Privacy Policy

Clutch AI is operated by Golden Gecko Technology Limited, a company incorporated in Hong Kong SAR.

This Privacy Policy explains what information Clutch AI collects, how it is used, and the rights you have regarding your information. By using the service you consent to the practices described below.

1. Information we collect

• Account information. When you sign in we collect your email address, and (if you sign in with Google or Apple) the name and profile image those providers share under the permissions you approve. If you use Apple's Hide My Email, we receive the relay address Apple creates rather than your real one. In the mobile app, a signed-in session is kept in the device Keychain.
• Health and training information. What you tell us about your injury or goal, the recovery or performance plan built for you, which exercises you complete and when, the pain score you log for an exercise, your daily check-in (pain, fatigue and sleep), your rest-day check-ins, your answers to the red-flag screening questions if the app asks them, and any flag those answers set on your account for a clinician to review. This is health data. It is used only to build and adjust your plan and to show your own progress back to you. It is never sold and never used for advertising.
• Conversations. The text of every message you send and every response generated, including any associated metadata (timestamps, conversation titles, model used, retrieved citations).
• Feedback. When you rate a response, we store your thumbs up/down vote, the reason category you select on a thumbs-down (for example "inaccurate" or "too generic"), and any optional free-text comment you add — linked to that response and your user record. Comments may contain personal or health detail that you choose to include.
• Calendar connection (optional). If you connect Google Calendar, we store an encrypted refresh token so we can keep writing your training sessions to your calendar, and a record of whether the last sync succeeded. We never read your other events. You can disconnect at any time from your profile, which deletes the token.
• Apple Health (optional). If you connect Apple Health in the app, we read your sleep (duration and stages), resting heart rate, heart-rate variability, step count and workouts, one summary per day, and store them with your account so you can see them on Progress. This is health data. We never write to Apple Health, never use this data for advertising, and never share it with anyone. In this version it is shown to you as recorded and does not change your plan; your daily check-in stays yours to fill in. Turn it off in the app or in the Health app at any time.
• Training groups (optional). If you join a group, its members see your name, your current streak and how many sessions you completed this week — and nothing else. Leaving the group removes you from that roster.
• Anonymous browsing identifier. Before you sign in we set a long-lived HTTP cookie (clutch_anon_id) tied to a server-side anonymous user record so your conversations are not lost between visits.
• Waitlists. If you join a waitlist — the "Get the app" mobile form (email and platform preference) or the "Notify me" form for upcoming features — we store your email, and a link to your account when you are signed in.
• Operational metadata. Standard server logs (IP address, user-agent, request times) for security, debugging, and abuse prevention.

2. How we use information

• To operate the service and respond to your queries.
• To improve the service — including reviewing aggregated and de-identified conversation patterns to refine the clinical rulebook, retrieval quality, and prompt design.
• To improve response quality and the clinical rulebook — including reviewing the feedback (votes and comments) you provide on responses.
• To contact you about service updates, security notices, or — if you joined the mobile waitlist — the mobile launch.
• To detect, prevent, and respond to abuse or security threats.

