rights Under CCPA / CPRA:

• Right to know what personal information is collected, used, disclosed, or sold
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing of personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights please contact Dev@clearafi.ai. We will respond within 30 days (GDPR) or 45 days (CCPA), with one possible extension of 30–45 days when reasonably necessary. We may need to verify your identity before processing your request.

5. Legal Bases for Processing:

Under the GDPR Article 6, Clearafi Processes user data as necessary for execution of the contract performance, account operation, and service provision, legitimate interests such as fraud prevention, security, and product improvement, where legally obligated such as for tax, compliance, and financial reporting requirements, and where the user gives explicit consent for processing.

6. Data Utilization:

Clearafi utilizes collected information for such purposes as providing, maintaining, evaluating, and improving our services and Website, fulfilling requests for information, and providing customer support.

7. Data Retention:

Clearafi retains user information as necessary to comply with legal obligations, resolve disputes, and enforce contracts. Data retention periods depend on account activity and the legal requirements for storage in relevant user jurisdictions.

8. Data Sharing:

Clearafi will disclose personal information and/or an IP address, when required by law or in the good-faith belief that such action is necessary to:

• Cooperate with the investigations of purported unlawful activities and conform to the edicts of the law or comply with legal process served on our company
• Protect and defend the rights or property of our website and related properties
• Identify persons who may be violating the law, the rights of third parties, or otherwise misusing our website or its related properties.

8.1 Advertising data sharing (Google & Meta)

To measure the effectiveness of our advertising and reach relevant audiences, Clearafi shares limited data with third-party advertising platforms — currently Google (Google Ads / Google Analytics) and Meta (Facebook/Instagram). This may include:

• Conversion and event signals — that a sign-up or purchase occurred, and its value — so we can measure campaign performance.
• A securely hashed (SHA-256) email address — a one-way, irreversible identifier used only to match your activity to an ad interaction. We do not share your raw email address, your questions, or any answer content with these platforms.

This sharing is transmitted securely and is gated by your Marketing cookie-consent choice (§1.5): for visitors in the EU/EEA/UK it is off unless you opt in, and elsewhere you can opt out at any time via the consent banner. You may also opt out of this data sharing for cross-context behavioral advertising by emailing privacy@clearafi.ai, which we will honour as an active request.

9. Data Selling:

Clearafi does not sell personal information as that term is defined under the CCPA/CPRA. We do share data for cross-context behavioral advertising. To opt out of this processing, please email privacy@clearafi.ai

10. Cookies:

A cookie is a small text file a website stores in your browser; "local storage" is a similar browser mechanism for keeping small amounts of data on your device. We use both, sparingly, and only for the purposes below. We do not use third-party advertising or cross-site tracking cookies.

10.1 Strictly necessary:

Strictly Necessary Cookies are those needed by the site to function. These cookies are enabled by default and will be enabled so long as the user utilizes the Clearafi’s website.

• cf_anon_id - Identifies your browser anonymously so we can count free daily queries and prevent abuse. Stored as a random identifier; we never store your raw IP address (see §11.4) It is a first-party cookie with a 30-day duration.
• cf_session - Keeps you signed in after email/password or OAuth (Google/GitHub) login. Holds your session token. It is a first-party cookie with a duration of up to 1 year, or until you log out.
• cf_beta_unlocked - Remembers that you entered the beta access password, so you are not prompted on every page. It is a first-party cookie with a 30-day duration.

10.2 Functional:

Functional cookies are stored on the user’s device and never sent to the Clearafi server. They improve the function of Clearafi’s online products. They are optional and the user will be prompted to choose whether to utilize these on the homepage of the website.

