Privacy Policy

Last updated: 29 July 2026

Clutch is an attention-management app for iPhone, published by Conatus ("we", "us"). This policy explains what the app collects, what it deliberately cannot see, and who else touches your data.

The short version. Clutch stores your account, your goals and your conversations with Lumi so the coaching works across your devices. It cannot see which apps you use or anything inside them — iOS does not permit that. We do not sell your data, and we do not run advertising.

What Clutch collects

Account

Your email address, and the profile details you enter during setup (display name, and optional demographic answers you can skip). If you sign in with Apple or Google, we receive the identifier and email address that provider releases to us — nothing further from your account there.

What you tell the app

Your daily goals, focus schedules, nightly plans, journal entries, and the messages you exchange with Lumi. This is the core of the product: the coaching is only useful because it remembers what you committed to.

Session and usage records

When focus sessions ran, how long they lasted, how many times you tried to open something blocked, which challenges you completed, and your streak ledger. These are records of your activity inside Clutch.

Verification evidence — only when you provide it

  • Photos. Captured live through the in-app camera when you choose to verify a goal. Clutch has no access to your photo library and offers no way to upload an existing image.
  • Location. Only if you set up a location-verified goal, and only checked at the moment you verify. Clutch does not track your location in the background.
  • Calendar. If you connect Apple or Google Calendar, Clutch reads events to plan around them and to verify event-based goals.
  • Step count. If you grant Health access, Clutch reads step data for movement-based goals. It never writes to Health.

Each of these is optional, requires an explicit iOS permission prompt, and can be revoked at any time in Settings.

What Clutch cannot see

Apple's Screen Time framework is built so that blocking apps stay blind. When you choose which apps and categories to block, iOS hands Clutch an opaque token — not a name, not a bundle identifier, not an icon. Clutch can say to iOS "shield this token," and iOS does it. Clutch never learns which app it was.

It follows that Clutch cannot see your usage of other apps, your messages, your browsing outside Clutch's own in-app browser, or any content on your screen. There is no screen recording and no accessibility monitoring.

Who else processes your data

  • Supabase — our database and authentication provider. Your account, goals, sessions and history are stored here, protected by row-level security so your rows are reachable only by your account.
  • Google (Gemini API) — powers Lumi. Your message, the goal context needed to answer it, and recent conversation are sent to Google to generate each reply. Do not put anything in a Lumi chat you would not want processed by a third-party AI service.
  • Apple — App Store purchases and subscription status. We never receive your payment details.

We do not sell personal data, and we do not share it with advertisers or data brokers.

Friends

Friend features are off until you turn them on. When enabled, people you have accepted see a coarse signal — roughly how focused your day has been and whether your streak is alive. They do not see your goals, your journal, your photos, your location, or your conversations with Lumi. You choose what is shared and can revoke it at any time.

How long we keep things

Your account data lives for as long as your account does. Delete your account from within the app — or email us — and we remove your personal data from our systems, including goals, chats, verification media and history. Encrypted backups may retain copies for a short rolling window before they age out.

Your rights

You can request a copy of your data, request corrections, or request deletion, by emailing hello@conatus.space. Depending on where you live, you may have additional rights under the GDPR, the UK GDPR, or state privacy laws in the US; we honour those requests regardless of where you are.

Children

Clutch is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that materially affects you, we'll update the date above and tell you in the app before the change takes effect.

Contact

Conatus — hello@conatus.space