Last updated: 22 October 2026
When you sign up we collect your email address or phone number, depending on how you sign in, the username you choose, and a profile photo if you add one. If you sign in with Google we receive your name, email, and profile picture from Google. If you sign in with Apple we receive your name and an email address, which is a private relay address that forwards to you if you chose to hide your real one, and we treat it the same way as any other. We also store your time zone, so that days, streaks, and reminders line up with your day rather than ours.
If you add more than one account to the account switcher, the app keeps a sign-in token for each saved account in your phone’s secure storage, along with its name, username, and photo, so that you can switch between them without signing in again. Removing an account from the switcher deletes its token from the phone.
We store your habits, daily completions, streaks, and progress statistics such as total completions, current streak, and best streak. This powers your own dashboard and is shared with your friends as part of the app's social features. Habits you mark private are visible only to you.
Some habits are things you are cutting down rather than doing, for example drinking less or smoking less, and for those we store the amounts you log. That is sensitive information and it is treated as such: these habits are created private, they are never named to your friends, and the amounts are never shown to anyone but you. Your friends can see that you kept a habit that day, the same as any other, and nothing about what it is or what the number was. If a habit you count is one you would rather we did not hold at all, delete it and the logs go with it.
If you set a Vacation Pause, we store its start and end date so the app knows which days to treat as a break, habits are not counted as due, streaks are protected, and your friends see that you are on vacation rather than inactive.
If you connect Apple Health, the app asks Apple for permission to read, never to write, these types of data: dietary energy, protein, water, steps, active energy, exercise minutes, and workouts, meaning their type, distance, duration, and calories. You choose which of them to allow in Apple’s own permission sheet, and you can withdraw that permission at any time in the Health app or in your iPhone’s settings.
What is read is used on your phone, with one exception: the day’s number for a habit you have set to fill itself. That number is saved to the habit just as if you had typed it, so it is stored with your completions, counts toward your streak, and appears wherever your progress does, including to your friends and in the snapshot Ori uses to coach you (see "Ori and Your Coaching Data" above). Health also tells the app which app recorded each item, for example MyFitnessPal or Strava, and that name is used on your phone to show where a number came from and to tell you when an app is not sending anything. Your choice of app for food and for fitness is kept on your device; an app you choose for a single habit is stored with that habit.
If you choose to show a day’s numbers on a clock-in photo, they are drawn into the photo before it is uploaded and are seen by whoever can see that post. This is off unless you turn it on for that photo.
We do not use Health data for advertising or marketing, we do not sell it, and we do not share it with anyone except as described here. Disconnecting in Settings › Connections stops the app reading straight away; numbers already saved to your habits stay there unless you delete them.
Ori is the part of the app that handles the most personal information, so this is the part worth reading closely.
What you say to Ori is stored on your account: your side of every conversation, her replies, the goals you set together, the daily steps she issues, and whether you completed them. Some of what she gives you is preparation for a habit rather than work in its own right, and those are advice: they are shown against the habit, there is nothing to mark done on them, and they are closed automatically once the day has passed or the habit they were for is done, removed or paused. We record which of those reasons closed a step, so the app can tell a step you acted on from one that simply expired.
Ori also keeps a written memory of you. After a session, a summary of what happened is folded into a single document that carries across sessions, your goal and your reason for it, the obstacle you named, what has been working, times you agreed to, and things you said you would do. This is what lets her pick up where you left off instead of asking you the same questions every day. It is deleted along with everything else when you delete your account, and you can ask us to wipe it on its own by emailing support.clockdin@gmail.com.
To generate a reply, the relevant parts of your conversation, your memory document, and a snapshot of your current goals, steps, habits, and streak are sent to the AI model that powers Ori. It processes them to produce the response. Ori also writes the text of some of your reminders, which means the same snapshot is used to word a notification.
Please do not tell Ori anything you would not want stored, government ID numbers, passwords, payment details, or another person’s private information.
The app suggests people you might know, and it works out who by walking your own friends’ friend lists. Nothing outside your circle is read to build it: a suggestion is somebody at least one of your friends is already connected to, and the count beside them is how many of your friends that is.