• cf_keys - Stores any AI provider API keys you choose to add ("bring your own key"). These stay in your browser and are sent only to make the AI calls you request. It is a first-party cookie that persists until cleared by the user or browser automatically.
• cf_stt_consent_v1 - Remembers that you accepted the voice-input notice, so it is shown only once. It a first-party cookie that is stored locally and persists until cleared.
• cf_queries_today - A local count of your free queries for the day. This is a first-party cookie that rolls with daily use or persists until cleared.
• cf_lang - Remembers the display language you selected, so the Platform and this policy open in that language on your next visit. It is written only when you choose a language yourself; automatic detection does not set it. It is a first-party cookie with a duration of 1 year.
• cf_consent - Remembers your cookie/analytics consent choice (accept/reject), so the banner is shown only once and analytics respects your choice. Stored locally until cleared.
• clearafi-theme - Remembers whether you chose the light or the dark appearance, so the site opens the way you left it. It is written only when you switch appearance yourself. Stored locally until cleared.
• clearafi_ref_code - Stores the referral code carried by an invitation link (?ref=) so that the person who invited you can be credited. It is written only when you arrive through such a link. Stored locally until cleared.
• cf_lang_suggest_dismissed - Remembers that you dismissed the notice offering this page in another language, so that it is not shown again. It holds neither a language nor an identifier, only the fact that you closed the notice, and it is discarded when you close the tab.

10.3 Analytics and performance:

Analytics cookies are utilized in providing Clearafi with needed information for site analysis. These cookies can be disabled when presented the option on the front page of the website.

• Google Analytics (_ga, _ga_*) - Usage analytics on app.clearafi.ai — page views, feature usage, and conversions, so we can improve the service. Loaded under Google Consent Mode v2: defaults to denied, so analytics cookies are set only after you Accept in the consent banner. This is a third-party cookie.
• PostHog cookies - Product analytics — understanding which features are used and diagnosing errors, so we can improve the service. This is a third-party cookie.

10.4 Infrastructure / security:

Infrastructure and security cookies are used to improve our content provision and to protect Clearafi and its users from online security threats. These cookies can be disabled when presented the option on the first page of the website.

• __cf_bm and similar - Bot detection, traffic security, and content delivery. Set by our CDN, Cloudflare and not used for advertising. These are third-party cookies.

10.5 Managing cookies and consent:

On first visit we show an in-app consent banner with granular controls: Accept all, Reject all, or Manage preferences by category:

• Strictly necessary — always on (sign-in, security, core functionality).
• Analytics — Google Analytics measurement.
• Marketing — advertising measurement & audiences for Google Ads and Meta (Facebook/Instagram) Pixel.

Google runs under Consent Mode v2. Behaviour is geo-gated: for visitors in the EU/EEA/UK every non-essential signal defaults to denied (opt-in) — nothing is set until you Accept or enable a category. Outside the EU/EEA/UK, Analytics and Marketing are on by default (opt-out); the banner is still shown so you can reject or adjust them at any time. (Region is inferred from your browser timezone; if it can't be determined we default to the stricter opt-in behaviour.) The Meta Pixel loads only with Marketing consent. Your choice is stored per-category in cf_consent (JSON). On clearafi.ai you can change it at any time from the “Manage preferences” link in the footer of any page, which reopens this banner with your current choice; you can also reset it by clearing your browser storage.

11. Security Procedures:

11.1 Encryption in transit:

All traffic between your browser and Clearafi is encrypted using TLS (HTTPS). Connections are terminated at our own web server; plaintext HTTP is not served for application traffic.

11.2 Authentication and access control:

Sign-in uses first-party email + password or OAuth (Google, GitHub, and Sign in with Apple in our mobile apps) — we no longer use Supabase or magic-link login. Passwords are stored only as salted hashes (never in plaintext). Sessions are carried as signed, expiring tokens (the cf_session cookie). Administrative access to production systems is limited to authorized personnel.

11.3 How we handle AI provider keys:

• Your own keys (BYOK): if you add your own AI provider API keys, they are stored only in your browser and are transmitted solely to perform the specific AI request you make. We do not persist them in our database.
• Our keys: keys used for the free tier are held as server-side secrets and are never exposed to clients.
• Programmatic API keys: keys you generate for the Clearafi API are stored as salted SHA-256 hashes — we keep only a hash and a short non-secret prefix, never the full key, so the plaintext key cannot be recovered from our systems.

11.4 Data minimization and anonymization:

For anonymous (logged-out) usage we do not store your raw IP address. We derive a one-way hashed identifier from a coarse network signal combined with a random per-browser value, used only for daily limits and abuse prevention.

11.5 Voice input:

When you use voice input, audio is processed for transcription only and is not stored by Clearafi. In Chrome and Edge on the web, your browser's own speech service does the transcription and Clearafi receives only the text. In Safari and Firefox on the web, and in our mobile apps, your recording is sent to Clearafi, and our server sends it to OpenAI's Whisper service to convert it to text; we do not store the audio, and only the resulting text becomes part of your question. Before first use, you are asked for consent ("Voice input sends your speech to Clearafi for transcription. Audio is not stored.").

