CleverLife.ai Privacy Policy

1. Information We Collect

When you use CleverLife.ai, we may collect:

• • Your Google account information (email address, profile name) when you sign in with Google.
• • Emails and attachments from school-related senders (e.g., your school's system or teachers) for the purpose of organizing school-related information.
• • Child profile information you provide (name, grade, teacher's name).

We only access Gmail data from whitelisted school senders and only after you connect your Google account.

We do not access or process emails outside of the whitelisted senders you approve.

We request read-only Gmail access (the "gmail.readonly" scope) together with your basic Google profile ("openid", "email", "profile"). We cannot send, modify, or delete any of your email.

2. How We Use Your Information

We use your information to:

• • Retrieve school-related emails from your connected Gmail account.
• • Categorize and summarize updates (events, meals, curriculum, etc).
• • Display organized summaries inside your CleverLife dashboard.
• • Improve our service and user experience.

We never sell, rent, or share your personal information or Google data with advertisers.

3. Data Sharing and Processing

To operate CleverLife.ai, some data may be processed by trusted infrastructure providers:

• • Google (Gmail API + OAuth) — the source of the school emails you authorize us to read, and your sign-in identity.
• • Supabase (Postgres) — our primary database for account data and the AI-generated summaries.
• • Supabase Storage — stores email attachments until you delete your account.
• • n8n (self-hosted) — our self-hosted workflow tool that forwards email body and subject to OpenAI for classification.
• • OpenAI (API, called via n8n) — classifies and summarizes email content. OpenAI does not use this data to train its models.
• • Vercel — hosting for this website and the app frontend, which never receives raw Gmail content.
• • DigitalOcean — hosting for our backend service, which processes Gmail content in memory.

These processors only handle data on our behalf and cannot use it for their own purposes.

We do not transfer, sell, or disclose Google user data to any external parties outside the processors listed above.

Raw Gmail content (email body, subject, and sender) is retained for up to 30 days to generate summaries and structured events, then automatically deleted. Attachments and the AI-generated summaries and events are kept until you delete your account.

CleverLife.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

OpenAI does not use customer data submitted through our API for model training.

4. Data Storage and Security

• • Account and child profile data are stored securely in Supabase (encrypted at rest).
• • Processed summaries or extracted details may be stored securely in encrypted cloud storage.
• • Google OAuth tokens receive an additional layer of application-level encryption (AES-256-GCM) before they are stored.
• • The text of your emails (body, subject, and sender) is automatically purged after 30 days; attachments and AI-generated summaries are kept until you delete your account.
• • All data transfers use TLS/SSL encryption.
• • We follow security best practices and limit access internally to essential personnel only.

5. Your Choices and Rights

• • You can disconnect your Google account directly in the app from Settings → Disconnect Google, which immediately revokes our access and clears the tokens we hold.
• • You can delete your account and all associated data directly in the app from Settings → Delete Account.
• • You can also revoke CleverLife.ai's access to your Google account at any time through your Google Account Permissions.
• • You may also request deletion of your account and all associated data by contacting us at admin@cleverlife.ai.
• • You may update or remove child profile information in the application at any time.

Once you revoke access or request deletion, all stored data linked to your Google account is permanently removed.

6. Children's Privacy

CleverLife.ai is designed for parents and guardians. We do not knowingly collect personal information directly from children under 13.

Parents or guardians are responsible for any child profile information submitted to CleverLife.ai.