Legal

Privacy Policy

Last updated: October 5, 2026

Clare is a parenting research tool operated by JQuant Labs ("we", "us", or "our"). This Privacy Policy explains what information we collect, how we use it, and your rights as a user. We are committed to handling your information with care and transparency.

Important: Our position is that Clare is not a health information custodian as defined under Ontario's Personal Health Information Protection Act (PHIPA), and that Clare operates as a consumer information tool under Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA). This characterisation is our proposed legal position and is under review by counsel. Questions you ask may contain personal health information about your child; that information is handled as personal information under PIPEDA. If you have questions about how this applies to your situation, contact us at hello@askclare.ca.

1. Information We Collect

We collect only what is necessary to provide the service:

Email address — used to send you a sign-in link and identify your account. We never share your email with third parties for marketing purposes.
Your name — optionally provided during onboarding, used only to personalise your experience within Clare.
Child profiles — optionally provided to personalise Clare's answers. May include a nickname, birthdate, sex, allergies, birth timing (early/on time/late), feeding type, daycare or childcare setting, siblings, pets, typical bedtime, and an optional photo. You choose what to fill in — none of these fields beyond a nickname are required. Where relevant to a question you ask, a summary of your child's profile — such as their age or feeding type — may be included in the context sent to Anthropic to generate Clare's answer. Only what is directly relevant to your question is included; this is governed by the Anthropic data terms described in Section 4. We do not sell your child's profile or disclose it to third parties for their independent advertising or marketing purposes. It may be processed by the service providers described in Section 4 as necessary to operate Clare. You can add, edit, or remove child profiles at any time from your account settings.
Growth measurements — if you use the growth tracking feature, we store the height and weight entries you log, along with the date of measurement and the units you use. Growth values are stored internally in metric (kg/cm) and displayed in your chosen units. Where relevant to a question you ask, a summary of recent growth measurements may be included in the context sent to Anthropic. We do not sell this data or disclose it to third parties for their independent advertising or marketing purposes. It may be processed by the service providers described in Section 4 as necessary to operate Clare. You can delete individual entries, or an entire child's profile and all associated growth data, at any time.
Food introduction and milestone tracking — if you use these optional features, we store the entries you log: foods introduced and any reactions noted, and developmental milestones marked as reached. Where relevant to a question you ask, a summary of this tracking data may be included in the context sent to Anthropic to generate Clare's answer. Only what is directly relevant to your question is included. We do not sell this data or disclose it to third parties for their independent advertising or marketing purposes. It may be processed by the service providers described in Section 4 as necessary to operate Clare. You can delete individual entries or an entire child's profile at any time.
Questions you ask Clare — stored to provide your conversation history and to improve the quality of Clare's responses over time. Questions are sent to Anthropic to generate answers (see Section 4). Questions may contain personal health information about your child; see Section 11 for how long these records are retained and why. See also the note at the top of this policy regarding PHIPA.
Moments journal entries — if you use the Moments feature, your journal entries are stored privately and protected by a PIN you set. Entries may include dates, free-text notes, topic tags, child associations, and optionally photos. Text you write in the Moments journal is never sent to Anthropic for any purpose — it is completely separate from Clare's AI question-and-answer system. Journal entries are accessible through Clare only after PIN authentication. We do not sell Moments content or disclose it to third parties for their independent advertising or marketing purposes. Moments content may be processed by service providers described in Section 4 as necessary to host, secure, and operate the feature. Note: if you separately copy text from your Moments journal into a question you ask Clare, that text will be sent to Anthropic as part of your question — the same as any other question content. Photos attached to Moments entries — including photos added when checking off a milestone — are stored in our object storage alongside your other Moments content.
Usage data and engagement rewards (Hearts) — we track how many questions you have asked, which credits you have used, and your subscription tier, for account management and usage limit purposes. Clare also awards Hearts — a recognition system — when you reach a milestone, log a growth entry, add a Moment, or complete other app activities. We record which events earned Hearts (for example, which milestone or which growth log) tied to your account, to prevent duplicate awards and to display your Hearts balance. Hearts data is never used for advertising or disclosed to third parties for their independent advertising or marketing purposes. It may be processed by service providers described in Section 4 as necessary to operate Clare and is deleted when your account is deleted.
Push notifications and delivery history — if you allow Clare to send push notifications, we store a device token provided by Apple to enable delivery. This token is associated with your Clare account solely to enable push delivery. It is deleted when you sign out, disable notifications, or delete your account. When Clare schedules a notification — for example, to celebrate a milestone you checked off — we record that the notification was sent, the date and time, and which event triggered it. This delivery history is used to avoid sending duplicate notifications, is not used for advertising or disclosed to third parties for their independent advertising or marketing purposes, may be processed by service providers described in Section 4 as necessary to operate Clare, and is permanently deleted when your account is deleted.
Gear and product data — if you use the Gear feature, we store the products you add to your child's profile, including manufacturer, model, category, and your child's configuration details (such as current seat position or weight mode). We use this to surface personalised safety insights: verified weight and height limits, recall status, and milestone-linked warnings. Where relevant to a question you ask, a summary of your gear data may be included in the context sent to Anthropic. We do not sell gear data or disclose it to third parties for their independent advertising or marketing purposes. It may be processed by the service providers described in Section 4 as necessary to operate Clare.
Knowledge gap logging — when you ask Clare a question that falls outside its current knowledge base, we log that question to help us identify topics where our research coverage should improve. If you are signed in, the log entry is linked to a pseudonymous account identifier (not your name or email address) and is permanently deleted when your account is deleted. If you are not signed in, no record is created. This log is used solely for content development and is not used to profile you or disclosed to third parties for their independent advertising or marketing purposes. It may be processed by service providers described in Section 4 as necessary to operate Clare.
IP address at consent — when you accept Clare's Terms of Use or Privacy Policy, we record your IP address alongside your consent record. This is retained as part of the consent audit trail described in Section 11 and is used solely to document that consent was given from a plausible location at the recorded time. It is never used for tracking, advertising, or profiling.
IP address (anonymous use only) — if you ask Clare a question before signing up, we temporarily process your IP address to limit anonymous previews to one question per device and to detect abuse. This IP address is immediately converted to a one-way cryptographic hash; the original IP address is not stored. The hash is retained for up to 30 days, is not linked to your account, name, or email, is never used for tracking or advertising, and is automatically purged on a rolling basis.
Payment information — if you purchase credits or a subscription through the Clare iOS app, payment is processed entirely by Apple as an In-App Purchase; Clare never sees or stores your Apple ID payment details. If you purchase on the web, payment is processed by Stripe, and Clare never sees or stores your card number, expiry, or CVV.