11.6 Infrastructure and hosting:

The production app (app.clearafi.ai) runs on AWS (EC2 compute + managed RDS Postgres), with transactional email via AWS SES; the beta/staging environment runs on DigitalOcean (email via Resend). Neither environment sits behind a Cloudflare proxy: DNS resolves directly to our own servers, which terminate TLS themselves. (We do use Cloudflare Turnstile as a bot-check service, but that does not put Cloudflare in the request path.) We apply standard hardening including HTTP security headers (e.g. clickjacking protection via X-Frame-Options) and a Content-Security-Policy, plus server- and database-level access restrictions.

11.7 Abuse and rate-limiting protections:

We apply per-account and per-key rate limits, burst limits, daily spend ceilings, and automated abuse detection to protect the service and your data from misuse.

11.8 Security testing:

We perform internal security reviews of code changes before release and monitor our dependencies for known vulnerabilities.

11.9 Vulnerability disclosure:

Clearafi welcomes reports of security issues. Please contact security@clearafi.ai. We aim to acknowledge reports within 72 hours and ask that you give us reasonable time to remediate before public disclosure.

11.10 Data retention and deletion:

Clearafi retains your queries, results, account data, and related records for as long as your account is active or as needed to provide the service. You can request deletion of your account and associated personal data at any time from Profile → Delete account, in the Clearafi mobile app or at app.clearafi.ai. Deletion runs on a 30-day grace period (during which you can cancel), after which we permanently delete your account, cancel any active billing (a subscription bought through the Apple App Store or Google Play must be cancelled in your App Store account; see §16.1 of the Terms), irreversibly redact the content of your past queries and results, and remove your authentication record. This supports your right to erasure under GDPR Article 17 and similar laws.

Deleting your account removes your images and any images you uploaded, along with your conversations and account data.

11.11 Approximate location:

Some questions only have a correct answer for where you are — weather, "what's on today", local news, transit, opening hours. Answering those for the wrong place is not a privacy win; it is just a wrong answer. To get them right we use two signals, both approximate, both used only to answer the question you just asked, and neither ever stored:

• Approximate city, from your IP address. Derived at request time using a local MaxMind GeoLite2 database. This resolves to a city and region — for example "Surat, Gujarat" — never a street or an address. It requires no permission and no action from you, because your IP address is already part of every web request. It is also frequently wrong: mobile networks, corporate connections and VPNs can place you in a different city, which is why our AI models are instructed to state which place they answered for so you can correct them. Your raw IP address is not stored for this purpose (see §11.4).
• Approximate position from your device. For signed-in accounts this is on by default, because answering local questions accurately is part of what the service does. Your browser still asks your permission before sharing anything — we cannot and do not bypass that, and declining costs you nothing beyond the city-level accuracy above. Coordinates are rounded to roughly one kilometre before they leave your device, and rounded again on our servers, so we never hold a precise position. Visitors who are not signed in are not asked at all, and this stays off for them.

You can turn the device-position signal off at any time in Profile → Location, and your browser's own site permissions control it independently of us. Turning it off is remembered and takes effect immediately.

Neither signal is stored in your account, our database, or our logs — there is nothing to export and nothing to erase. We do not use either signal for advertising, profiling, or building any picture of where you go over time; each request is answered and forgotten.

11.12 Sub-processors:

We share the minimum data necessary with the following service providers, who process it on our behalf:

