1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("BBF," "we," "us," or "our"), operates Clara, the relationship-clarity app created with Liv Merima and previously published as Claim It (the "App"). This Privacy Policy explains what Clara collects, where it goes, how Clara's AI features use it, and the choices you have. Clara's AI companion is automated software guided by Liv's approach. It is not Liv personally, and Liv does not read your private content.This Privacy Policy describes the personal information we collect, where it comes from, why we use it, when we disclose it, and the choices available to you.Controller and contact: Built by Foundry, Inc. (f/k/a Playpen Games, Inc.), 2261 Market Street, Suite 86046, San Francisco, California 94114, United States. For privacy requests, email privacy@builtbyfoundry.io. For general questions: support@builtbyfoundry.io2. Information We Collect
2.1 Information You Provide
When you use Clara you may give us:- quiz answers and your archetype results
- the situations, messages, and questions you bring to Ask Clara and the Red flag decoder
- journal entries and reflections
- check-in answers
- actions and outcomes you record
- the patterns and preferences you confirm about yourself
If you save an account, we receive your email address and the identifier from Sign in with Apple, Google Sign-In, or email sign-in. Apple or Google may also share your name. We also receive support messages you choose to send.
2.2 Your Private Workspace
On your device, Clara keeps your workspace in an encrypted database whose key stays on that device. When you save an account, and when you ask Clara for an AI reply or reading before saving one, the relevant workspace items are also stored on BBF's servers under your account so they can be restored, synced, exported, and used for the replies you request.That server copy is protected by access controls and encryption in transit and at rest. It is not end-to-end encrypted: BBF's systems can process it to provide the App. Personnel may access it only when reasonably necessary to operate, secure, or support the App, or to comply with law. Some items, such as saved favorites, stay only on your device.
2.3 AI Replies and Readings
Clara's enabled AI features are Ask Clara and Clarity reads, including the Red flag decoder. They work only after you give permission in the App. AI check-ins are not currently enabled; their activation requires a separate readiness and disclosure review. The local love reading does not require sending its content to an AI provider.What is sent when you ask for a reply or reading:
- The content of the current conversation or session.
- Earlier chats, readings, confirmed memory items, and similar context, but only if you allow Clara to remember or to include your earlier context.
- Journal entries, but only the ones you mark "Let this reflection inform my reads."
How it is processed:
- BBF's inference service sends that content through OpenRouter, Inc., an AI routing service, to a large language model provider serving OpenAI’s GPT 5.6 Terra model. The approved route requires zero data retention and disallows provider data collection. OpenRouter may use model-hosting providers to serve that model.
- Every request instructs OpenRouter to use only providers that do not retain prompts and do not use them for training (zero data retention, data collection denied).
- The generated reply is stored with your account.
Your controls:
- You can turn memory off, keep individual journal entries out of AI, or turn off automated replies for a conversation.
- Turning memory off applies to future replies. To remove what Clara already remembers, delete those items or your account.
2.4 Sharing Cards
If you choose to share a result card, Clara publishes the first name you enter and one or two archetype patterns at a private link. Anyone who has the link can view the card without signing in. Cards expire after 90 days and are removed when you change or delete the underlying result.2.5 Returning Claim It Members
If you used Claim It before Clara, the App can recognize your earlier account so you keep your purchases and saved content.To do this, Clara reads the Claim It sign-in stored on your device and verifies it with Google's Firebase authentication service. We keep a record that links your Claim It identifier to your Clara account, including hashed copies of your earlier email and sign-in identifiers. Earlier Claim It content that we still hold (journal entries, custom affirmations, onboarding answers, and settings) remains under your account until you delete it.
2.6 Subscriptions
Apple processes purchases made on iOS; Google Play processes purchases made through Google Play on Android. RevenueCat keeps your subscription status linked to an app user identifier. We store the resulting entitlement (plan, status, and expiry) with your account. We do not receive your payment card details.2.7 Automatically Collected Information
Analytics (PostHog):- We use PostHog for product analytics.
- Clara sends only an approved list of events and properties: screens viewed, features used, app lifecycle, sign-in and paywall steps, app and device version details, and a Clara or Built by Foundry account identifier once you sign in.
- PostHog also derives approximate location from your IP address.
- Clara does not send your messages, journal text, quiz answers, generated readings, or safety disclosures to PostHog.
- Session replay is turned off in Clara.
Crash reports (Sentry):
- Sentry receives crash reports and a sample of performance timings.
- Before a report leaves your device, Clara removes error messages, breadcrumbs, and user identifiers.
What Clara does not do:
- Clara does not use your device's advertising identifier.
- Clara does not track you across other companies' apps or websites.
