Privacy Policy

1. Introduction

OBSESSIVE CO (SMC-PRIVATE) LIMITED ("we," "us," or "our") operates Clarity (myclarity.report). This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Information We Collect

We collect the following types of information:

• Personal Information: Name, email address, and—for report generation—your date, time, and place of birth. This biographical data is required to generate your personalized report through our analysis system.
• Behavioral Data: Your responses to our questionnaire regarding patterns and behaviors
• Payment Information: Processed securely through our authorized payment provider; we do not store credit card details
• Usage Data: How you interact with our service, including pages visited and features used

3. Children's Privacy & Child Data

Clarity is not directed to individuals under 18, and children cannot create accounts or purchase reports.

However, certain Clarity products — specifically Understanding Your Child and Parent-Child Dynamic — are designed for parents and guardians. These products require the parent to provide their child's date, time, and approximate place of birth, along with contextual information about the child's behavior and development. This data is used solely to generate a personalized insight report for the parent about their child.

By providing your child's data, you represent that you are the child's parent or legal guardian and that you consent to the collection and processing of this data for report generation purposes. Child data is subject to the same security, retention, and deletion policies as all other personal data described in this policy.

We do not knowingly collect personal information directly from children. If we learn that a child under 13 has created an account without parental consent, we will delete the account and associated data promptly. To report such a case, contact us at privacy@myclarity.report.

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, we process your data on the following legal bases:

• Contractual Necessity: We process your account information, birth data, and questionnaire responses to perform our contract with you — to generate and deliver your personalized reports.
• Legitimate Interest: We process usage data to improve our service, detect abuse, and maintain security.
• Consent: Where we send optional marketing communications, we rely on your consent, which you may withdraw at any time.
• Legal Obligation: We retain certain data to comply with tax and financial record-keeping requirements.

For UK residents, references to "GDPR" include the UK GDPR, and the supervisory authority is the Information Commissioner's Office (ICO).

5. How We Use Your Information

Your information is used to:

• Generate personalized insight reports using AI-powered analysis of your data
• Deliver reports and communications to your email address
• Process payments and manage your account
• Improve our service and develop new features
• Respond to your inquiries and provide customer support

6. AI-Powered Data Processing

Your biographical and behavioral data is processed using artificial intelligence and machine learning technologies to generate personalized insight reports. This AI-powered analysis examines patterns in your submitted data to produce content tailored specifically to you.

Your data is processed at the time of report generation. We use third-party AI language model providers, including providers located internationally, to perform this analysis. Specifically, we transmit your first name (for personalization) and your questionnaire responses to these services. We do not transmit your email address, date of birth, or other account details. Obsessive Co. is a Single Member Company registered in Pakistan; your data may be processed in Pakistan and other jurisdictions where our service providers operate.

We do not sell, rent, or trade your personal information to third parties. A current list of our data sub-processors is available upon request at privacy@myclarity.report.

7. Cross-Product Pattern Memory

When you use multiple Clarity products, we store pattern memory — confirmed patterns, vocabulary from your reports, and topics you've asked about — so that each new report builds on what came before rather than starting from scratch.

• What's stored: Confirmed and denied patterns, question topics, vocabulary from generated reports
• Retention: Memory entries expire after 180 days of inactivity
• Purpose: Personalizing future reports and avoiding repetition
• Sharing: Pattern memory is never shared externally or with other users

You can clear all pattern memory at any time from your Profile Settings. Clearing memory resets cross-product context; future reports will personalize from your questionnaire responses alone until new memory builds naturally.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including Pakistan, the United States, and other jurisdictions where our service providers operate. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, some of these transfers may be to countries that have not received an adequacy determination from the European Commission (including Pakistan). In such cases, we rely on appropriate safeguards, including Standard Contractual Clauses and, for certain processing, your explicit consent.

To generate your personalized reports, we transmit your first name and questionnaire responses to third-party AI language model providers. We do not transmit your email address, date of birth, or other account details to these services.

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transfer (TLS/SSL) and at rest. Access to personal data is restricted to authorized personnel only.

10. Data Retention

We retain your personal information for the following periods:

• Account data: Retained for the life of your account. Deleted within 30 days of account deletion request.
• Birth data and questionnaire responses: Retained for the life of your account to support cross-product personalization and report continuity. Deleted within 30 days of account deletion request.
• Generated reports: Retained for the life of your account — your reports remain accessible in your account library. Deleted within 30 days of account deletion request.
• Payment records: 7 years minimum (tax and legal requirements). Deleted after the legally required retention period unless needed for ongoing disputes.
• Usage and analytics data: 90 days for detailed logs; aggregated, non-identifiable analytics retained for product improvement.

We retain data to ensure long-term continuity of your report library and cross-product experience. You may request deletion of your personal data at any time by contacting us at privacy@myclarity.report. Upon verified deletion request, we will remove your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).

11. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you via the email address associated with your account within 72 hours of confirming the breach.

12. Third-Party Services and Sub-Processors

We use the following third-party services to operate our platform:

A detailed sub-processor list with specific vendor names is available upon request at privacy@myclarity.report. Each of these services maintains their own privacy policies. We select partners who meet industry-standard security and privacy requirements.

13. Your Rights

You have the right to:

• Access the personal data we hold about you
• Export your data — download your questionnaire responses, generated reports, and Ask with Clarity history from your Profile Settings
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing
• Object to certain processing activities

Additional Rights for EEA/UK Residents

If you are located in the EEA or UK, you also have the right to:

• Data Portability: Export your data in JSON format directly from your profile settings. This includes your profile information, questionnaire responses, generated reports, and Ask with Clarity history. Our internal processing data (analytical parameters, quality scores) is not included in exports.
• Restrict Processing: Request that we limit the processing of your data in certain circumstances.
• Object to Processing: Object to our processing of your data based on legitimate interests.
• Automated Decision-Making: Our reports are generated by AI-powered automated analysis. These reports are provided for personal self-reflection purposes only and are not used to make legal or similarly significant decisions about you.
• Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority. For EEA residents, you can find your authority at edpb.europa.eu. For UK residents, contact the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at privacy@myclarity.report. We will respond to your request within 30 days.

14. California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). We do not sell personal information. To exercise your rights to access or delete your data, contact us at privacy@myclarity.report.

15. Cookies & Analytics

We use the following cookies:

• Essential cookies: Authentication and session management (Supabase Auth). Required for the service to function.
• Analytics cookies: We use PostHog and Vercel Analytics to understand how people use the site — page views, feature usage, and performance metrics. This data is aggregated and not sold to third parties.
• Error monitoring: We use Sentry for error tracking and, with your analytics consent, session replay to diagnose bugs. Basic error monitoring operates under legitimate interest; session replay only activates if you accept analytics cookies.

We do not use advertising, retargeting, or third-party tracking cookies.

16. Contact Us

For privacy-related inquiries or to exercise your rights, contact us at:

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.