2. How We Use Your Information

To authenticate you via magic link and maintain your session
To answer your parenting questions using our research database and Anthropic's AI model
To track and manage your credit balance and subscription
To send you sign-in links via email (we do not send marketing emails without your consent)
To deliver push notifications about milestones and other app events you have opted in to receive
To improve Clare's knowledge base and response quality over time
To store and retrieve your Moments journal entries, accessible only to you via PIN authentication
To award and track Hearts as a recognition of your engagement with Clare's features
To limit anonymous free previews to one question per device before requiring sign-up
To maintain a verifiable record that you accepted our Terms and Privacy Policy and to support our privacy-accountability obligations
To archive a record of each interaction for legal accountability and answer provenance purposes, as described in Section 11

3. Data Storage and Cross-Border Transfers

Your data is stored on Cloudflare's infrastructure (D1 relational database and R2 encrypted object storage), with servers located in North America. Cloudflare is a SOC 2 Type II certified provider. We do not sell, rent, or trade your personal information to any third party.

When you ask Clare a question, that question — together with relevant context from your child's profile — is transmitted to Anthropic PBC, a company incorporated in the United States, for AI processing. This means your personal information may be processed in the United States and may be subject to US federal and state law, including potential access by US government or regulatory authorities under US law. By using Clare, you acknowledge and consent to this cross-border transfer. See Section 4 for details on how Anthropic handles this data.

If you are a resident of Quebec, Quebec privacy law may impose additional requirements on transfers of personal information outside Quebec, including privacy impact assessment and contractual requirements. We address those requirements where applicable to Clare's processing and service-provider arrangements. You may contact us at hello@askclare.ca with questions about cross-border processing.