• OpenAI - AI model responses (GPT), voice transcription (Whisper, used in Safari and Firefox on the web and in our mobile apps), and image generation and editing. Data shared: Your query text; audio for transcription; image prompts and any image you upload for editing.
• Anthropic - AI model responses (Claude). Data shared: Your query text.
• Google - AI model responses (Gemini), browser speech transcription on Chrome/Edge, and image generation and editing. Data shared: Your query text; voice audio (browser speech); image prompts and any image you upload for editing.
• Google Analytics - Usage analytics on app.clearafi.ai (Analytics consent); ad signals + Enhanced Conversions for Google Ads (Marketing consent). Data shared: Usage events, page paths, cookie-based identifiers, and a SHA-256-hashed email address (Enhanced Conversions) after consent.
• Meta (Facebook) - Advertising measurement & audiences via the Meta Pixel (browser) and the Conversions API (server-side, deduped by shared event_id) — both gated on Marketing consent. Data shared: Page/event signals + a SHA-256-hashed email address for ad measurement, after Marketing consent.
• DeepSeek - Independent "judge" model that synthesizes the consensus answer. Data shared: Model responses to your query.
• Mistral, Cohere, AI21 - Additional AI model responses when you select them. Data shared: Your query text (only if you choose that model).
• Stripe - Payments and subscription billing. Data shared: Billing details (handled by Stripe; we do not store card numbers).
• Amazon Web Services (AWS) - Production hosting (EC2), database (RDS Postgres), and transactional email (SES). Data shared: All service data, as processor; email address + message content for SES.
• Resend - Transactional email on the beta/staging environment. Data shared: Email address, message content.
• Resend (marketing account) - Onboarding and activation email sequence, run by our marketing team from a separate Resend account. Data shared: Email address and registration date.
• PostHog - Product analytics on legacy (non-SPA) pages. Data shared: Usage events, anonymised identifiers.
• Cloudflare - Content delivery, traffic security. Data shared: Network/technical data.
• DigitalOcean - Hosting and database (beta/staging environment). Data shared: All service data, as processor.
• Apple - App Store distribution, in-app purchases, and Sign in with Apple in our iOS app. Data involved: Apple processes in-app payments and sends us a purchase confirmation, not card details; Apple sign-in identity.
• Google (Google Play and Firebase) - Google Play distribution and billing, and Firebase Analytics in our Android app. Data involved: Google processes in-app payments and sends us a purchase confirmation, not card details; app analytics data, including the Android advertising ID (AAID), which Firebase uses for analytics.

11.13 Onboarding emails:

When you create a Clearafi account and confirm your email address, we add your email address to a mailing list used to send a short sequence of onboarding messages — how to run your first verdict, what the consensus score means, and the features most people miss. This is separate from the service emails you always receive, such as email confirmation, password resets and payment receipts.

That list is hosted by Resend, our email provider, in an account operated by our marketing team. The only information we send is your email address and the date you registered. We do not send your questions, your verdicts, your payment details, or anything else.

Every message has an unsubscribe link, and unsubscribing stops the sequence immediately. Unsubscribing does not affect service emails — you will still receive confirmations, password resets and receipts, because those are part of providing the service.

If you delete your account, we remove your address from that list as well as from our own systems.

11.14 Images you create and upload:

When you use image generation, your prompt is sent to the AI provider you selected — currently Google (Gemini) or OpenAI (GPT) — which creates the image and returns it to us. If you upload an image to edit or enhance, that image is sent to the same provider.

Your prompts and uploaded images are not used to train the providers' models under our business agreements with them.

Location data is removed from images you upload before they are sent.

Images you create, and images you upload, are stored in your account so you can find them again. They are deleted when you delete them, when your account is deleted, or on the schedule in How long we keep images below — whichever comes first.

For rules regarding uploading photos containing other individuals, please refer to Section 12.1 (Images of other people) of our Terms of Service.

How long we keep images:

Your plan	How long your images are kept
Free	60 days from the day the image was created
Paid	For as long as your subscription is active
If you move from paid to free	60 days from the day you downgraded — then the free rule applies

Images you uploaded to edit are kept on the same schedule as the images they produced.

If you downgrade, nothing is deleted straight away: you get a fresh 60 days for everything in your account, including images older than 60 days. We email you 15 days before anything is removed so you can download what you want to keep.

11.15 Location of Data Processing under the GDPR:

Data of EU users is only processed in the EU and in the US under the Data Privacy Framework adequacy decision. Whether a user is based in an EU is determined by the user’s IP address. Accordingly, Clearafi cannot be held accountable for EU users using VPNs with addresses outside of the EU.

11.16 Incident response and breach notification:

We maintain procedures to detect and respond to security incidents. If a personal-data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users as required by applicable law.

11.17 Mobile apps (iOS and Android):

Our mobile apps use the same server as app.clearafi.ai, and everything else in this policy applies to them. This section covers what is specific to the apps.

