Privacy Policy

Effective: March 25, 2026

ClairTools builds privacy-first Android apps. This policy covers all ClairTools apps: Prompter, Vault, and MoveProof.

What we don't do

No ads We never display ads. No ad SDKs. No ad tracking.
No accounts We never require sign-up, login, or email.
No data selling We never sell, share, or transfer your data to third parties.
No cloud uploads Your files stay on your device unless you explicitly share them.
No tracking We don't track your location, contacts, messages, or browsing.

What we collect

Prompter & MoveProof (Firebase Analytics)

Crash reports — via Firebase Crashlytics, to fix bugs. Contains device model, OS version, and stack trace. No personal data.
Basic usage analytics — via Firebase Analytics with all ad-related consent denied (adStorage=DENIED, adPersonalization=DENIED, adUserData=DENIED). We see aggregate counts (e.g., "50 users opened settings"), never individual behavior.
Firebase Installation ID — an anonymous device identifier used by Firebase. It is not an advertising ID and cannot identify you.

Vault

No analytics. No Firebase. No crash reporting. Vault is intentionally offline-only. The only network permission is for in-app purchase processing via Google Play.

All apps (RevenueCat billing)

Purchase history — processed by RevenueCat to manage one-time in-app purchases. RevenueCat receives a pseudonymous app user ID and purchase receipts from Google Play. No name, email, or payment details are sent to us.

Data storage

All user data (scripts, photos, notes, encrypted files) is stored locally on your device.
Vault files are encrypted with AES-256-GCM using keys stored in the Android Keystore. Even if someone accesses the raw files, they cannot read them without your PIN.
Backups are created as local ZIP files that you control. Nothing is uploaded.

Permissions

Camera — Prompter: recording. MoveProof: inspection photos. Vault: importing photos.
Microphone — Prompter: video recording audio. MoveProof: optional video notes.
Location — MoveProof only: GPS coordinates on inspection photos (optional, for proof).
Internet — Required for in-app purchases (RevenueCat/Google Play) and AI generation (Prompter/MoveProof, user-configured). Never used to upload your data.
Bluetooth — Prompter only: remote control for teleprompter scrolling.

Your rights

Access — All your data is on your device. You can see it anytime.
Deletion — Delete any item in-app, or uninstall the app to remove everything.
Portability — Use the backup/export feature to get your data as a ZIP file.
No account = no server data — Since we don't collect personal data, there's nothing to request deletion of on our servers.

Children

ClairTools apps are general-audience tools. We do not knowingly collect data from children under 13. Since we collect no personal data and require no accounts, there is no age-gated content.

Changes

If we change this policy, we'll update this page and the effective date above. Since we have no accounts or emails, we can't notify you directly — check this page periodically.

Contact

Questions? Email allo@clair.tools