Clonaar

Privacy Policy

Last updated November 12, 2026

Clonaar is a personal AI assistant app operated by Clonar, LLC ("we", "us"). This policy explains what information we collect when you use the Clonaar app, the Clonaar website and the Clonaar connector for other AI assistants (ChatGPT, Claude, Gemini, Perplexity, Grok and Muse), why we use it, who helps us process it, how long we keep it, and the choices you have. Clonaar is for adults: you must be 18 or older to use it.

Information we collect

Information you give us

• Account details — your email address, name, username, password (stored by our authentication provider, never readable by us), profile photo and bio.
• What you ask and send — your questions and conversations with the assistant, files and photos you attach, voice you speak in voice mode, and messages you send to other people in Clonaar.
• Memories — facts about you that you tell Clonaar to remember, that you import, or that a connected AI assistant saves for you (see "The Clonaar connector" below).
• Things you share with others — your public profile, the people you follow, posts and comments, and the facts you choose to share with your followers.
• Questions sent through an Ask link — if you ask someone's clone a question from their Ask link without an account, we keep the question and the clone's answer, and a scrambled code made from your browser and from your internet address (never the address itself) so we can limit repeat questions and honour a block. The person you asked sees the question, never who sent it.
• Feedback you send — what you write in Send feedback, with your account's email address (so we can reply), your phone model and the app version. Deleting your account deletes it.
• The waitlist — if you join it on clonaar.com, your email address and which button you used. We use it only to tell you when Clonaar launches, and delete it if you ask.

Information collected as you use Clonaar

• Memories Clonaar learns — when "Reference saved memories" is on, Clonaar notes lasting facts about you from your conversations (for example, that you are vegetarian). You can see, edit and delete every one of them in Memories, or turn this off.
• Approximate location — the area your internet address is in, used to give local answers. Your precise location is used only if you allow it on your phone.
• Device and usage information — your device's notification token (to send you notifications), app version, error reports, and records of which features were used and how long answers took.
• Apps you connect — if you connect an app such as Google or Spotify, the access it grants and the information Clonaar reads from it to answer you.
• Your plan and purchases — if you subscribe, the store tells us which plan you bought, its status, renewal date and the country it was bought in. We keep a scrambled copy of the store's purchase reference, never your payment details (the store holds those). We also record how much of your plan's usage you have used, and which places in the app you opened the plans page from.

The Clonaar connector for other AI assistants

You can connect Clonaar to ChatGPT, Claude, Gemini, Perplexity, Grok or Muse. When you do:

• You sign in on a Clonaar page and allow the connection. The assistant receives a key that lets it save facts about you to your Clonaar memories, ask the clones of people you follow, and — only if you allow it for that assistant — read your own memories.
• We receive only the facts the assistant sends — short sentences about you such as "The user is vegetarian." We do not receive your conversation with that assistant, its memory or your chat history, and the connector cannot see your chats or account.
• Reading your memories is off unless you turn it on for that assistant (on the sign-in page, or in the app under Memories → Connected assistants). When it is on and the assistant asks, Clonaar sends only the memories that bear on its question (at most eight), never sensitive ones such as health, religion or finances, and never your chats. What you allow is then handled by that assistant's provider under its own privacy policy. We record when it read and how many times, not what. You can turn it off at any time, and it stops at once.
• When the assistant asks someone's clone — for example "gifts Rahul would like" — Clonaar sends back only the facts that person chose to share that bear on the question (at most five per person), never a list of people or a whole profile. It works only for people you could already ask in the Clonaar app, and only if they allow it. We keep a record of each question, which assistant asked it and what was sent, to investigate misuse.
• If your friends ask your clone from their assistant, what it sends goes to that assistant's company and is kept under that company's rules, which may include your friend's chat history or that assistant's memory. Deleting a fact or your account in Clonaar does not delete copies already sent there. You can stop this at any time in Settings → "Also in other AI assistants" (ChatGPT, Claude, Gemini and others).
• Saved facts are processed exactly like a memory you import yourself: labelled, merged with what Clonaar already knows, marked with which assistant saved them, and shown in Memories, where you can delete them.
• We keep a record of the connection (which assistant, when it was connected and last used). You can disconnect at any time in Clonaar under Memories → Connected assistants, or in the assistant itself; disconnecting stops any further saving immediately.
• The assistant you connect is run by another company under its own privacy policy.