Device permissions. The apps request only the following permissions. You can refuse them, or withdraw them later in your phone's settings.

• Microphone (iOS and Android) and Speech recognition (iOS) — optional voice input into the question box. Your recording is sent to Clearafi and transcribed by OpenAI's Whisper service; the audio is not stored (see §11.5).
• Camera (iOS and Android) — to take a photo to edit inside the app.
• Add to Photo Library (iOS only) — to save a generated image to your photos when you tap Download. This is write-only: the app cannot read your photo library.

Files and photos you attach are chosen through your phone's own file picker, which needs no permission. The apps do not request access to your location, contacts or notifications, so they never share your device's position (§11.11).

Tracking permission and advertising. The apps do not request tracking permission, and our iOS app never shows Apple's "Allow tracking" prompt. The apps show no advertising and contain no ad networks.

Analytics. Our Android app uses Google Firebase Analytics, which reports into the same Google Analytics property as our web app. Firebase uses the Android advertising ID (AAID) for analytics. In version 1.0, app data is not used for Google Ads: no app conversions or audiences are shared with Google Ads. Version 1.0 of our iOS app contains no analytics at all and does not use Apple's advertising identifier (IDFA). If this changes, we will update this policy before the change takes effect.

App and device information. The apps tell our server which platform (iOS or Android) and app version you are using. We keep this for our own usage statistics; it is never sent to the AI models.

What the AI models receive. Exactly the same as on the web: your question, follow-ups, and any files or images you attach. The apps send nothing extra to the AI providers.

Sign-in and storage on your phone. The apps offer Sign in with Apple, as well as Google and GitHub sign-in as on the web. Your session token is kept in your phone's secure storage (Keychain on iOS, Keystore on Android), and your app settings are stored on your device.

Purchases. Subscriptions bought in the app are processed by Apple (App Store) or Google (Google Play). We receive a purchase confirmation, not your card details. The apps do not sell through Stripe; if you subscribed on the web through Stripe, you keep that subscription and manage it on the web.

Deleting your data. You can delete your account from the app itself (Profile → Delete account), as described in §11.10. Uninstalling the app does not delete your account.

12. Links:

This Website may contain links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

13. Children’s Privacy:

Children under the age of 18 are expressly forbidden to utilize Clearafi’s services.

14. Age Assurance and Biometric Data Processing:

To ensure that unauthorized minors do not access our platform, Clearafi utilizes facial age estimation technology provided by a third party.

• Sub-processor: We utilize a third-party service provider to process this information.
• Data Retention: Our third-party processor does not retain any user biometric information once its age estimation analysis is complete. Clearafi does not store or hold your facial biometric data on our servers.
• Alternative Methods: If you do not wish to consent to the biometric facial scan, Clearafi provides a free alternative route for age verification through the secure submission of an identity document. This provides identical outcome and access rights as the facial age recognition path.
• EU Users: For users located in the European Union, biometric processing is routed exclusively to EU-region servers to comply with GDPR data residency requirements and restrictions on international transfers, and the images do not cross borders to US infrastructure.
• US Users: For users in specific US states governed by biometric privacy laws (such as Illinois, Texas, and Washington), specific written consent will be required prior to opening the camera, or alternatively, facial age estimation may be restricted in your region, requiring identity document verification.

15. Opt out of Data Sharing:

California residents may opt out of data sharing by emailing a request to privacy@clearafi.ai

16. Consent:

By using any Clearafi website, web app, or software, you consent to the collection and use of information as specified above. If we make changes to our Privacy Policy, we will post those changes on this page. By utilization of our products, you agree to review this page frequently to remain up-to-date with the information we collect, how we use it, and under what circumstances we disclose it.

17. Privacy Policy Changes:

From time to time, we may change terms of this privacy policy. In the event material changes occur to the privacy policy, users will be notified by email or by prominent visual notifications on Clearafi’s platforms.

When we change this policy, the English version is updated first and the translations follow. The date shown at the top of each version tells you which version you are reading.

18. Contact:

For questions about this privacy policy, please contact privacy@clearafi.ai.

Effective Date: October 7, 2026

1. Introduction

Thank you for using our services. We are Clearafi, LLC (“Clearafi”) These Terms and Conditions govern your use of our website, services, and products. Any interaction with Clearafi or any related service or website indicates that the user agrees to be bound by these terms and conditions and to be use our services in conformity with our privacy policy.