This works in both directions, so you can appear as a suggestion to somebody who is not your friend, with your username, your profile photo and the number of friends you have in common. On a profile you have not connected to yet, the faces of the friends you share are shown as well. Everyone shown is already in your own circle, so nothing about a stranger is revealed to you, and nothing about you is revealed beyond what your profile already shows.
A private profile is still suggested by name and photo, which is what makes it findable, and its contents stay closed until you are friends.
Your one-to-one conversations are stored so they can be delivered and so you can read them again later: the text, reactions, anything you shared into the thread, when each message was sent, and whether it has been read. They are visible to you and the person you are talking to, and to nobody else. We do not read them, they are not used to train any model, and they are never used for advertising. Unsending a message within five minutes deletes it for both of you; deleting it after that removes it from your view only. Conversations live outside your account rather than inside it, because they belong to two people, so deleting your account does not remove them from the other person’s inbox.
If you take part in a duel we store who is in it, the task, the days you clocked in and the time each of those landed, any line you added for the others when you clocked in, your score, whether you forfeited, and the result. We also record who declined an invite, so the duel can continue without them and their decline is not counted as a loss. The clock-in times are recorded on our servers rather than taken from your phone, because who was first can decide the duel and a device clock is set by the person being scored. Duel clock-in photos are stored securely, shared to your feed, and kept with your other clock-ins. Your scores, name, and photo are visible to the other people in that duel, and your duels won, lost, and tied are shown on your profile.
Profile photos, feed images, clock-in photos, and videos you upload are stored securely. Cropping and trimming happen on your device before upload, and the cropped or trimmed file is what we receive. You can delete a photo or video at any time by deleting the post it belongs to, wherever the app shows you that post. Deleting a clock-in removes its photo or video and the post, permanently; it does not undo the habit you clocked in for, which stays done for that day. A duel clock-in cannot be deleted while its duel is running.Your clock-in photos from the current week can be seen from the week card on your profile, and earlier ones from the calendar in Advanced Stats, which is part of Clock'd In+.
A video records sound as well as picture, so posting one means uploading the audio that was captured with it. The app asks for your microphone the first time you record. While the camera is open it holds the microphone ready so that recording starts the instant you press the shutter, but nothing is captured or kept unless you are actually recording, and the app never listens in the background or while you are anywhere else in it. When a video is uploaded we also take a single still from it and store that alongside, so that the feed, the grids and anywhere else that cannot play a clip has a picture to show. That still is part of the post and is deleted with it.
You can save a photo or video you took in the app to your device’s camera roll. That is yours, not ours: it happens only when you press Save on the shot in front of you, the copy goes straight to your library, and we neither keep it nor know it was made. We ask your device only for permission to add to your library, not to read it. Choosing an existing photo or video to post is separate and asks separately, and in that case the only file we receive is the one you picked.
Every photo or video is checked automatically for nudity and graphic violence before it appears to anyone. To do that, the image, or a small number of still frames taken from the video, is sent to a third-party automated moderation service, which returns only a judgement about the content. Nothing else about you is sent with it. If the check flags the media, the post is refused, any file already uploaded is deleted, and a record of the refusal is kept on your account so the rule can be applied consistently. The check runs on media you post, not on your camera roll, and not on anything you do not try to upload. A post that is later reported is checked again the same way.
Photos are uploaded in a way that can finish after you leave the app: your phone hands the upload to the system, and our servers create the post when the photo arrives. While it uploads we keep a short note of the post you asked for (its caption, the habit or duel it belongs to, and anyone you tagged) so the post can be made without you, along with whether it went up.
If you enable push notifications we store your device's push token so we can send you notifications about friend activity, encouragements, comments, tags, duel invites, someone accepting, declining, or forfeiting a duel, a duel being cancelled, someone clocking in against you, duel nudges reminding you to answer an invite, daily duel reminders when you have not clocked in yet, which are timed around how the duel is going for you, a reminder shortly before your next duel day opens, duel results, a notice when a streak freeze has been used to save your streak, a confirmation when a photo you posted has gone up, notices about decisions we take on your account or posts, Ori's step reminders and messages, motivation messages, weekly summaries, and suggestions. We also schedule local reminders on your device for daily clock-ins. While you are on a Vacation Pause, all notifications are silenced, no push, no in-app banners, no reminders, until the pause ends or you end it early. You can turn any of this off in the app's notification settings or in your device settings.
