Privacy Policy

1. Who we are and what this covers

Clark is a product of Clarity Search AI, Inc. (“Clarity Search AI”, “we”, “us”), a company based in Raleigh, North Carolina, in the United States. We are responsible for the personal information this policy describes (the “controller”, in the words of laws such as the GDPR).

This policy covers Clark for Mac, the Clark dashboard on the web, the server that Clark and your connected AIs use, and this website (together, “Clark”). It doesn’t cover the AIs you connect or other services you use with Clark, which have their own privacy policies, but it says what Clark gives them. Our Terms of Service apply too.

2. What Clark collects

• Your account. Your email address and password (stored only in hashed form by Supabase, our database provider), the name Clark calls you, your time zone, your language and your appearance setting. You can make your account in Clark for Mac or on the web; either way, we email you a code and a link to confirm your address.
• What Clark hears and saves. While Clark listens, the text of what was said, never audio: each line with who said it (you, or a letter for another voice, with the name your call app showed for that person if you turn on names in calls), when, in which language, and which listening mode Clark was in. From that text Claude writes each conversation’s title, summary and topics, the names it heard for other people, and the to-dos, promises and details it saves for you, each with its context. Conversations include what other people say.
• Names in calls. Off unless you turn it on; its switch is in Clark’s settings on your Mac (Listening, Who is talking). It works only during a call whose sound Clark hears, and only if you allow Clark to use macOS Accessibility. Then Clark reads the names of the people in the call, and who the call app shows as speaking, from the call app’s window, so it can tell who said what. It reads them in the Zoom app, in Google Meet in Chrome, Edge, Brave or Arc, and in the new Microsoft Teams. In other call apps, the people you talk with keep their letters. It reads only those names, never your screen’s images, video, chat or captions. Only the names of people who spoke are kept, each matched to their voice, with that conversation, and they go where its text goes. The names of everyone else are never saved.
• Ask Clark and “Hey Clark”. Your questions to Clark and its answers, kept as your chat history. A spoken answer is also kept in the conversation it was said in.
• Your AI connections. Which AIs and apps you connect, the names and notes you give them, the profile each AI writes about itself, what each one may see, your rules for which AI gets which to-dos, what each AI did in Clark (marked an item handled, said a task is done, corrected an item, added a to-do or deleted one, with its note on why) and when you reviewed it. For a key you make to connect an AI, we keep only a scrambled form of it (a hash) and its first few characters.
• Instructions to your AIs. When you write an instruction to one of your AIs about an item, for example in answer to a reminder from Clark about that AI’s work, we keep it with that item and show it to that AI, as long as it can see the item, and to no other AI.
• Your feedback. When you mark an item wrong or not useful, keep it, edit it or give it to another AI, so Claude does better for you next time.
• How you heard about Clark. The answer you pick in Clark’s setup, if you pick one. It is kept with your profile and never used with your conversations.
• Recording notices. That you accepted Clark’s recording note, which version and when. For each conversation, when Clark showed its call banner or its nudge about someone new talking, and when you copied the notice, said you told people or paused Clark, with the time, the call app’s name and the listening mode, never what was said.
• Your Macs. If you used an early version of Clark for Mac: each Mac’s name as set in macOS, the version it ran and when it last saved.
• Usage counts. How many requests you made each hour and each day, as numbers only, to apply usage limits and to see how much Clark is used. For each time Claude reads a conversation: which model ran, how much it read and wrote, the estimated cost and whether it worked, never any text.
• Activity log. A record of actions in your account, such as an export or a change to an AI connection, with ids and counts, never content.
• Request logs. Like any online service, Netlify and Supabase record your IP address, the time, the address requested and your browser or app version when Clark, the dashboard or this website is used. Clark’s own server logs hold ids, error codes and counts, never your words, questions or searches.
• Update checks. About every six hours, Clark for Mac asks this website for its latest version. It sends only the version you have, never your account or conversations; the website sees your IP address and the time, as any website does.
• Model downloads. During setup, Clark for Mac downloads its speech and voice models once from Hugging Face, which sees your Mac’s IP address and the time, nothing else about you.
• This website. Only the request logs above. It has no forms, no accounts, no cookies and no analytics.