4. Third-Party Services

Clare uses the following third-party services to operate:

Cloudflare — hosting, database, object storage, and content delivery
Resend — transactional email delivery (sign-in links only)
Stripe — payment processing for purchases made on the web. Stripe's privacy policy applies to all payment transactions.
Apple — payment processing for purchases made through the Clare iOS app (In-App Purchase). Apple processes these payments directly; Clare never sees or stores your Apple ID payment details, and Apple's own privacy policy applies to these transactions.
Apple Push Notification service (APNs) — used to deliver push notifications to your device. Your device token is sent to APNs solely for this purpose. Apple's privacy policy governs APNs data handling.
Anthropic — AI model used to generate answers. When you ask Clare a question, that question — together with relevant context from your child's profile, tracking data, and gear data — is sent to Anthropic's API to generate a response. This context may include personal information about your child, including health-related information you have provided. Before sending your question to Anthropic, we remove your child's real name and replace it with a neutral placeholder (such as "Child 1") — Clare restores the real name only in the answer shown to you. Your child's exact birthdate is not included in what we send; only their computed age (for example, "14 months") is used. Moments journal entries and vaccination records are never sent to Anthropic for any purpose. Anthropic does not use API inputs to train its models. Anthropic may retain API data for a limited period for abuse and safety monitoring under its commercial API terms; it is not used for advertising or sold to third parties. Anthropic PBC is incorporated in the United States; data transmitted to Anthropic is processed in the United States and is subject to US law. See Section 3 regarding cross-border transfers.

Clare engages these third-party service providers solely to operate the service. These providers process information only for the operational purposes described in this Policy and subject to the applicable service terms and arrangements we maintain with them. Their own privacy notices may also apply where they interact with you directly, such as Apple or Stripe processing a payment.

5. Cookies and Sessions

Clare uses a small number of first-party cookies, strictly necessary for the service to function. None are used for advertising, and we do not use analytics cookies or third-party tracking.

clare_session — keeps you signed in. Does not track you across other websites.
clare_src — set on your first visit, records which page or link brought you to Clare (e.g. a specific blog post or referral link) so we can understand which of our own content is useful. Expires after 30 days and is not shared with any third party.

6. Children's Privacy

Clare is a tool for parents and caregivers and is not directed at children. You must be at least 18 years old to create an account. Clare is designed to receive information about children only from their parents or caregivers — not from children directly. We do not knowingly collect personal information directly from children. If you believe a child has created an account or directly submitted personal information to Clare, please contact us at hello@askclare.ca and we will delete it promptly.

Information about a child that you provide through child profiles, tracking features, or questions — such as health-related details — is considered personal information of that child under PIPEDA and is handled accordingly. As the parent or caregiver, you are providing this information on the child's behalf and are responsible for ensuring you have the authority to do so.

7. Your Privacy Rights

Depending on where you live, privacy law may give you rights regarding your personal information. Clare provides a common set of privacy controls to users in Canada and the United States, subject to exceptions permitted or required by applicable law.

Access — you may request information about the personal information we hold about you and, where applicable, obtain a copy.
Correction — you may request correction of inaccurate personal information.
Deletion — you may request deletion of your account and associated personal information. Some limited records may be retained after account deletion as described in Section 11, including interaction evidence, consent records, deletion receipts, or information subject to a lawful legal hold.
Withdrawal of consent — where processing is based on consent, you may withdraw that consent, subject to legal or contractual restrictions and reasonable notice. Where the withdrawn consent is necessary to provide Clare, withdrawal may require deletion or disabling of the affected feature or account.
Sale and targeted advertising — JQuant Labs does not sell personal information, does not sell health-related information, and does not disclose personal information about children or health-related information to third-party advertisers for targeted or cross-context behavioural advertising.
Complaints and appeals — you may contact us about a privacy concern. Where applicable law provides a right to appeal our response to a privacy request, you may ask us to reconsider it.

To exercise a privacy right, email us at hello@askclare.ca. We may need to verify your identity before completing a request. You can also delete your Clare account directly within the app (Account → Delete Account). We respond within the period required by applicable law.

8. Canada

Canada generally. JQuant Labs is based in Ontario, Canada. We handle personal information in accordance with applicable Canadian private-sector privacy law, including PIPEDA where it applies. We maintain accountability for personal information transferred to service providers for processing and use contractual and operational safeguards appropriate to the nature of the information and the service being provided.