When you report a person or a post, we store which account made the report, who or what was reported, the reason you chose, anything you wrote, and a copy of the reported caption and picture, because the original is often the first thing deleted. Reports are sent to our support inbox and to the tools we use to review them. The person you reported is not told who reported them. We also remember the posts you have reported, so they stay hidden from you.
For each report we keep a record of how it was handled: the automated check’s result, how many different people reported it, and any decision taken. When a decision is about your account, we store your strikes with the date each was given and the date it stops counting, and any posting pause, suspension, or ban. A post taken down is kept rather than deleted, out of view, so it can be put back if the decision is reversed, an appeal is granted, or a ban ends. The same applies to posts and comments hidden by a ban. If you appeal, we store your message. These records are kept to review reports and appeals and to apply our rules consistently, including to repeat abuse.
When you block somebody, we store that you blocked them. Their app can check whether you have blocked them, and uses that only to show your profile to them as private; it cannot see anybody else you have blocked.
Notices about decisions are sent to you in the app and, if your account has an email address, by email through our email delivery provider. If you post something reported for self-harm, we may send you a private message in the app with information about where to find support; that message is never sent by email.
Clock'd In+ purchases are processed by Apple. We never see or store your card details. We check whether your subscription is active so the app knows which features to unlock.
When you search for other users we store your recent searches to make searching faster next time. You can clear your search history at any time from the search screen.
If you submit a bug report we collect the description, steps to reproduce, and severity you provide, and send it to our support inbox. It is used only to diagnose and fix the issue. We do not add personal data to a report beyond what you choose to include.
We record which screens you open and which actions you take inside the app, and we collect crash reports when the app fails. Both are tied to your account and your device identifier, and we use them to find what is broken and what is confusing. None of it is used for advertising, and we do not track you across other companies’ apps or websites.
We record when you were last active so we know whether to send you a push notification or show an in-app banner instead. This keeps you from being notified twice about the same thing. It is not shown to other users.
Your data is used to provide and improve the Clock’d In experience. We use it to:
We do not sell your personal data. We do not share it with advertisers or data brokers. Your information is visible only to other users in the ways the app’s features describe, for example, your friends seeing your posts and progress.
To run the app we use service providers who process data on our behalf and only to provide their service to us: cloud hosting and storage, the AI model that powers Ori, an automated image moderation service, an email delivery service for messages we send you, an SMS service for sign-in codes, and crash reporting. Subscriptions are processed by the store you bought through. We may disclose data if we are legally required to.
Sign-in uses secure authentication, and all data travels over encrypted connections (HTTPS). Your data is stored in secure cloud infrastructure. No system is perfect, and we will tell you if a breach affects your account.
You can view, edit, or delete your personal data at any time in the app, with one exception: on the free plan, clock-ins from before the current week are seen only with Clock'd In+. You can delete your account, which permanently removes your profile, posts, coaching data, and everything else listed under Termination above. To clear Ori’s memory of you without deleting your account, go to Settings › Privacy and choose “Clear Ori’s memory”. To exercise any further rights over your data that apply where you live, email support.clockdin@gmail.com and we will honor them.
Clock'd In is not for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, email support.clockdin@gmail.com and we will remove it.
We may update these terms and this privacy policy from time to time. We will notify you in the app when a change is significant. Continuing to use Clock’d In after a change means you accept the updated terms.
Questions about any of this: support.clockdin@gmail.com
Social & Communication Data
Your friend connections, encouragements, comments, fires (likes), tags, and feed posts are stored to provide the social features. Feed posts and completions are visible to your friends. Tagging someone records who you tagged, notifies them, and links their profile from the post or comment. Inside a duel, the other participants can see your name, photo, and score.