Legal

    Privacy Policy

    Last updated: July 10, 2026

    1. Introduction

    Welcome to Clarion ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our executive-presence training application.

    2. Information We Collect

    2.1 Account Information

    When you create an account, we collect:

    • Email address
    • Username
    • Password (stored securely using industry-standard encryption)
    • Account preferences and settings

    2.2 Voice Recordings and Your Voice Clone (Biometric Data)

    Your voice is the material this product works with, so we want to be precise about what we do with it. When you record in the app, we collect and process your voice recordings. These recordings are:

    • Captured when you use the recording feature within the app
    • Sent to third-party processors for speech analysis, transcription, and voice synthesis (each is named, with what it receives, in Section 4)
    • Stored in our audio storage for as long as your account is active, to provide feedback, playback, and progress tracking
    • Deleted when you delete your account, or earlier on request

    Voice cloning. With your separate, explicit consent (asked for in the app before you first record), we create a synthetic copy of your voice — a voice clone — from your recordings, using our voice-synthesis providers ElevenLabs and Cartesia. The clone exists so you can hear your own practice lines delivered back to you in your own voice. It is used only for that: it is never used to impersonate you or to generate audio you did not request. Audio we synthesise — in your cloned voice or in a reference voice — is marked as AI-generated (a machine-readable tag in the audio file), so it is not presented as a recording of you. Our voice providers' API terms prohibit training shared AI models on your audio, and we never permit it.The clone is stored on our providers' infrastructure until it is deleted — you can withdraw consent and have it deleted at any time, and it is permanently deleted when you delete your account.

    Special-category (biometric) data and lawful basis. Voice recordings and a voice clone can identify you, so under UK/EU GDPR we treat them as special-category biometric data (Article 9). Our lawful basis for recording and analyzing your voice, and separately for creating your voice clone, is your explicit consent — collected as an explicit, affirmative choice in the app, and withdrawable at any time (Section 6).

    2.3 Learning Progress Data

    We track your learning progress including:

    • Exercises completed and scores achieved
    • Pronunciation accuracy metrics
    • Learning streaks and achievements
    • Time spent on exercises
    • Words and phrases you've practiced

    2.4 Career Record (optional)

    You may optionally upload a resume or LinkedIn profile (PDF or pasted text) to personalise your coaching. When you do:

    • The file or text is read once, in memory, to extract a structured career summary — the original file/text is never stored
    • The text transits our AI provider (OpenRouter) once for that extraction; contact details (email, phone, address) are stripped
    • Only the summary you review and explicitly confirm is kept, and it is used solely to personalise your own coaching and practice scenes
    • You can delete it in-product at any time, and it is erased with your account

    2.5 Payment Information

    If you subscribe to our premium services, payment processing is handled by Stripe. We do not store your full credit card details. Stripe's privacy policy governs how they handle your payment information.

    2.6 Technical Data

    We automatically collect:

    • Browser type and version
    • Device information
    • IP address
    • Usage patterns and session data

    3. How We Use Your Information

    We use your information to:

    • Provide and improve our pronunciation training services
    • Analyze your speech and provide personalized feedback
    • Create and use your voice clone to render your practice audio back to you in your own voice (with your explicit consent — Section 2.2)
    • Track your learning progress and recommend exercises
    • Process payments and manage subscriptions
    • Send you important updates about your account
    • Improve the product and service quality using aggregated usage data — we never permit your voice recordings or your voice clone to be used to train shared AI models, and our providers' API terms prohibit it
    • Comply with legal obligations

    4. Third-Party Services (Sub-Processors)

    We use the following service providers to run Clarion. This is the complete list of third parties that receive your voice, voice-derived data (such as transcripts and scores), or other personal data — and exactly what each one receives:

    4.1 Supabase (database and audio storage)

    Your account data, your raw voice recordings, rendered practice audio, transcripts, and derived scores are stored with Supabase, our database and storage provider. Audio lives in a private bucket accessible only through authenticated, owner-scoped requests.

    4.2 ElevenLabs (voice cloning and synthesis)

    With your explicit consent, your voice recordings are sent to ElevenLabs to create your voice clone, and the clone is stored on ElevenLabs' infrastructure until it is deleted (it is deleted when you delete your account, or earlier on request). ElevenLabs renders your own practice audio in your voice. It is used for nothing else.

