Privacy policy
Draft for review · Updated 23 September 2026
Pre-launch draft, not a final legal notice. Cleo’s operator identity and contact details, service providers, and data-retention arrangements must be confirmed before launch. This document describes the current prototype, not a production service.
This draft explains the current waitlist email flow and the browser-based Cleo prototype.
Joining the waitlist
Entering your email alone does not add you to a mailing list. The form prepares a message in your email application. It is sent only when you choose to send it there. No mailing-list provider or automated signup database is connected to this form.
If you send the message, its recipient receives your email address, the message content, and the normal information supplied by your email provider. Do not include passwords, financial information, or sensitive study or wellbeing records in a waitlist request.
Why information is requested
The email request asks to hear about early access to Cleo. Joining is optional and does not create a paid subscription or guarantee an invitation. Any later use for a different purpose needs an updated notice and the appropriate permission.
The prototype on your device
The demo stores its mock sign-in session, study data, journal entries, pinned tasks, and focus-minute totals in browser storage. It is not secure production authentication or a backed-up student record. Use fictional data and avoid sensitive personal information.
Signing out removes the mock sign-in session, not all study data. Your browser’s site-data controls can remove remaining local data; doing so can erase prototype entries that cannot be restored.
Website delivery and third parties
Pages currently load fonts from Google Fonts, which makes network requests to Google. Your email application and its provider handle the email you choose to send. Hosting and any injected diagnostics may process technical request information; their identities, purposes, retention, and any international transfers still require an operator review.
Retention and your choices
Local prototype data remains until removed by the app or cleared through your browser. The mock session has a seven-day validity period. An expired session is no longer accepted, but its stored entry is not automatically deleted; signing out or clearing site data removes it.
The operator has not yet confirmed a retention schedule for received waitlist emails. Before launch, this notice must identify the responsible operator, how to request access, correction, deletion or withdrawal, applicable rights and complaint routes, and how those requests are handled. For an existing email request, you can reply to the same email thread to ask for removal or clarification.
Before the service launches
A final privacy notice must be supplied before collecting information through any new signup, calendar, coaching, analytics, or other service. This draft does not certify compliance with any jurisdiction’s privacy law.