Ontario and health-related information. Our position is that Clare is a consumer parenting information tool and is not itself a health information custodian as defined under Ontario's Personal Health Information Protection Act (PHIPA). This is our proposed legal characterisation and is under review by counsel. Clare may nevertheless process sensitive and health-related information that parents or caregivers choose to provide about children, and we apply the safeguards and limitations described throughout this Policy to that information.

Quebec. If Quebec privacy law applies, additional requirements may apply to our handling of personal information, including privacy impact assessment requirements and requirements relating to transfers of personal information outside Quebec. We assess applicable cross-border processing and service-provider arrangements and maintain documentation appropriate to those obligations. Quebec residents may contact us to exercise applicable privacy rights or ask questions about cross-border processing.

Canadian users may also have the right to complain to the privacy regulator with jurisdiction over their matter. For matters within federal jurisdiction, information about the Office of the Privacy Commissioner of Canada is available at priv.gc.ca. Ontario residents may also consult the Information and Privacy Commissioner of Ontario at ipc.on.ca.

9. United States

Adult-directed service and children's information. Clare is designed for parents and caregivers aged 18 and over and is not directed to children. We do not knowingly allow children to create Clare accounts or knowingly collect personal information directly from children. Information about children is provided by an adult parent or caregiver. If you believe a child has directly submitted personal information to Clare, contact us and we will investigate and take appropriate action.

US consumer privacy rights. Depending on your state and whether a particular law applies to JQuant Labs, you may have rights to know or access personal information, correct it, delete it, obtain information about disclosures, opt out of certain sales or sharing, limit certain uses of sensitive personal information, appeal a denied request, or exercise other rights provided by state law. Clare does not sell personal information and does not share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising an applicable privacy right.

California. Where the California Consumer Privacy Act, as amended, applies to JQuant Labs, California residents may exercise the rights provided by that law, including applicable rights to know, delete, correct, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information, and non-discrimination. Regardless of whether JQuant Labs meets the statutory thresholds for CCPA applicability at a particular time, Clare's practices remain as described in this Policy: we do not sell personal information or share it for cross-context behavioural advertising.

Consumer health information. Clare may process health-related information that you choose to provide about a child, including information contained in questions, growth tracking, food or reaction logs, developmental tracking, and vaccination features. We do not sell this information, use it for advertising, or disclose it to third-party advertisers. It is used for the Clare features you choose to use, service operation, security, the limited accountability and retention purposes described in this Policy, and other purposes disclosed to you or permitted by applicable law.

State consumer-health laws. Certain states impose additional requirements on businesses that collect or process consumer health data. Where such a law applies to Clare, we will provide any additional notice, consent mechanism, authorization, deletion process, or other protection required by that law. Some jurisdictions may require a separate consumer health data privacy notice rather than incorporating those disclosures into this general Privacy Policy.

Health Breach Notification Rule. US federal law includes the Federal Trade Commission's Health Breach Notification Rule for certain non-HIPAA health technologies. JQuant Labs assesses the applicability of this and other breach-notification requirements to Clare. If an incident is subject to a notification law, we will provide notifications to affected individuals and regulators as required by applicable law.

10. Vaccination Records

If you use Clare's vaccination tracking feature, the authoritative vaccination record is maintained by the Clare iOS app on your device. Clare's servers maintain a limited recovery record associated with your child's profile so supported vaccination information can be restored after a reinstall or device change. This server-side recovery record may include a schedule identifier and version, an administered date if entered, the source of the entry, and synchronization or revision metadata. The server-side recovery record does not contain vaccine lot or serial numbers.

Vaccination records are never sent to Anthropic and have no connection to Clare's AI question-and-answer system. When you ask Clare a health question, vaccination data is not included in the context sent to generate the answer. This separation is enforced at the application level.

Vaccination records are deleted when you delete your child's profile or your account. We do not sell vaccination data or disclose it to third parties for their independent advertising or marketing purposes. It may be processed by the service providers described in Section 4 as necessary to operate Clare. It is not used for advertising or to infer or record health status beyond what you have explicitly entered.

