Privacy policy

Who I am

I'm Scott Wittrock, an independent developer. I built Cleo — a family of apps for parents — as a solo project. Cleo currently includes Cleo Track (a baby tracking app for feedings, diapers, and sleep), Cleo Routine (a visual routine builder for toddlers), Cleo Plan (family meal and task planning for the web), and Cleo Connect (a connector that lets you bring your Cleo data to the AI tools you choose). If you have any questions about this policy, you can reach me at scott@cleofamily.app.

What I collect

Cleo Track — to make tracking work across devices, I collect the following:

• Your email address — used to create your account and sign you in. The account belongs to you as the parent or guardian; see “Children's data” below.
• Tracking data — feedings, diaper changes, sleep logs, and medicine records that you enter into the app. This data is stored securely via Supabase so it syncs across your devices and with your partner.
• Child profiles — a child's name and birthday that you enter. The name is a personalization label stored under your account (for example, greetings in the app). I do not use a child's name for analytics, advertising, profiling, or any purpose other than showing it to you in the product. The birthday supports the tracking features you use.

Cleo Plan — to make planning work for your whole family, I collect the following:

• Your email address — used to create your account and sign you in. As with Cleo Track, the account belongs to you as the parent or guardian.
• Family member names — names that you enter so meals and tasks can be assigned to people. Like child profiles in Cleo Track, these are display-only labels stored under your account — never used for analytics, advertising, or profiling.
• Meal plans, dishes, and tasks — the plans you create, shared with the family group you set up.
• Nutrition log entries — the food descriptions you log and their estimated calories and protein. Your nutrition log is private to you: meal plans are shared with your family, but your log is not.

Cleo Routine — does not require an account. It does not collect personal data, email addresses, or tracking data. All routine data is stored locally on your device.

What I don't collect

• No location data.
• No advertising identifiers, and no data shared with advertising networks.
• No browsing history or data from other apps.
• I don't sell your data to anyone, ever.

How I use your data

In Cleo Track and Cleo Plan, the data you enter is used only to power the apps — syncing across your devices and with the family members and caregivers you choose to share with. I don't use your data for advertising, behavioral advertising aimed at children, analytics sold to third parties, or any purpose beyond making the apps work for you. A child's or family member's name is display-only personalization as described above. Cleo Routine stores all data locally on your device and does not transmit it anywhere.

AI features

When you log a food item in Cleo Plan, the text description of the food (for example, “one hard-boiled egg”) is sent to Anthropic — the company behind Claude — to estimate its calories and protein. Only the food description is sent: no names, no email addresses, no account information. Under Anthropic's commercial API terms, this data is not used to train their models. The estimate is saved back to your log entry, and nothing else is shared.

Cleo Connect is different — and entirely opt-in. It lets you bring your Cleo data into an AI tool of your choice (Claude, ChatGPT, or any tool that supports MCP). Your data is only shared with a tool when you connect it, and only in response to your own requests inside that tool. Once your data reaches an AI tool, that tool's own privacy policy governs how it's handled — and you can disconnect at any time.

There's one more AI feature, also entirely opt-in: the daily recap email. If you turn it on, once a day I send a short summary of your recent Cleo Plan and Cleo Track activity — recent meals, tasks, nutrition, and baby-tracking entries, along with your family members' first names and your child's age — to Anthropic so it can write the note in a warm, readable way. Under Anthropic's commercial API terms, this data is not used to train their models. The finished email is delivered to you through Customer.io. It's off by default, and you can turn it off anytime in your settings.

Product analytics

I use Mixpanel and Customer.io to understand how people use Cleo — things like which pages get visited and which buttons get clicked, so I can make the products better. They process this data on my behalf as service providers: it is never sold, never used for advertising, and never shared with anyone for their own marketing.

Data retention

Your data is kept for as long as your account is active. If you delete your account, I'll delete your data from the database. To request account deletion or a data export, email me at scott@cleofamily.app.

Your rights

You can request to view, export, or delete any data I hold about you at any time. Just send me an email and I'll take care of it.

Third-party services

Cleo uses a small number of third-party services to function:

• Supabase — database and authentication for Cleo Track and Cleo Plan. Your data is stored on Supabase's infrastructure. See their privacy policy at supabase.com.
• Stripe — handles all payments and subscriptions for Cleo Track. Stripe's privacy policy applies to those transactions. I never see your full payment details.
• Anthropic — estimates calories and protein for food items you log in Cleo Plan, and, if you opt in, writes your daily recap email, as described under “AI features” above.
• Mixpanel and Customer.io — product analytics and support email, as described under “Product analytics” above. Customer.io also delivers the optional daily recap email.

Cleo Routine does not use Supabase, Stripe, or any third-party services. It is a fully offline app with no external data transmission.

Cleo doesn't use advertising networks, and analytics are limited to the product-analytics services above. I don't share personal or child-related information with third parties for their own marketing or behavioral advertising; the services above process data only to operate Cleo.

Children's data

Cleo Track and Cleo Plan are built for parents and guardians. The user of record is the adult who creates and controls the account. I do not collect personal information directly from children (for example, I don't ask a child to sign up or fill out their own profile).

Information about your child appears in the apps only because you added it — a child's profile in Cleo Track, or a family member's name in Cleo Plan. I don't use that information for behavioral advertising or to profile children for marketing, and I don't sell personal information.

Cleo Routine does not use accounts and does not collect child-identifying information on my servers. Apps are rated for broad family use (4+), but compliance for children's privacy follows this model: parent-owned account, parent-entered personalization, no independent child sign-up.

Changes to this policy

If I make meaningful changes to this policy, I'll let you know via the app or by email. The date at the top of this page reflects when it was last updated.

Contact

Questions? Just email me: scott@cleofamily.app.