This page is a plain-language summary. The Privacy Policy is the full statement.
On-device tools and cloud conversation are different paths
Dictation is transcribed on your Mac, and the built-in AI models run there too. History, settings and your Mac’s Spot Collection are stored on your Mac. Cloud AI is optional and off until you set it up. Cloud Voice sends your audio, the assistant’s instructions, your conversation, enabled tool results and anything you attach directly to Google. It runs on your Clabrate account, not your own Gemini API key, and the setup of each session (the assistant’s instructions and its list of tools) also reaches Google through the Clabrate account service. Other cloud profiles send what that feature needs to the provider you selected for it.
History
History is off until you turn it on with Keep a local history in Settings → Privacy & permissions. When it is on, Clabrate stores your dictations and assistant conversations on your Mac. You can delete single entries, and Clear history on the History page removes all of it. Turning History off stops new entries; it does not delete what is already stored. See History & insights.
Your email account
You sign in with an email address. The account service is hosted on Cloudflare. It stores your email address, a random account ID, the dates the account was created or deleted, sign-in codes and sessions as one-way hashes, email-change records until they are cleaned up, and short-lived counters that limit repeated attempts. If you use Cloud Voice, it also holds your credits and records of each session and its usage, never what was said; the Privacy Policy lists them. Resend delivers the sign-in emails, so it receives your address and the message with your code. Your settings, history, dictation, conversations, API keys and the Spot Collection on your Mac are not stored by the account service and are not synced.
Spot on Android
Without signing in, Spot on Android keeps your Collection on your phone, including Inkwells you earn from ads, and it isn’t included in Android backups. If you sign in, the account service also stores your Spot Collection and Ink, the current day’s claim, visible time and ad progress (replaced the next time you use Spot on a later day; days start at midnight UTC), a log of the app’s requests, and records of your Google Play purchases and of the ads you watched while signed in. While Spot is visible, the app reports the time about every 10 seconds; only the time of the last report is kept.
Google Play handles purchases and receives a keyed hash of your account ID, never the ID itself. Rewarded ads come from Google AdMob through Google’s ads SDK on your phone. Signed in, the app gives Google a keyed ID and a one-time code so our service can confirm the ad, never your account ID; signed out, it gives Google nothing about you, and your phone adds the Inkwell itself. Google’s ads SDK collects information from your phone to show and measure ads, under Google’s policies. Where Google asks for consent, Privacy options, shown with the ink pump in the Collection and the Shop, lets you change your choices.
On your Mac, your sign-in and the API keys you add are kept in the macOS Keychain. Signing out ends the session; this Mac remembers that you verified, so the on-device features keep working. Session expiry affects account operations, not the on-device features.
Delete an account, or delete local data
Deleting your account removes your email address from our service, deletes email-change records, cancels unused sign-in codes and ends every session. We keep a record that an account existed: its random ID and the dates it was created and deleted, with no email address. On this Mac the app removes your saved sign-in, and you must verify an email address again to keep using Clabrate. If your Mac cannot remove the saved sign-in, the app tells you and lets you retry.
You can also delete your account in Spot on Android. That also signs the Mac app out of the account; on a Mac where you have already verified your email, the on-device features keep working. Either way, deleting it also deletes all your Spot data on our service at once, including Inkwells, finds and Daily Boost you paid for, and it can’t be undone. Deleting your account deletes our record of what you bought, so we can’t give those items back or move them to a new account, and deleting doesn’t by itself refund them. You can ask us to refund Inkwells you paid for and haven’t opened, within 30 days of buying them. Inkwells are sold in packs, and that’s only while your pack’s Rare Inkwell, the one that always opens to a Rare, is still unopened. If you have unopened Inkwells you bought in the last 30 days, ask for the refund before you delete. Daily Boost can be refunded, before or after you delete. See the Refund Policy. Google Play keeps its own record of your order, and Google keeps its own ad records, under its policies. You can also ask us to delete your account by emailing support@clabrate.com. We act only once the request is confirmed from the account’s own email address.
Deleting your account does not erase the settings, history, models or Spot Collection on your Mac, or your phone’s own Spot Collection, and removing the app does not delete your account. To remove local data, delete the Clabrate folder in ~/Library/Application Support. Browser-pane site data and the items in the macOS Keychain are stored separately from that folder; email support@clabrate.com for help removing them. Cloudflare and Resend keep their own logs and backups under their policies; we cannot promise exact deletion dates for those.
Analytics and support
The Mac app counts how it is used only if you turn that on in Settings → Privacy & permissions. It is off unless you turn it on, it never includes what you say, type or see, and turning it off deletes the counts. Google’s ads SDK in Spot on Android, described above, is separate. The website, clabrate.com, uses Google Analytics. In the European Economic Area, the United Kingdom and Switzerland, and where we cannot tell which country you are in, it stays off until you accept. Elsewhere it is on unless you turn it off or your browser sends a privacy signal. Cookie settings in the footer of any page turns it off. Diagnostic logs stay on your Mac. If you export a support file, read it before sharing: it contains your settings and the app logs.
See the Privacy Policy for providers, retention and deletion in full.