This policy explains what information the Clairix app handles, where that information goes, and how long it is kept. It is issued by the operator of Clairix (“Clairix”, “we”, “us”). Clairix is built to keep your data on your device. Most of what the app does never leaves your phone.
Contact: support@clairix.app Website: https://clairix.app
This policy covers the Clairix app in both the Google Play edition and the Clairix Full edition downloaded from our website. Where a section applies only to Clairix Full, it says so.
1. Information that stays on your device
The following is created and stored only on your phone. We never upload it and cannot access it:
- Bluetooth, Wi-Fi, NFC and cellular scan results, including nearby device identifiers and your cell-tower history.
- The event timeline, the location history used for pattern-of-life and following detection, and vehicle trip records.
- The results of the spyware and phone-health checks, including the list of apps installed on your phone.
- The unlock ledger, which records lock-screen unlock successes and failures.
- Your Comms encryption keys, contacts and message history.
- Your duress phrase and app-lock settings.
- Hidden-camera sweep images. The camera feed is analysed live and is not saved.
- Clairix Full only: cards you save in the Card Vault. These are encrypted with a key held in your phone’s secure hardware.
You can delete all of this at any time with Panic Wipe in the app, or by uninstalling Clairix. Android backups are turned off for Clairix, so this data is not copied to cloud backups.
2. Information that leaves your device
2.1 Encrypted messages and calls (Comms)
If you choose to use Comms, your phone registers with the Clairix relay server. The relay stores:
- Your Clairix number and public keys. These let other people send you encrypted messages. The Clairix number is a random nine-digit identifier assigned by the relay. It is not your phone number and is not linked to your name, email or any other identity.
- Encrypted message envelopes waiting to be delivered. These are deleted when your phone collects them, or after 30 days if they are never collected.
- Your push endpoint, if you set one up. This is the UnifiedPush address your phone can be woken through. The push itself carries only the word “wake”.
- Unused invite codes you created. These expire after 7 days.
Messages, voice notes, photos, videos, emergency (SOS) alerts and calls are end-to-end encrypted. The relay cannot read their content and does not learn who sent a message. Call audio travels directly between the two phones, or through a relay server that cannot decrypt it.
The relay can observe the recipient of each envelope, its size and the time it was queued, and, at the moment of sending, the sender who signed the request. The sender is not stored with the envelope. We do not keep request logs.
2.2 ClairixCoin (Clairix Full only)
If you use the coin feature, the relay records the transfers you make: who sent, who received, the amount and the time. It keeps the 100 most recent transfers per account. Notes attached to a transfer are end-to-end encrypted and not visible to the relay. ClairixCoin is an in-app token with no monetary value.
2.3 Emergency alerts
When you press SOS or type your duress phrase, Clairix reads your current location and sends it, end-to-end encrypted, to the contacts in your groups. Location is not read for this purpose at any other time.
2.4 Traffic and navigation
Live traffic is used only when you are actively navigating and are registered with Comms. In that case Clairix sends anonymous speed samples to the relay. Each sample contains a road segment, the segment’s map position, a speed and a time. Your GPS track is never sent. Nothing is sent for the first 500 metres of a trip or the final approach to your destination, so trips cannot be traced back to where they start or end. Samples are linked only to a salted, one-way hash of your Clairix number and are deleted after two hours. Learned road-segment positions are kept for 30 days. Traffic incidents you choose to report are shared with other users until they expire.
2.5 Maps and search
- Map tiles. When you view the map, tiles are downloaded from OpenStreetMap’s servers. Those servers see your IP address and the area being viewed.
- Address search. When you search for an address, the search text is sent to OpenStreetMap’s Nominatim service. When you look up the address of a point, its coordinates are sent there too.
- OpenStreetMap’s terms. These services are run by the OpenStreetMap Foundation under its own privacy policy: https://osmfoundation.org/wiki/Privacy_Policy
- Offline road maps. These are downloaded from GitHub, which sees your IP address and the region you downloaded.
2.6 Things you choose to share
When you export a report or share an invite link, Clairix hands it to the app you pick through Android’s share menu. What happens next is up to that app.
3. What we do not do
- We do not sell your data.
- We do not use advertising or analytics services. There is no analytics SDK, advertising SDK or crash reporter in the app.
- We do not track you across apps or websites.
- We do not use your data to build advertising profiles.
- We do not collect your name, email address, phone number or contact list.
4. Service providers
The Clairix relay and call-relay servers run on Cloudflare, which processes this data on our behalf. Like any web host, Cloudflare’s network handles your IP address when your phone connects. We use connection addresses only to limit abuse of account registration, and we do not keep them in our records.
5. Permissions
Clairix asks for each permission when you use the feature that needs it. Location, Bluetooth, camera, microphone, NFC, phone state, usage access and device-admin access are used only for the features described inside the app, and the results stay on your device except as described in section 2.
In particular:
- Background location is used only by the tracker scanner you start, to tell whether a device is moving with you. Location history stays on the device.
- Camera is used for the hidden-camera sweep and to scan a contact’s pairing code. Nothing is recorded.
- Microphone is used only during a call you place or answer, and while you hold the record button for a voice note.
- Access to the installed-app list is used only by the spyware check, on the device.
6. Deleting your data
- On your device. Use Panic Wipe, or uninstall the app.
- On the relay. Panic Wipe and Unpair both unregister your number from the relay and delete your account: your keys, queued envelopes, push endpoint and, in Clairix Full, your coin balance and transfer history. A few things are not removed straight away:
- Anonymous traffic samples expire within two hours.
- People you have messaged keep their own copies of your messages, and in Clairix Full, people you sent coins to keep their own record of the transfer.
- By email. You can also write to support@clairix.app and ask us to delete your relay account. Tell us your Clairix number. We have no other way to identify your account. Requests are handled within 30 days.
- Automatic expiry. Relay data expires on its own as described above.
Full instructions: https://clairix.app/delete-account
7. Children
Clairix is not directed to children under 13, and we do not knowingly collect information from them. Google Play lists Clairix for adults.
8. Security
Data in transit is protected with TLS, and Comms content is also end-to-end encrypted with the Olm double ratchet and sealed envelopes. Sensitive data on your device is encrypted with keys held in Android’s hardware-backed keystore. No system is perfectly secure, and you are responsible for keeping your device and passcode safe. Details are at https://clairix.app/security.
9. Legal basis and your rights
Where data protection law applies to you, our basis for handling the data in section 2 is the performance of the service you asked for: delivering your encrypted messages, your emergency alerts and your navigation. You have the right to access, correct and delete your data, and to object to its processing. Because the relay holds only pseudonymous keys and sealed envelopes, the practical way to exercise these rights is to delete your account as described in section 6. For anything else, write to support@clairix.app. We answer within 30 days. If you live somewhere with a data protection authority, you also have the right to complain to it.
10. Changes
If we change this policy, we will update the effective date above and post the new version at https://clairix.app/privacy. For significant changes we will also give notice in the app.
11. Contact
Questions or requests: support@clairix.app Security reports: security@clairix.app