Privacy notice

Clarifam is a household budget and retirement planner. This notice explains what Clarifam holds about you, why, who can see it, how long it is kept and what you can ask us to do with it.

Who we are

Clarifam is run by Dan Lister, trading as Peeek, based in Manchester, England. As the person who decides how your data is used, Dan is responsible for it (the “controller” in data protection law). For anything about your data, email [email protected].

What we hold

Your account: your name and email address, which you need to create an account, your password (stored only in a scrambled form that cannot be turned back into the password), any passkeys you add (we hold only the public part), your profile picture if you add one, and when you joined and last signed in.
Your household: the figures you and the other members type in, such as income, bills, the budget, savings pots, debts, balances, pension pots and their history, and the retirement plan (including birth year and retirement age). Also the household's name and picture, its members' names, email addresses and roles, and its invite code.
What others enter about you: other members of your household may type in figures about you, such as your income or your pension.
AI assistants: if you or another member connects an AI assistant to Clarifam, a record of that connection and its access.
Technical logs: when you use Clarifam, our servers record what was asked for and when, with your email address and the type of browser you use. When someone tries to sign in, the email address they typed is recorded, even if there is no account for it. Logs do not include your figures or your IP address.
Database copies: before each update to Clarifam we copy the database, so that a failed update can be undone.

You type everything in yourself. Clarifam does not connect to your bank, and it uses no analytics or advertising.

Why we hold it

To provide Clarifam to you. Your account and your household's figures are what the service is. The legal basis is that we need them to provide the service you signed up for (contract).
To keep Clarifam secure and working. The technical logs, the database copies and things like locking an account after repeated failed sign-ins help us spot problems and misuse, and recover from them. The legal basis is our legitimate interest in running a safe, reliable service.

We do not use your data for marketing, we never sell it, and we make no automated decisions about you.

Who can see it

Your household. Everyone in your household sees the household's figures, and each member's name, email address and profile picture. That is the point of sharing it.
An AI assistant a member connects. If you or another member of your household connects an AI assistant, it can read the household's figures and its members' names and email addresses, and it can mark bills paid and record balances. Any member can do this without asking the others. What the assistant's provider does with that data is covered by its own terms and privacy policy, not this one.
Cloudflare. Everything sent between your device and Clarifam passes through Cloudflare, which protects Clarifam from attacks and keeps it fast. To do that, Cloudflare unlocks the encrypted traffic on its way through, so it can see what passes through it. It handles that traffic only on our behalf, under its data processing terms. Its network may carry the traffic outside the UK, including to the United States. Where it does, it is protected by the safeguards UK law provides for this: the UK Extension to the EU-US Data Privacy Framework and the UK’s International Data Transfer Addendum.
Peeek. We look at your data only when we need to run, fix or secure Clarifam, or when you ask us to.
Where the law requires it. We would share data with the authorities only if the law required us to.

Clarifam runs on servers in Manchester, England, and your data is stored there.

How long we keep it

Your account and your household's figures are kept for as long as you have an account.
You can delete your account yourself at any time, from the Household page in the app. Your account, your profile picture, your place in the household and the records of your sign-ins are deleted straight away. If you were the household's only member, the household and everything in it are deleted too. If other people are still in it, the household's figures stay with them, because they are theirs as well.
After you delete your account, we keep a note of an internal number (not your name or email) for about a day, so that old sign-ins stop working.
Records of sign-ins that have expired are cleared out regularly.
Technical logs are deleted after 15 days.
Database copies are deleted after 7 days, so something you delete can remain in a copy for up to 7 days.

What Clarifam stores on your device

A sign-in cookie on the sign-in pages, so you stay signed in. If you tick “Remember me” when you sign in, or “Keep me signed in” when you create your account, it lasts for up to 14 days after your last visit. Otherwise it ends when you close your browser.
Short-lived security cookies used while you sign in, which protect the sign-in forms from misuse.
Your sign-in in the browser’s storage, so the app knows who you are without asking you to sign in on every page.
A few preferences, such as which columns of a table you have opened or whether you have put the setup steps aside, and a short note when the app reloads itself after an update.

All of these are needed for Clarifam to work as you would expect. If Cloudflare needs to check that a visitor is a person rather than a bot, it may also set its own short-lived security cookie, such as __cf_bm or cf_clearance, which lasts around 30 minutes. There are no analytics or advertising cookies.

Your rights

You have the right to:

ask for a copy of the data we hold about you
have it corrected if it is wrong
have it deleted
ask us to limit how we use it
receive it in a form you can take elsewhere

You can also object at any time to our use of your data for keeping Clarifam secure (our legitimate interest). If you do, we will stop unless we have compelling reasons to continue.

Email [email protected] to use any of these, and we will reply within one month. If you ask for a copy of your data, we will send it to you as a file. You can also do some of this yourself in the app, such as changing your details or deleting your account.

Complaints

To complain about how we have handled your data, email [email protected] with “Data complaint” in the subject. We will acknowledge it within 30 days, look into it and tell you what we found and what we have done.

If you are still unhappy, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.

Children

Clarifam is for adults. You must be 18 or over to create an account.

Changes to this notice

If we change how we use your data, we will update this notice and change the date at the top. If a change matters, we will tell you in the app before it applies.