Privacy Policy

Apps

We collect limited technical information needed to operate and improve the apps, such as:

• Device type and model (high level)
• Operating system version
• App version
• Basic diagnostics and crash reports (when shared via your device or platform settings)

Website (cleardue.net)

We collect basic website analytics to understand traffic and improve the site, such as:

• Pages viewed and general usage patterns
• Approximate location (derived from IP at a city/region level)
• Referring page and device/browser type (high level)

We do not sell personal information. We do not use website analytics to track you across other companies' websites or apps.

ClearDue Tracker

• Your bill and reminder data is stored on your device.
• If you enable iCloud sync (Premium), your data is stored in your private iCloud account to sync across your Apple devices.
• We do not have access to your private iCloud data.

ClearDue Abode

• Abode supports sign-in and cross-device sync using a cloud backend.
• Homes, rooms, items, and related records are stored in a database associated with your account.
• Photos and documents you attach may be stored in secure file storage. The app may use time-limited signed links to display those files back to you.

Private journal and on-device processing

Information you choose to save may include people or partner names and aliases, encounter dates, relationship context, ratings, moods, notes, tags, safety observations, health and prevention categories, methods, reminders, places and coordinates, photos, scanned-document text, trusted-contact details, and app preferences. The private journal is stored in a local database on your device and is not automatically synced to ClearDue servers or iCloud. Oryna's document text recognition uses Apple's Vision framework on the device. Oryna does not send journal images or extracted text to Gemini or another external AI service.

Permissions

Oryna requests camera or photo access only when you choose an attachment or scan. It requests location when you ask to attach a current place or start a timed Safety Share. A Safety Share may use location in the background while active and displays Apple's background-location indicator. Notifications are used for reminders and Safety Share updates. Face ID or Touch ID is processed by iOS; Oryna receives the authentication result and does not receive or store biometric templates. You can change these permissions in iOS Settings.

Safety Connections and timed Safety Shares

When you create a Safety Connection, the trusted contact's email address is provided to Apple so Apple can identify the intended iCloud participant. Oryna creates a private CloudKit share restricted to that participant. During a timed Safety Share, Oryna sends precise latitude and longitude, horizontal accuracy, start/update/expiry times, active or ended status, and the CloudKit identifiers needed to operate the share through your private iCloud account. The selected trusted contact can view that shared location data. Journal entries, health and prevention details, notes, photos, and scanned documents are not included in the Safety Share payload. Grand River does not receive the journal or Safety Share payload through its own servers.

Retention, deletion, and export

Journal data remains on your device until you delete individual records, use Oryna's Delete All Data control, or remove the app. Delete All Data removes local entries, partner profiles, trusted contacts, and local sharing history. It does not automatically delete or revoke existing CloudKit Safety Connections or Safety Share records. Ending or expiring a Safety Share stops location updates and marks the session ended, but the CloudKit record may remain in iCloud. Oryna-related iCloud data and sharing can be managed through Apple's iCloud controls. An Oryna CSV export is an unencrypted file created for you to share or save; after export it is outside Oryna's local database and privacy lock, and the destination you choose controls it.

Subscriptions and Apple services

Apple processes Oryna subscription purchases, trial eligibility, offer codes, restores, and entitlement status through StoreKit. Grand River does not receive or store your full payment-card details. Apple may process Oryna information under Apple's own terms and privacy policy when you use StoreKit, iCloud/CloudKit, Location Services, notifications, or other Apple platform services.

Information collected in CareAnchor

Depending on how you use CareAnchor, information collected may include:

• Account and profile information — name, email, sign-in and authentication data, and subscription status
• Care-circle information — circle names, member roles, permissions, invitations, and approval or access status
• Patient and care coordination information — patient names, dates of birth, notes, clinicians and providers, appointments, invitees, medications, tasks, alerts, notification preferences, daily updates, visit updates, and patient perspective entries
• Device and notification information — push token, notification preferences, quiet hours, and device-related information needed to deliver notifications and app functionality
• Billing and purchase information — information needed to validate subscriptions and paid access

How CareAnchor data is used

CareAnchor data is used to:

• Operate user accounts
• Manage care circles and role-based access
• Sync and display care coordination information across authorized members
• Deliver alerts, reminders, and notifications
• Manage subscriptions and paid access
• Maintain security and prevent abuse
• Troubleshoot and improve the service

How CareAnchor data is shared

CareAnchor is collaborative. Information you add may be visible to other authorized members of the same care circle based on their role and permissions. You should only add information you are authorized to share with that care circle.

Data may also be shared with service providers used for hosting, database services, authentication, push notifications, subscription and payment verification, and support and reliability.

We do not sell personal information.

Notifications and lock-screen display

If notifications are enabled, CareAnchor may send alerts, reminders, task notifications, appointment notifications, and care updates. Depending on your device settings, limited information from these notifications may appear on the lock screen. You can control device-level notification permissions in your device settings and manage in-app notification preferences within CareAnchor.

Data retention in CareAnchor

We retain CareAnchor data as needed to operate the service, maintain care-circle records, comply with legal obligations, resolve disputes, and enforce our agreements.

If you leave a care circle or lose access, previously shared care-circle information may remain available to other authorized members of that circle unless deleted through the product's functionality.

Security in CareAnchor

We use reasonable administrative, technical, and organizational safeguards to protect CareAnchor data. No method of storage or transmission is completely secure, but we work to protect your information and reduce risk.

Health and care-related information

CareAnchor may store sensitive care-related or health-related information that users choose to add for care coordination purposes. CareAnchor supports organization and communication among caregivers.

CareAnchor is not a medical device. It is not a substitute for professional medical advice, diagnosis, or treatment. It is not intended for use in emergencies.

Your choices in CareAnchor

You can:

• Update certain account and profile information
• Manage care-circle participation and permissions where your role allows
• Control notification settings in the app and on your device
• Contact us with privacy or data questions at support@cleardue.net