3. Third parties we use

• Resend — sends transactional email (magic-link sign in, waitlist confirmations). Your email is shared with Resend for delivery purposes.
• Google — handles sign-in when you choose "Continue with Google" on the web or in the app. Google provides us your name, email, and profile image under the scopes you approve. If you connect Google Calendar, we additionally request the calendar.events scope, which lets us create, update and remove the training events we schedule for you in your Google Calendar. The event titles and descriptions we write name your exercises, their prescriptions and session times; nothing from your conversations is written to the calendar.
• Apple — handles Sign in with Apple in the mobile app. Apple provides your name and either your email or a Hide My Email relay address, on your first sign-in only.
• Stripe — processes subscription payments on the web. We never see or store your card details; Stripe shares with us the subscription status and billing period needed to run your account.
• LLM provider — your message text and relevant retrieved context are sent to a large-language-model provider (currently Google Gemini) to generate the response. We minimise what is sent to what is needed to produce the answer.
• Database hosting — your account, conversations, and waitlist record are stored with a managed Postgres provider.
• Meta (Facebook) Pixel — on our public web pages only: the landing page, the Learn articles, pricing, and the sign-up flow until your account is created. Meta receives the address of the page you viewed, standard browser information, and a “Lead” event when you sign up, and sets the _fbp cookie. We use it to measure our advertising. The pixel never loads on a signed-in page, so nothing about your plan, check-ins or conversations is ever visible to it.
• PostHog — product analytics across the web app. It receives a pseudonymous identifier (your internal account ID, never your email or name), the pages you visit, and a small set of product events such as “session completed” recorded as yes/no, never a pain score or message text. Session recording is off.
• Google Analytics 4 — page-level usage statistics for our web pages, under Google's standard analytics cookies.

We do not sell your personal information. We do not use your conversation contents for advertising.

International processing and transfers. Some of the providers above process data on infrastructure located outside your country. In particular, Google processes sign-in, Calendar, and the message text and retrieved context we send to Gemini on its global infrastructure. Where your information is transferred internationally, we rely on the provider's safeguards and send only what is needed to deliver the service. You can request access to, or deletion of, your data at any time via support@beclutch.fit.

4. Data retention

Account and conversation data are retained for as long as your account exists. Anonymous-user conversations are retained for up to 12 months from last activity. You may request deletion at any time (see section 6). After deletion, residual copies may persist in encrypted backups for up to 90 days before being overwritten.

5. Cookies

Clutch AI uses cookies for the following purposes only:

• Authentication. Session cookies issued by our auth provider (NextAuth) to keep you signed in.
• Anonymous identity. clutch_anon_id — links a pre-sign-in visitor to their conversations.
• Theme preference. Stores your light/dark mode choice.
• Disclaimer acknowledgment. clutch:disclaimer:acknowledged — records that you have read and accepted the medical disclaimer.
• Sidebar preference. clutch:sidebarCollapsed (stored in localStorage rather than a cookie).
• Advertising measurement (public pages only). _fbp — set by the Meta Pixel on the landing page, Learn articles, pricing and sign-up. Never set on a signed-in page.
• Product analytics. PostHog stores a pseudonymous visitor ID (ph_*) and Google Analytics its standard cookies (_ga, _ga_*). These run across the web app.

Those are the only third-party cookies we set. The Meta cookie is limited to our public pages; the analytics cookies carry a pseudonymous identifier and never your health data or message text.

6. Your rights

Export. You can download everything your account holds at any time — every plan, session, check-in, screening answer and conversation — as a single JSON file, from Profile → “Export my data” on the web or in the app. No request needed.

Deletion and correction. Email support@beclutch.fit and we will delete your account and everything linked to it, or correct an entry. Deletion removes your data from our systems; it does not recall data already processed by the providers in section 3 under their own retention terms. Depending on your jurisdiction, you may also have the right to lodge a complaint with a supervisory authority.

Tracking, stated per surface. On our public web pages we use the Meta Pixel to measure our advertising, which means Meta learns that your browser visited those pages and can connect that to your Meta account if you have one. Once you are signed in, the pixel is not loaded. Across the web app we use PostHog and Google Analytics to understand how the product is used, under a pseudonymous identifier; we never send them your health data or message text. The mobile app carries no advertising or analytics trackers at all, and declares this to Apple in its privacy manifest.

7. Security

We use industry-standard practices to protect your information, including TLS for transport, encrypted database storage at rest, and scoped credentials for third-party integrations. No service can guarantee absolute security; you use Clutch AI at your own risk.

8. Children

Clutch AI is not directed at children under 16 and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, email us at the address below.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced in-product or by email when reasonable.

10. Contact

Privacy questions or requests can be sent to support@beclutch.fit.