Privacy policy

Who I am

I'm Scott Wittrock, an independent developer. I built Cleo — a family of apps for parents — as a solo project. Cleo currently includes Cleo Track (a baby tracking app for feedings, diapers, and sleep), Cleo Routine (a visual routine builder for toddlers), Cleo Plan (family meal and task planning for the web), and Cleo Connect (a connector that lets you bring your Cleo data to the AI tools you choose). If you have any questions about this policy, you can reach me at scott@cleofamily.app.

What I collect

Cleo Track — to make tracking work across devices, I collect the following:

• Your email address — used to create your account and sign you in. The account belongs to you as the parent or guardian; see “Children's data” below.
• Tracking data — feedings, diaper changes, sleep logs, and medicine records that you enter into the app. This data is stored securely via Supabase so it syncs across your devices and with your partner.
• Child profiles — a child's name and birthday that you enter. The name is a personalization label stored under your account (for example, greetings in the app). I do not use a child's name for analytics, advertising, profiling, or any purpose other than showing it to you in the product. The birthday supports the tracking features you use.

Cleo Plan — to make planning work for your whole family, I collect the following:

• Your email address — used to create your account and sign you in. As with Cleo Track, the account belongs to you as the parent or guardian.
• Family member names — names that you enter so meals and tasks can be assigned to people. Like child profiles in Cleo Track, these are display-only labels stored under your account — never used for analytics, advertising, or profiling.
• Meal plans, dishes, and tasks — the plans you create, shared with the family group you set up.
• Nutrition log entries — the food descriptions you log and their estimated calories and protein. Your nutrition log is private to you: meal plans are shared with your family, but your log is not.
• Dietary preferences — plain-text notes you add per family member (restrictions, preferences, foods to avoid). These are stored under your account and used only to inform AI-generated meal and task suggestions within the app. They are never used for advertising or profiling.

Cleo Connect — if you choose to link a phone number for SMS access, I collect the following:

• Your phone number — stored against your account when you verify it. Used only to send and receive SMS messages you initiate. Explicit consent is captured at the time you link the number. You can unlink it anytime in Connect settings, or opt out by texting STOP.

Cleo Routine — does not require an account. It does not collect personal data, email addresses, or tracking data. All routine data is stored locally on your device.

What I don't collect

• No location data.
• No advertising identifiers, and no data shared with advertising networks.
• No browsing history or data from other apps.
• I don't sell your data to anyone, ever.

How I use your data

In Cleo Track and Cleo Plan, the data you enter is used only to power the apps — syncing across your devices and with the family members and caregivers you choose to share with. I don't use your data for advertising, behavioral advertising aimed at children, analytics sold to third parties, or any purpose beyond making the apps work for you. A child's or family member's name is display-only personalization as described above. Cleo Routine stores all data locally on your device and does not transmit it anywhere.

AI features

When you log a food item in Cleo Plan, the text description of the food (for example, “one hard-boiled egg”) is sent to Anthropic — the company behind Claude — to estimate its calories and protein. Only the food description is sent: no names, no email addresses, no account information. Under Anthropic's commercial API terms, this data is not used to train their models. The estimate is saved back to your log entry, and nothing else is shared.

Cleo Connect is different — and entirely opt-in. It lets you bring your Cleo data into an AI tool of your choice (Claude, ChatGPT, or any tool that supports MCP). Your data is only shared with a tool when you connect it, and only in response to your own requests inside that tool. Once your data reaches an AI tool, that tool's own privacy policy governs how it's handled — and you can disconnect at any time.

There's one more AI feature, also entirely opt-in: the daily recap email. If you turn it on, once a day I send a short summary of your recent Cleo Plan and Cleo Track activity — recent meals, tasks, nutrition, and baby-tracking entries, along with your family members' first names and your child's age — to Anthropic so it can write the note in a warm, readable way. Under Anthropic's commercial API terms, this data is not used to train their models. The finished email is delivered to you through Customer.io. It's off by default, and you can turn it off anytime in your settings.

There is also an optional overnight entry review for Cleo Track, available only on Cleo+ and off by default for each child. When it runs, it sends the previous day's tracking entries (feedings, sleep, diapers, and similar) along with the child's age to Anthropic to check for patterns that look like data errors or gaps. Under Anthropic's commercial API terms, this data is not used to train their models. The findings are saved as suggestions in your account. If there are any, the family owner receives a short summary email through Customer.io. Nothing in your logs is changed automatically.

SMS / text messaging

When you opt in to receive text messages from Cleo, I collect your mobile phone number and your consent in order to send account-related messages, reminders, and updates. Message frequency varies and messages are user-initiated. Message and data rates may apply. You can opt out at any time by replying STOP.

Mobile information is never shared for marketing. No mobile information (including your phone number) will be shared with third parties or affiliates for marketing or promotional purposes. I share mobile information only with subcontractors and service providers (for example, my SMS provider, Twilio) strictly to deliver the messaging service. Text messaging originator opt-in data and consent are never shared with any third parties.

Product analytics

I use Mixpanel and Customer.io to understand how people use Cleo — things like which pages get visited and which buttons get clicked, so I can make the products better. They process this data on my behalf as service providers: it is never sold, never used for advertising, and never shared with anyone for their own marketing.

Data retention

Your data is kept for as long as your account is active. If you delete your account, I'll delete your data from the database. To request account deletion or a data export, email me at scott@cleofamily.app.

Your rights

You can request to view, export, or delete any data I hold about you at any time. Just send me an email and I'll take care of it.

Third-party services

Cleo uses a small number of third-party services to function:

• Supabase — database and authentication for Cleo Track and Cleo Plan. Your data is stored on Supabase's infrastructure. See their privacy policy at supabase.com.
• Stripe — handles all payments and subscriptions for Cleo Track. Stripe's privacy policy applies to those transactions. I never see your full payment details.
• Anthropic — estimates calories and protein for food items you log in Cleo Plan; runs the optional overnight entry review for Cleo Track; and, if you opt in, writes your daily recap email, as described under “AI features” above.
• Twilio — delivers SMS messages for the optional Text Cleo feature in Cleo Connect. Your phone number is shared with Twilio only if you choose to link one. Twilio's privacy policy applies to message delivery.
• Mixpanel and Customer.io — product analytics and support email, as described under “Product analytics” above. Customer.io also delivers the optional daily recap email and overnight entry review summary emails.

Cleo Routine does not use Supabase, Stripe, or any third-party services. It is a fully offline app with no external data transmission.

Cleo doesn't use advertising networks, and analytics are limited to the product-analytics services above. I don't share personal or child-related information with third parties for their own marketing or behavioral advertising; the services above process data only to operate Cleo.

Children's data

Cleo Track and Cleo Plan are built for parents and guardians. The user of record is the adult who creates and controls the account. I do not collect personal information directly from children (for example, I don't ask a child to sign up or fill out their own profile).

Information about your child appears in the apps only because you added it — a child's profile in Cleo Track, or a family member's name in Cleo Plan. I don't use that information for behavioral advertising or to profile children for marketing, and I don't sell personal information.

Cleo Routine does not use accounts and does not collect child-identifying information on my servers. Apps are rated for broad family use (4+), but compliance for children's privacy follows this model: parent-owned account, parent-entered personalization, no independent child sign-up.

Changes to this policy

If I make meaningful changes to this policy, I'll let you know via the app or by email. The date at the top of this page reflects when it was last updated.

Contact

Questions? Just email me: scott@cleofamily.app.