How we use information

• To provide the service: answer your questions, remember what you asked it to, run voice mode, deliver your messages and notifications, and show your profile to the people you allow.
• To personalise answers using your memories and settings.
• To keep Clonaar safe: prevent abuse, enforce our terms, and protect people's accounts.
• Crisis support — messages you send to Clonaar's AI (the assistant, clones, Theatre, Ask around, voice) are checked by an AI model for signs that someone may be at risk of suicide or self-harm, so we can show free crisis lines for the country your phone is in. We count how often we show them, with no information about who they were shown to. See Safety.
• Photo safety — photos and videos you send in direct messages, and your profile photo, are checked by an AI model when you upload them. A message that may show nudity, graphic violence or self-harm arrives blurred for the person you send it to; a profile photo like that is not used. See Safety.
• Message requests — the first message someone you don't know sends you is checked by an AI model, so a request that looks like spam or abuse can wait in Hidden requests instead of notifying you. The person who sent it is not told.
• Link previews — when a message contains a link, our server opens that page to show a title and picture under the message, and keeps a copy of what it found so your phone never contacts the site. The page's title, description and picture are checked by an AI model. A site sees our server, not you, and is not told who sent the link. You can remove a preview, and a stranger's link in a request gets none.
• To run and improve the service: find and fix problems, measure speed and cost, and understand which features are used.

We do not sell your personal information, we do not use it for advertising, and we do not use it to train AI models.

Who processes it for us

We share information only with the companies below, which process it on our behalf to run Clonaar, and with the people you choose to share with. They may use it only to provide their service to us. This list names every company that receives information about you; we update it when that changes.

Running the service

• Fly.ioRuns our servers, so everything you send to Clonaar passes through it. United States (Virginia)
• SupabaseOur database, file storage and sign-in, including the sign-in emails. Holds your account, what you save in Clonaar and the files you upload.United States (Ohio)
• UpstashShort-lived working copies: session state, rate limits and caches. United States and other regions

AI models

• AnthropicWrites most answers and clone replies, and checks messages for signs that someone may be at risk. Receives the text and images involved.United States
• OpenAIVoice conversations, dictation, pictures, safety checks on messages and photos, and some smaller tasks behind answers and memories. Receives the text, audio or images involved. United States
• HeliconeRecords the requests we send to OpenAI, so we can find errors and track cost. Receives the same content OpenAI receives.United States
• Voyage AITurns text into numbers used to search your memories and files, and ranks search results. Receives that text.United States

Looking things up

To answer a question, the assistant sends a search — the words it searches for, never your name or account — to:

• SerpApiGoogle results: the web, shopping, flights, hotels, images, places and events. United States
• Brave SearchWeb results.United States
• Kiwi.com, Yelp, OpenTableFlights, places and restaurants, for those searches. Czech Republic, United States
• MapboxMaps of the places shown in an answer.United States

Notifications, purchases and payments

• Google FirebaseDelivers notifications to your phone. Receives your device's notification address and the notification. Unless you have hidden previews for a chat, a notification carries the sender's name and the start of their message, so your phone can show it at once. A message request says only who it is from. United States
• Google PlayPlan purchases and renewals. Receives what you buy. United States
• Stripe, Shopify, DuffelOnly if you pay for something, buy a product or book a flight through Clonaar. Receives the order and payment details.United States, Canada, United Kingdom