3. What stays on your Mac

• Audio. Clark keeps no audio, and speech audio never leaves your Mac. While Clark listens, the last 24 seconds of sound are held in memory to be turned into text, then overwritten. Audio is never written to disk.
• Speech to text. Clark turns speech into text on your Mac, with its own speech model or, if that can’t be used, Apple’s speech recognition, which also runs on your Mac.
• Names in calls. Clark reads the names in the call app’s window on your Mac, only during a call whose sound it hears and only if you turned names in calls on and allowed Accessibility. What it reads stays in memory, and it matches names to voices on your Mac. Only the names of people who spoke are saved, with the conversation, and the names of people who didn’t speak never leave your Mac. You can turn it off in Clark’s settings on your Mac (Listening, Who is talking), or remove Clark from Accessibility in System Settings, Privacy & Security.
• Your voice profile. When you teach Clark your voice, it keeps a voice profile on your Mac: numbers that describe your voice, never a recording. When you mark a line “Not me”, Clark adds numbers that describe that other voice, up to 20 of them, so it isn’t taken for yours again. Your voice profile is never sent to us or anyone else, and it is removed when you sign out or teach Clark your voice again.
• Before you take part. Nothing from a conversation leaves your Mac until you have spoken in it for about 20 seconds, or a call is on in an app such as Zoom or Teams. The exception is a question you ask Clark, which is sent right away so Clark can answer it. A conversation that ends without you, such as a TV or people nearby, is forgotten, never saved or sent.
• Text waiting to upload. Kept on your Mac, readable only by your user, until it is uploaded, and deleted when you sign out.
• Reminders. Clark’s reminders about what your AIs did are notifications on your Mac, shown only when something is waiting for you: every 3 hours, unless you choose every hour, every 6 hours or once a day, or turn them off, in Clark’s settings (Reminders). If you turn on Say reminders out loud, Clark says them in the voice of its spoken answers, which is ElevenLabs unless you turn it off. An answer you give a reminder while your Mac is offline waits on it for up to 24 hours until it can be sent, and is deleted when you sign out.
• Your session. Kept in your Mac’s Keychain until you sign out.
• The Clark window. What it shows is held in memory only, and cleared when you sign out or quit.
• Logs. Clark for Mac’s logs hold counts and error codes, never words or audio.

4. How we use it

We use the information above only:

• to run Clark: turn your conversations into saved items, show them to you, answer your questions, remind you to look at what your AIs did and read answers and reminders aloud;
• to give the AIs you connect what your settings allow them to see, and the instructions you write to them;
• to keep Clark secure, prevent abuse and apply usage limits;
• to send the two emails Clark sends: one to confirm your email address and one to reset your password (we send no marketing email);
• to fix problems and keep Clark working, using counts and error codes rather than your content;
• to follow the law, and to protect our rights and other people’s.

People at Clarity Search AI don’t read your conversations or what Clark saved unless you ask us to (for example, to look into a problem you report), to investigate abuse or a security issue, or when the law requires it.

Conversations can include sensitive things about you or others. Claude is told to save private details, such as health, money troubles or relationships, only when you ask Clark to remember them, but the text of a conversation stays in your account until you delete it.

Where the GDPR or the UK GDPR applies, we rely on our contract with you, to run Clark; on your consent, which you give when you accept Clark’s recording note and which turns on sending text to your account and to Claude, and when you turn on names in calls; on our legitimate interests in keeping Clark secure, preventing abuse, fixing problems and defending legal claims; and on our legal obligations. Clark’s AI decides what to save for you, but it makes no decision about you that has legal or similarly significant effects.

5. Who processes it

We share personal information only with these service providers, which work for us to run Clark under their agreements with us, and with the AIs you connect, as you choose:

• Supabase. Our database and accounts. It stores everything in your Clark account, in Canada (the AWS ca-central-1 region).
• Netlify. Hosts this website, the dashboard and Clark’s server, and serves Clark for Mac’s downloads and update checks. Requests pass through it, and it keeps request logs.
• Anthropic. Its Claude models read your conversations to save what matters, with your name and time zone, your AIs with your notes and their profiles, your rules, your open items, the last week’s summaries, which AI handled which items and your feedback. To understand a conversation, they may also read up to three earlier conversations it refers back to. They also answer Ask Clark and “Hey Clark”. Under Anthropic’s commercial terms, it doesn’t use this data to train its models and deletes it after a limited time (by default within 30 days), unless it must keep it longer under its usage policies or the law. Deleting a conversation in Clark doesn’t reach Anthropic’s copy, which is deleted on that schedule.
• ElevenLabs. Reads Clark’s spoken answers aloud and, if you turn on Say reminders out loud, Clark’s reminders. From Clark for Mac 0.6.1 it is on by default. It gets only the text of each spoken answer or reminder, and your Mac’s IP address as any online service does: never audio, never your conversations and never your voice profile. ElevenLabs keeps that text under its own terms, and on October 28, 2026 we turned off ElevenLabs’ use of our account’s data to train its models. To use your Mac’s own voice instead, turn off Use ElevenLabs in Clark’s settings on your Mac (Hey Clark); then nothing goes to ElevenLabs.
• Brevo. Sends the email that confirms your address, with a code and a link, and the one that resets your password. It gets your email address, the code and the links, and records whether the links in those emails are clicked.
• Hugging Face. Hosts the speech and voice models Clark for Mac downloads once during setup. It sees your Mac’s IP address, nothing else about you.
• Apple. If Clark’s own speech model can’t be used, Clark uses Apple’s speech recognition, which runs on your Mac. macOS may download Apple’s speech models for it.
• Google. Hosts our email, so it receives what you send to contact@claritysearch.ai.
• The AIs you connect. Claude, ChatGPT, Grok, Muse or another app you connect see what Clark saved, with the context Claude wrote and each conversation’s title and date. They see full conversations and Maybe items only if you allow it for that AI, and never a conversation you mark “Don’t share with my AIs”. Each one also sees the instructions you write to it in Clark, never the ones you write to another AI. What they keep, and whether they train on it, follows their own terms and your settings with them. The Claude you connect is your own Claude account, separate from the Claude models Clark’s server uses.

We may also share information when the law requires it, to protect the rights, safety or property of the people who use Clark, of us or of others, or as part of a merger, an acquisition or a sale of our assets, in which case this policy keeps applying and we’ll tell you about the new owner.

6. No selling, no training

Clark never sells your data or uses what it hears for ads. Clark never uses your conversations to train AI models.

We don’t sell or share personal information as US state privacy laws define those words. Anthropic doesn’t train its models on what Clark sends it, and we opted out of ElevenLabs training. The AIs you connect follow their own training settings, so check those too.

7. How long we keep it, and deleting it

What is in your Clark account is kept until you delete it: Clark doesn’t delete it after a set time. You can delete it in these ways:

• Delete this conversation (in the dashboard and on your Mac) deletes the conversation, its text, what Clark saved only from it and its notices. An item that later conversations also fed stays, with its context but without this conversation’s lines. A chat with Clark about the conversation stays until you delete that chat.
• Forget the last 5 minutes (on your Mac) deletes what was said in those minutes and what Clark saved only from them. An item that other minutes also fed stays, with its context. What you asked Clark in those minutes stays in your chats until you delete them.
• Delete all my data (in Settings) deletes all your conversations and their text, what Clark saved, your chats, your feedback, the records of Claude’s work, your recording notices and your Macs. It keeps your account and profile, your AI connections with their names, notes and profiles, your rules, your keys, the activity log and your usage counts.
• A chat can be deleted on its own in Ask Clark.
• Your account has no delete button yet. Email contact@claritysearch.ai from your account’s address, and we’ll delete your account and everything stored with it within a reasonable time, except records the law requires us to keep longer or that we need for security reasons.

When you delete a conversation or forget some minutes, we keep only the conversation’s id or the times, never content, so a late upload from one of your Macs can’t bring them back. Deleted data can stay in our providers’ backups for a limited time, until those backups are replaced.

Everything else is kept for these times:

• Usage counts: hourly counts for at least 2 days and daily counts for at least 30 days; older ones are cleared the next time you use the same feature, and all of them go with your account.
• Request logs at Netlify and Supabase: for a limited time under their terms.
• Anthropic: by default up to 30 days, as above.
• ElevenLabs and Brevo: under their own terms.
• On your Mac: text waiting to upload until it is uploaded, and your voice profile until you sign out or teach Clark your voice again. Signing out removes both.
• The AIs you connect: under their own terms. They may have read a conversation before you deleted it.

8. Your rights and choices

Wherever you live, you can:

• See and export your data. Export my data, in the dashboard’s Settings, downloads a file with your profile, your conversations’ titles and summaries, what Clark saved, the instructions you wrote to your AIs, your recording notices, your Macs, the AIs you authorized, the first characters of your keys and your activity log. It holds your latest 5,000 activity log entries, and it doesn’t include conversation text, chats, your AI connections’ names, notes and profiles, your rules, your feedback or the records of Claude’s work yet: you can see most of them in the dashboard, or ask us for a full copy.
• Correct it. Edit what Clark saved and your AI connections in the dashboard, and ask us to correct anything else.
• Delete it. As described above.
• Choose what your AIs see. Set it for each AI, disconnect any AI or revoke any key, in the dashboard.
• Turn things off. Turn off ElevenLabs, names in calls or reminders, turn Clark off or pause it, on your Mac at any time.
• Stop uploads. There is no switch for this in the app yet. Quitting Clark or signing out stops all uploads, and if you ask, we’ll turn off sending text to your account and to Claude for your account. Accepting Clark’s recording note again, on a new Mac or when the note changes, turns it back on.