    4.3 Cartesia (voice cloning and synthesis)

    With the same explicit consent, the qualifying take that earns your dynamic voice is also sent to Cartesia, a second voice-synthesis provider, to create a voice clone used for one feature: the dynamism drill, which plays a flat and an expressive version of a line back to you in your own voice. The clone is stored on Cartesia's infrastructure until it is deleted.

    4.4 Speechace (speech analysis)

    Your audio recordings are sent to Speechace for speech analysis — pronunciation, pitch, and timing metrics that power your scores and feedback.

    4.5 OpenAI (transcription)

    Your audio recordings are sent to OpenAI's Whisper API to be transcribed into text. Per OpenAI's API terms, API inputs are not used to train their models.

    4.6 OpenRouter (AI coaching)

    Transcripts of what you said (text, not audio) are sent through OpenRouter to large-language-model providers to generate your coaching feedback and practice scenarios.

    4.7 Inworld (stock example voices)

    Inworld generates the stock example voices you hear on the landing page and in exemplars. It receives only text and a stock voice ID — never your voice or any audio of you.

    4.8 PostHog (product analytics)

    With your cookie consent (Section 8), PostHog (EU-hosted) receives usage events and masked session replays. Analytics events never include your audio or transcripts.

    4.9 Vercel (hosting)

    The application is hosted on Vercel; your requests (including uploaded audio in transit) pass through its infrastructure.

    4.10 Stripe (payments)

    Payment processing is handled by Stripe. When you make a payment, your payment information is processed directly by Stripe in accordance with their privacy policy. Stripe receives no voice data.

    5. Data Retention

    We retain your data for as long as your account is active. To be plain about what that means: your voice recordings, rendered practice audio, transcripts, scores, and your voice clone are kept while your account exists — we do not currently apply an automatic expiry to older recordings. All of it is permanently deleted when you delete your account (Section 6), and you can request earlier deletion of specific recordings or of your voice clone at any time.

    6. Your Rights

    Depending on your location, you may have the right to:

    • Access: Request a copy of the personal data we hold about you
    • Rectification: Request correction of inaccurate data
    • Erasure: Request deletion of your personal data
    • Portability: Request a machine-readable copy of your data
    • Withdraw consent: Opt out of data processing at any time
    • Object: Object to certain types of data processing

    Deleting your account. You can erase your account and all associated data yourself at any time from the account menu (your name, top right) → Delete account. This is immediate and irreversible: it permanently deletes your voice clone from both of our voice providers (ElevenLabs and Cartesia), every audio recording and rendered clip from storage, and all of your data from our database (account, recordings, transcripts, presence scores and history). You will be signed out once deletion completes.

    To exercise any of these rights, or if you would prefer we action a deletion or data-access request on your behalf, please contact us at privacy@clarion.coach.

    7. Data Security

    We implement industry-standard security measures to protect your data, including:

    • Encryption of data in transit (HTTPS/TLS)
    • Secure password hashing using bcrypt
    • Regular security audits and updates
    • Access controls and authentication

    8. Cookies and Tracking

    We use cookies and similar technologies to:

    • Keep you signed in
    • Remember your preferences
    • Analyze how our service is used
    • Improve user experience

    With your consent, we use a privacy-first product analytics tool (PostHog, hosted in the EU) to understand how the product is used and improve it. This includes masked session replays — recordings of on-screen interactions used to debug usability issues. Replays mask all form inputs and any sensitive content (your transcripts and presence scores are masked) and never capture your audio. Analytics and replay run only after you accept cookies, and you can withdraw consent at any time via the cookie banner. You can also manage cookie preferences through your browser settings.

    9. Children's Privacy

    Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

    10. International Data Transfers

    Your data may be transferred to and processed in countries other than your own — several of the providers in Section 4 (including our voice-synthesis and speech-analysis providers) process data in the United States. We ensure appropriate safeguards are in place for such transfers, such as Standard Contractual Clauses (and the UK IDTA/addendum where applicable), in compliance with applicable data protection laws.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

    12. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us at:

    Email: privacy@clarion.coach
    Website: https://clarion.coach