2.8 Information Clara Does Not Collect
Clara does not access your photos, camera, microphone, contacts, or precise location.3. How We Use Your Information
• Provide Clara's quiz, readings, Ask Clara, Red flag decoder, journal, check-ins, and Classic practices• Generate AI replies and readings you request, using only the context you allow
• Store, sync, restore, and export your private workspace
• Recognize returning Claim It members and restore their purchases and content
• Manage Clara Plus subscriptions and access
• Publish result cards you choose to share
• Provide customer support
• Measure product use, diagnose crashes, test features, and improve the App
• Detect fraud, abuse, and security issues
• Comply with legal obligations
4. Third-Party Service Providers
We disclose only the information reasonably needed to service providers and contractors that host, secure, analyze, support, or process purchases for the App. They process information under their agreements with us and their own legal obligations.Infrastructure and Accounts: Supabase hosts Clara's database, authentication, and server functions. Resend delivers email sign-in codes. Cloudflare hosts BBF's AI inference service.AI Processing: OpenRouter routes AI requests to providers serving OpenAI’s GPT 5.6 Terra model under zero-data-retention settings. They process the content you allow for the reply you request.Analytics and Diagnostics: PostHog provides product analytics; session replay is off in Clara. Sentry receives crash and performance reports with personal details removed.Subscriptions and Payments: RevenueCat manages subscription status. Apple and Google Play distribute the App and process purchases and refund requests made through their respective stores.Authentication: Apple and Google process sign-in when you choose them. Google's Firebase authentication service verifies earlier Claim It sign-ins for returning members.No sale or behavioral-advertising sharing: We do not sell personal information for money or share it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We may disclose information if required by law, to protect people or the App, or as part of a merger, financing, or sale of the business, subject to appropriate safeguards.5. International Data Transfers
BBF is based in the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live.EEA/UK/Swiss users: Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism. You can ask about safeguards for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We keep personal information only as long as reasonably needed for the purposes described here, including to provide the App, maintain security, resolve disputes, and meet legal or accounting duties. Retention depends on the type of information, whether your account is active, and applicable law. When it is no longer needed, we delete or de-identify it. Copies may remain temporarily in backups or where law requires retention.We keep your private workspace, generated replies, check-in settings, and account records while your account is active.Deleting your account in the App immediately removes your Clara content from your device and blocks it from being read on our servers. Within 24 hours our servers then permanently erase your Clara account: chats, readings, journal entries, memory, check-ins, AI request copies, shared cards, earlier Claim It content, subscription status, the link to your earlier Claim It account, and any guest session you saved into the account.Your sign-in account is shared across Built by Foundry apps. We delete it as part of your Clara deletion unless you also use it with another Built by Foundry app. In that case we keep the sign-in for that app and a minimal record that Clara was deleted, so an old session cannot recreate Clara data.What we keep after deletion: - Purchase and renewal records, without the link to your account, for billing, tax, and fraud purposes. - The anonymous purchase identifier held by RevenueCat, our subscription provider, and app usage statistics held by PostHog. Neither includes your email address. We keep a pseudonymous record of these identifiers so we can ask those providers to delete them, and we will do so when that connection is in place. - If you used the earlier Claim It app, its sign-in record in Google Firebase. We record it for deletion in the same way. - Apple's own record that you used Sign in with Apple with Clara. You can remove it in iPhone Settings under your name, then Sign in with Apple.To ask us to delete anything we keep, email privacy@builtbyfoundry.io from your account email.Other retention periods: - Individual items: deleting a chat, reading, or journal entry also erases content derived from it. - Share cards: expire after 90 days. - Guest sessions: if you never save an account, guest data stays tied to that anonymous session until you delete those items in the App or ask us to delete them. - Analytics, diagnostics, and support records: kept only as long as reasonably needed for their purpose and legal obligations.7. Your Privacy Rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier processing.Legal bases for processing
Legal bases: We process information as needed to provide the App and perform our contract with you; for legitimate interests such as security, support, product improvement, and fraud prevention; with consent where required; and to comply with law.EEA, UK, and Swiss users
You may also have rights to data portability and to complain to your local data protection authority. We may ask for information necessary to verify and complete your request.United States state privacy rights
Residents of California and certain other states may have rights to know, access, correct, delete, or obtain personal information and to receive information about categories of recipients. We do not discriminate against you for exercising a privacy right. Where applicable, you may use an authorized agent and may appeal our response by replying to it.How to Exercise Rights
Email privacy@builtbyfoundry.io with the App name, the email or account identifier you used (if any), and your request. You may also use an account-deletion control where the App provides that control. We will verify requests as reasonably necessary and respond within the time required by applicable law.Some information may be exempt from a request or retained where permitted by law. We may charge a reasonable fee or decline requests only where applicable law allows it.8. Children's Privacy
Clara is not directed to children under 13. We do not knowingly collect data from children under 13. If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We will investigate and delete the information when required. Teens aged 13–17 should review this policy with a parent or guardian.9. Data Breach Notification
We maintain an incident-response process. If a security incident affects personal information, we will investigate, contain, and provide notices to regulators or affected people when and as required by applicable law.Report security concerns: privacy@builtbyfoundry.io10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and protections offered by our hosting and authentication providers. No method of storage or transmission is completely secure.You should: Protect your device, credentials, and connected accounts and tell us promptly if you suspect unauthorized access.11. AI Guidance, Not Professional Care
Clara's replies and readings are generated by AI, guided by Liv Merima's approach. They are not written or reviewed by Liv or by a licensed professional. They can be wrong, incomplete, or a poor fit for your situation. Clara is for reflection and personal growth. It is not therapy, counseling, medical or legal advice, or crisis support.12. Consumer Health Data
Journal, relationship, and wellness-related information may be treated as consumer health data in some states. Our separate Consumer Health Data Privacy Notice at https://www.builtbyfoundry.io/claim-it/consumer-health-data describes the categories, sources, purposes, disclosures, retention, and rights that apply.13. If You Are Unsafe
If you are in danger, feel afraid or controlled in a relationship, or are thinking about harming yourself, contact local emergency services or a crisis line where you live, or a person you trust. Clara cannot contact anyone for you and does not monitor conversations for emergencies.If you need help:• 988 Suicide & Crisis Lifeline (US): Call or text 988• Emergency: Call 911 or your local emergency number
• Crisis Text Line (US): Text "HELLO" to 741741
• International: findahelpline.com