11. Data Retention

Different categories of data are held for different periods, reflecting their legal basis and purpose:

Account and profile data — retained for as long as your account is active. Deleting your account removes this data immediately. If you request deletion by email, we complete it within 30 days.
Interaction evidence (questions and answers) — every question you ask Clare, together with Clare's answer and the research sources cited, is archived for 24 months from the date of that interaction. This archive allows us to verify the accuracy and provenance of answers in the event of a complaint, regulatory inquiry, or legal proceeding. Questions may contain personal health information about your child; that information is subject to the same 24-month retention. Evidence records are stored in encrypted object storage with randomised, unguessable keys and are not used for advertising or any purpose other than legal accountability. At the end of the 24-month window, each record is automatically and permanently deleted by a scheduled process. If your account is deleted before a record's 24-month window has elapsed, the record remains in the archive until its scheduled deletion date. The archive record contains the question asked, Clare's answer, the sources cited, a timestamp, and an account identifier; it does not contain your name or email address.
Consent records — when you accept Clare's Terms of Use or Privacy Policy, we record which version you accepted, the date and time of acceptance, and the IP address from which you accepted. These records are retained for the life of your account and for a period after account deletion sufficient to demonstrate that consent was properly obtained under PIPEDA. Deleting your account does not immediately erase consent records; they are removed as part of a scheduled process once they are no longer needed for legal accountability.
Deletion receipts — when your account or consent data is deleted, we retain a minimal record confirming that the deletion occurred and when. This receipt contains no personal content — only a pseudonymous account identifier, the date of deletion, and the reason. It is retained as part of our accountability obligations under PIPEDA.
Legal holds — if we are required by law, court order, or a regulatory body to preserve your data, a legal hold may be placed on your records. A legal hold suspends all scheduled deletion for the affected account until the hold is released. We will notify you of a legal hold to the extent permitted by law.
Anonymised usage data — aggregated, non-identifiable statistics about service usage may be retained indefinitely for service improvement purposes.

12. Moments Journal

The Moments feature allows you to keep a private journal of parenting memories and notes. Journal entries are stored on Cloudflare's infrastructure and are protected by a PIN you create. Text you write in the Moments journal is never sent to Anthropic — it is fully separate from Clare's AI question-and-answer system. We take reasonable steps to secure this content, but we are not liable for any loss, corruption, or unauthorised access to journal entries resulting from circumstances beyond our reasonable control, including device loss, forgotten PINs, or events affecting our infrastructure providers. You are responsible for maintaining the security of your PIN.

Photos attached to Moments entries — including those attached while checking off a milestone — are stored alongside your other Moments content and are protected by the same PIN. We recommend using a strong, memorable PIN that you do not reuse elsewhere, as a forgotten PIN cannot be reset without losing access to your Moments.

13. Security

We use industry-standard security measures including HTTPS encryption, HttpOnly session cookies, and access-controlled databases. Interaction evidence is stored in encrypted object storage with randomised, unguessable keys that are not derived from your identity or question content. Consent records and evidence archives are accessible only to authorised Clare systems and are not exposed in standard user-facing or administrative interfaces beyond their operational function. Push device tokens are stored as opaque identifiers and are never logged or used outside of push delivery. Anonymous user IP addresses used for rate-limiting are immediately converted to a one-way cryptographic hash; the original IP is not stored. No method of transmission or storage is 100% secure, but we take reasonable precautions to protect your information.

14. Breach Notification

If we become aware of a breach or other security incident involving personal information, we will investigate and assess the incident and take reasonable steps to contain and remediate it. For incidents subject to PIPEDA, we will report to the Office of the Privacy Commissioner of Canada and notify affected individuals when the breach creates a real risk of significant harm, as required by law. For users in the United States, we will provide notices to affected individuals, regulators, or other parties when required by applicable federal or state law, including any applicable health-data breach notification requirements. We maintain records and an internal incident-response process as required by applicable law.

If you believe your account has been compromised, contact us immediately at hello@askclare.ca.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of Clare after changes constitutes acceptance of the updated policy.

16. Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a privacy concern, please email us at hello@askclare.ca. We will respond within 30 days.

If you are not satisfied with our response, you may have the right to contact the privacy or consumer-protection regulator with jurisdiction over your matter. Canadian users may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, and Ontario users may consult the Information and Privacy Commissioner of Ontario at ipc.on.ca. United States residents may also have rights to contact their state attorney general or another regulator where applicable.