Depending on where you live, including under the GDPR in the EEA and the UK and the CCPA/CPRA in California, you may also have the right to object to or restrict how we use your information, to withdraw consent, to get a portable copy, to appeal a decision we make about your request, and not to be treated differently for using these rights. In the EEA and the UK you can also complain to your data protection authority.

To make a request, email contact@claritysearch.ai from your account’s address. We may need to confirm it’s you. We’ll answer within the time the law requires, and you can use an authorized agent where the law allows it. If we turn down your request, you can appeal by replying to our answer.

Global Privacy Control. We don’t sell or share personal information, so a Global Privacy Control signal is already honored: there is nothing it needs to turn off.

9. Cookies and local storage

• This website sets no cookies, uses no analytics or tracking tools and loads nothing from other sites. Your browser keeps only where you scrolled on each page, for the current tab, and the site removes a display setting older versions of it saved.
• The dashboard sets no cookies of its own and uses no analytics or tracking tools. It uses your browser’s local storage to keep you signed in, to remember your appearance setting and, right after you make an account, which page to open next. For the current tab, your browser also keeps where you scrolled on each page. Clearing local storage signs you out.
• Clark for Mac has no analytics or crash reporting tools.

10. Do Not Track

Some browsers send a Do Not Track signal. There is no common standard for reading it, so Clark doesn’t respond to it. There is nothing for it to turn off anyway: this website and the dashboard use no analytics or tracking tools, and we don’t sell or share personal information.

11. International transfers

We are based in the United States. Your Clark account is stored in Canada, and our other providers may process data in the United States, the European Union and other countries where they operate. If you use Clark from elsewhere, your information is transferred to those countries. Where the law requires safeguards for transfers from the EEA, the UK or Switzerland, we rely on our providers’ data processing terms, such as the European Commission’s Standard Contractual Clauses, or on a provider’s participation in the EU-US Data Privacy Framework.

12. Security

• Everything between Clark for Mac, the dashboard, Clark’s server and our providers is encrypted in transit.
• What your Clark account stores is encrypted at rest by Supabase, our database provider.
• Each account can read only its own data, and each connected AI only what you allow. The database itself enforces it.
• Passwords and the keys you make for your AIs are stored only in hashed form.
• The keys Clark’s server uses to reach Anthropic and ElevenLabs stay on the server. Clark for Mac gets a short-lived, single-use pass for each spoken answer or reminder.
• On your Mac, Clark’s files are readable only by your user, your session is in the Keychain, and audio is never written to disk.
• Our logs hold ids, codes and counts, never your words.

No service can promise perfect security. If a breach affects your personal information, we’ll tell you and the authorities as the law requires.

13. Children

Clark is not meant for children. We don’t knowingly collect personal information from anyone under 16. If you think a child has given us personal information, email contact@claritysearch.ai and we’ll delete it.

14. People Clark hears

While Clark listens, it hears everyone in the conversation, not just the person using it. That person decides when Clark listens and what happens to what it saves, and our Terms make them responsible for telling people Clark is on and for getting consent where the law requires it.

Clark keeps other people’s words only as text in that person’s account. It keeps no voice profile of anyone else: another voice is labeled with a letter, and with a name only when one was said in the conversation or, on a call with names in calls turned on, when the call app showed it for someone who spoke. If the person using Clark marks one of their lines “Not me”, Clark adds numbers that describe that voice, never a recording, to their voice profile on their Mac, so it isn’t taken for theirs again. Those numbers never leave that Mac, and are removed when they sign out or teach Clark their voice again.

If you think someone recorded you with Clark, ask them first: they can delete a conversation at any time. You can also email contact@claritysearch.ai with what you know (when, where and who used Clark), and we’ll help where we can.

15. Changes to this policy

We may update this policy as Clark changes. The “Last updated” date at the top shows the current version. If a change materially affects how we handle information we already have, we’ll tell you in Clark or by email before it takes effect.

16. Contact

For any privacy question or request, email contact@claritysearch.ai. A person reads it, and privacy requests go to the person responsible for data protection. Clarity Search AI, Inc. is responsible for your information under this policy.