Privacy Policy

We collect:

• Account information — the email address and password you use to create and access your account. Passwords are stored in hashed form.
• Content you create — your goals, assessment answers, generated roadmaps, tasks, and habits.
• Operational data — limited technical information needed to operate and secure the Service, such as request logs.

We use your information to:

• provide, maintain, and improve the Service;
• generate your roadmap and habit suggestions;
• send account-related emails, such as password reset messages;
• secure the Service and prevent abuse.

We do not sell your personal information, and we do not use it for third-party advertising.

To generate your roadmap and habit suggestions, we send the relevant content you provide — such as your goal and assessment answers — to our third-party AI provider (xAI). That provider processes the content to return generated output and handles it under its own terms and privacy practices. We do not send your password or other account credentials to the AI provider.

Your account and content are stored in a database hosted on Cloudflare infrastructure, and the Service runs on Cloudflare Workers. These providers process data on our behalf to host and deliver the Service.

We use token-based authentication (JWT) to keep you signed in. These tokens are used solely to operate the Service. We do not use third-party advertising or cross-site tracking cookies.

We share information only with the service providers that help us operate ClearPath (for example, our hosting and AI providers), or where required by law. We do not sell your data.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete a goal, its associated sub-goals, tasks, and habits are removed. You can delete your goals and account data from your account page.

You can access and update your content within the app, and delete your goals and account data at any time. If you would like assistance with a data request, contact us using the details below.

We take reasonable measures to protect your information, including hashed password storage and authenticated, access-controlled API requests. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions about your privacy? Contact us at [email protected].