People and services you choose

• Apps you connect — Google (Gmail, Calendar, Drive), Spotify and others you choose to connect, to read or act on what you asked.
• Assistants you connect — ChatGPT, Claude and others you connect to Clonaar. They send us what they save. The only thing we send back is a clone's answer when someone asks a person's clone from that assistant (see "The Clonaar connector" above).
• Other people in Clonaar — your public profile is visible to the people the app says can see it. Your clone can answer people about you only while "Let your clone speak for you" is on. We keep the facts it could use (everything about you except facts labelled sensitive, such as health) ready for that, but while the switch is off nobody can ask your clone about them and you are not shown in anyone else's Orbit; you can turn it off at any time, and stop sharing any single fact. While it is on, those facts can also help answer a question from someone who does not follow you; they see the answer without your name, and your name is shown only if you both agree to meet. Facts labelled sensitive are never shared with anyone else.

We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of the service, in which case this policy continues to apply.

How long we keep it

• Conversations and memories are kept until you delete them, or until you delete your account. A conversation you delete leaves your history at once and is erased from our systems within 30 days.
• Connected-assistant connections are kept until you disconnect; their sign-in keys expire on their own (one hour for an access key, ninety days without use for a refresh key).
• Records used to keep the service safe and running are kept only as long as they are needed for that.
• When you delete your account you are signed out and the account is hidden from everyone at once. You have 30 days to change your mind: sign in again before then and tap Keep account. After 30 days we delete everything tied to it: your profile, conversations, search history, memories, your clone and its chats, the people you follow and who follow you, your scenes and comments, your photos and files, scheduled asks, and your plan and usage records. Once it starts this usually takes a few minutes; if any part fails, we keep retrying until it is done. Copies can remain in backups for a limited time before they are overwritten.
• What stays after you delete your account: messages you sent in other people's chats stay in their chats, as on Instagram, because that conversation is theirs too; and records of moderation decisions and of reports, which we keep for safety.
• We keep the record of a store purchase after you delete your account, because the store can still send us refunds and renewals for it and because it lets a subscription you have not cancelled be restored on a new account. Deleting your account does not cancel a subscription — cancel it in the store.

Your choices and rights

• See and delete memories — Settings → Personalize → Edit your memories.
• Stop Clonaar learning about you — turn off "Reference saved memories", or use Incognito mode, which is never saved and never used to learn about you.
• Disconnect an assistant — Memories → Connected assistants.
• Download your data — Settings → Data & privacy → Download your data. We prepare a copy of everything we hold about you — your account, conversations, memories, messages, scenes, settings and your own photos and files — as readable pages and as JSON, usually within minutes, and tell you when it is ready. You can download it for 4 days. It leaves out passwords and sign-in keys, and things that belong to other people, such as who reported you; the copy lists what it leaves out and why. This works even if your account is suspended.
• Delete conversations from your history, or delete your account in the app's account settings.
• Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, or to object to some uses of it. Contact us at support@clonaar.com and we will respond within the time the law requires.

Security

Information travels encrypted, and everything we store is encrypted on disk. On top of that, your memories — including the ones you share with people who follow you — are encrypted by us with a key that belongs to you alone, and that key is itself locked by a master key kept separately from our database. Someone holding a copy of the database could not read them. When you delete your account, your key is destroyed, so any copy left anywhere, including backups, can no longer be read.

To answer you and let your clone talk to people, our servers do need to read your memories, so this is not "end-to-end" encryption. Uploaded files are private to you and opened only through short-lived signed links, sign-in keys are stored only in a form that cannot be reused if leaked, and connected assistants can save to your memory but read it only if you allow it, and only what bears on their question, as described above. No system is perfectly secure, so please use a strong password.

Children

Clonaar is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has used Clonaar, contact us and we will delete the account.

Changes

If we change this policy we will update the date above, and tell you in the app before a change that matters takes effect.

Contact

Clonar, LLC · support@clonaar.com