2. User Responsibilities

Users agree to use our products in conformity with their local legal requirements and ethical standards. Per their use of any Clearafi product or service users are prohibited from any of the following:

• Users may not utilize Clearafi to violate any relevant laws in any jurisdiction. All use of Clearafi must conform to relevant legal standards
• Users agree that they will not attempt to gain any unwarranted access to any Clearafi property beyond those offered by Clearafi as part of the user’s service package. This includes gaining access to employee or administrative accounts or access to Clearafi Data absent our explicit permissions.
• Clearafi users agree not to use Clearafi in any way that is designed to cause harm to others. Users further agree not to use Clearafi in any deceptive or fraudulent manner or to attempt to gain or exercise any undue influence over others.
• Clearafi users agree not to reverse engineer, decompile, or disassemble any part of the Services; Scrape, crawl, or extract data from the Services by automated means without our written consent; Resell, sublicense, or commercially exploit any Clearafi service or intellectual property without authorization.

3. Age Restriction

Clearafi, its programs, services, and applications and all its related products are for use only by individuals 18 years old and above. By using our products, you represent that you are 18 years old or over.

4. Account Registration

By using Clearafi, users acknowledge that they are responsible for the maintenance of the confidentiality of their personal information, including their password, account access, and any other information used to gain account access such as 2FA systems. Clearafi is not responsible for personal information confidentiality breaches that occur due to user error/failure to conform to confidentiality standards.

Approximate location for signed-in accounts. Creating an account enables approximate device location by default, because answering location-dependent questions accurately is part of the service. Your browser will still ask your permission before any position is shared, and declining costs you nothing beyond city-level accuracy. You can turn this off at any time in Profile → Location. Approximate location is used only to answer the question you asked and is never stored. See §11.11 of the Privacy Policy.

5. Privacy Compliance

Clearafi complies with the General Data Protection Regulation (GDPR) and the California Privacy Rights Act (CPRA). Accordingly, in our Privacy Policy, separately laid out and posted here on our website, we detail the manner in which we acquire, save, utilize, maintain, and protect your data. You have the right to access your data, the right to correct your data where it is incorrect, and the right to request to have your data deleted once it is no longer necessary to provide any services. You further have the right to request to opt out of data sharing and the use of your data for marketing services. By interacting with Clearafi products, users agree to periodically check to ensure for changes in all policies/agreements.

6. Limitation of Liability

To the furthest extent allowable under the relevant legal standards, Clearafi disclaims all liability from the use of or interaction with any Clearafi program or property. By utilizing our platform, users agree to release Clearafi from liability which the user incurs as a result of interaction with Clearafi or any other product or service.

7. Disclaimer of Warranties

To the furthest extent allowable under the relevant legal standards, Clearafi disclaims all warranties. Clearafi services are provided “as is” without warranties of any kind, express or implied.

8. Governing Law

Users agree that the laws governing their relationship with Clearafi LLC will be those of the United States of America and specifically, the state of Florida. By utilizing Clearafi, users agree that any legal dispute that arises will take place in Florida. Any disputes arising out of or related to the use of our service shall be resolved through binding arbitration in accordance with the rules of the American Arbitration Association.

9. Changes to Terms

We reserve the right to modify these Terms at any time, without notice. Your continued use of our service constitutes your acceptance of the modified Terms.

When we modify these Terms, the English version is updated first and translations follow. The date shown at the top of each version indicates which version you are reading.

10. Disclaimer for Results from other AI

By using Clearafi, users recognize that LLMs and other AI products can and do hallucinate and produce false responses. While Clearafi assists users in assessing the reliability of the contents generated by LLMs and other AI products, Clearafi is not responsible for those results or for data processing performed by those services nor is Clearafi responsible for any user actions resulting from reliance on those responses. In utilizing those services, each user recognizes that AI results can be incorrect and agrees to verify where necessary the veracity of any AI generated output.

11. Disclaimer for User Entries

By utilizing Clearafi’s services users agree not to hold Clearafi responsible for user entry personal, sensitive, privileged, or inappropriate information into their AI prompts. To the extent legally allowable, Clearafi disclaims all liability resulting from user entry of information into their prompts.

12. Prohibited Input Types

Users must not submit to Clearaf’s AI systems:

• Personal data of third parties without their consent;
• Confidential, classified, or proprietary information you are not authorized to disclose;
• Content designed to generate misinformation, deepfakes, or deceptive materials;
• Malicious code, exploits, or instructions for illegal activity.

12.1 Images of other people:

If you upload an image that contains someone else, you confirm that you have the right to do so and that you have any permission that person's local law requires.

You must not upload images of other people in order to:

• create sexual or intimate imagery of them;
• impersonate them, or make it appear they said or did something they did not;
• identify, track or profile them; or
• harass, defame or endanger them.

We may remove content and suspend accounts that break these rules.

If an image of you has been uploaded to Clearafi by someone else, contact us at help@clearafi.ai and we will act on it.

13. Disclaimer of Responsibility for Third Party Websites

In utilizing LLMs and other AI services, users accept that Clearafi is not responsible for any content generated by other AI services not is it responsible for any actions users take as a result of information obtained from those services. Clearafi is not in control of and not responsible for any product or content generated or produced by any third party.

14. Entire Agreement

These Terms constitute the entire agreement between you and Clearafi regarding our service.

15. Language and Translations

These Terms are available in English, Spanish, French, German, Portuguese (Brazil), Italian, Japanese, Hebrew, and Hindi. The version shown to you is selected automatically from your browser's language settings; you can change it at any time using the language selector.

The English version is the version we draft, maintain, and update first, and it is the reference version of these Terms. Translations are provided for your convenience and are intended to carry the same meaning. In the event of a genuine conflict between a translation and the English version, the English version governs — except where mandatory consumer-protection law in your country of residence gives the version in your own language precedence, in which case that version governs as to you. Nothing in this section limits any right you have under the mandatory law of your country.

16. Mobile Apps and App Stores

These Terms also apply to the Clearafi apps for iOS and Android. The following applies in addition when you download an app from the Apple App Store or Google Play (each an "App Store"):

• Who the agreement is with. These Terms are between you and Clearafi only, not with Apple or Google. Clearafi, not Apple or Google, is solely responsible for the app and its content.
• License. We grant you a limited, non-exclusive, non-transferable, revocable license to use the app on devices you own or control, as permitted by the App Store's usage rules.
• Support and maintenance. Clearafi alone provides support and maintenance for the app. Contact help@clearafi.ai. Apple and Google have no obligation to provide any support or maintenance for the app.
• Warranty. To the extent any warranty applies under law and is not effectively disclaimed in §7, Clearafi, not Apple or Google, is responsible for it. If the app fails to conform to an applicable warranty, you may notify Apple, and Apple will refund the purchase price of the app (if any) to you; to the maximum extent permitted by law, Apple has no other warranty obligation with respect to the app.
• Claims. Clearafi, not Apple or Google, is responsible for addressing any claims by you or any third party relating to the app or your use of it, including product liability claims, any claim that the app fails to meet a legal or regulatory requirement, claims under consumer protection, privacy or similar laws, and any claim that the app or your use of it infringes a third party's intellectual property rights.
• Legal compliance. You confirm that you are not located in a country subject to a U.S. Government embargo or designated as a "terrorist supporting" country, and that you are not listed on any U.S. Government list of prohibited or restricted parties.
• Third-party terms. You must comply with any applicable third-party terms when using the app, such as your mobile carrier's data plan.
• Third-party beneficiaries. Apple and its subsidiaries are third-party beneficiaries of these Terms and, once you accept them, have the right to enforce them against you as they relate to the iOS app.
• Updates. We may release updates to the app, which your device may install automatically depending on your settings.

16.1 In-app subscriptions:

• Subscriptions bought in the app are billed by Apple or Google to the payment method in your App Store account, under the App Store's terms.
• You manage and cancel these subscriptions in your Apple ID or Google Play account settings, under the App Store's rules on renewal and cancellation.
• Deleting the app, or deleting your Clearafi account, does not cancel a subscription bought through an App Store. To stop being charged, cancel it in your App Store account settings.
• Refunds for in-app purchases are handled by Apple or Google under their refund policies.
• Subscriptions bought on the web through Stripe are managed on the web at app.clearafi.ai.

By using our service, you acknowledge that you have read, understand, and agree to these Terms of Service.