Privacy Policy
The short version
Clarion Labs helps you understand your bloodwork and build a supplement routine that actually fits your body. To do that well, we ask for some personal health information. This page explains, in plain English, what we collect, why we collect it, who we share it with, and the choices you have.
We are based in the United States and currently serve US users only. Clarion Labs is not a HIPAA-covered entity, and we are not your doctor. We treat your data carefully anyway—because we would want the same.
For specifics on how we handle biomarker values, uploaded lab reports, and other health information, see our separate Consumer Health Data Privacy Policy.
What we collect and why
We only ask for information that helps us give you useful insights or keep your account working. Here is what lives in your Clarion account:
Account basics. Your email address and a password (or a sign-in token from a provider you choose). We use this to log you in, send important account messages, and recover access if something breaks.
Your profile survey. Things like age, sex at birth, training goals, lifestyle, diet, and current supplements. We use this to personalize your protocol, adjust dosing suggestions, and decide which biomarkers matter most for you.
Lab results and biomarker values. Anything you upload from a blood panel—file, photo, or manual entry. This is the core of what Clarion does. We use these values to score your results, show trends over time, and match you with education and supplements that address what your labs show.
Daily logs and check-ins. Your symptom ratings, habits, supplement intake, sleep, and any notes you record. We use these to track progress, spot patterns, and nudge your protocol when something is clearly working (or clearly not).
Device and usage data. Basic technical information like browser type, approximate location (from IP), pages visited inside Clarion, and error logs. We use this to keep the product running, fix bugs, and understand which features are actually useful.
Payment information. If you subscribe or buy a report, Stripe handles your card details. We never see or store your full card number—only a record that you paid and what plan you're on.
How we use your data
We use your information to run the product: score biomarkers, generate your protocol, show trends, send you the emails you asked for, support you when something breaks, and make Clarion better over time. We do not sell your personal information. We do not share it with advertisers or data brokers.
Who we share data with
We rely on a small set of trusted vendors to run Clarion. Each one only sees the data it needs to do its job:
Supabase hosts our database and handles sign-in. Your account, profile, labs, and logs are stored there, encrypted in transit and at rest.
Stripe processes payments and subscriptions. Stripe receives your payment details directly—we only receive a confirmation.
Resend sends transactional email from us (receipts, password resets, report delivery, important account notices).
OpenAI powers some of our AI features, like biomarker explanations, protocol guidance, and support chat. When you use those features, the relevant parts of your data (for example, the specific biomarker you're asking about, along with the context Clarion needs to answer well) are sent to OpenAI's API to generate a response. We access OpenAI through their API, and we have not opted in to having your data used to train their models. OpenAI may retain API inputs and outputs for a limited window to monitor for abuse; see OpenAI's own privacy policy for details.
Vercel hosts the website and provides basic analytics (page views, performance) without third-party tracking cookies.
Amazon Associates. Some supplement links on Clarion are affiliate links. If you click one and buy on Amazon, we may earn a commission. Amazon—not Clarion—controls what happens after you leave our site, and their privacy policy applies there.
We may also share data if we are required to by law, to protect someone's safety, or as part of a business change (merger, acquisition)— in which case we would notify you first.
Sensitive information
Some of what you give us—like lab values, diagnoses you mention, and health-related survey answers—is considered sensitive personal information under US state privacy laws. We only use this information for the core purpose of the product: giving you your biomarker analysis, personalizing your protocol, and making Clarion work for you. We do not use it to infer things about your character, build marketing profiles, or share it with anyone for advertising. Because we don't use sensitive information outside the product's core purpose, there isn't a separate "limit the use of my sensitive information" toggle to surface here—but you can still delete or export any of this data at any time (see the next section).
Cookies and analytics
We use a small number of cookies to keep you logged in and remember your preferences (like dark mode). For analytics, we use Vercel's built-in analytics, which give us aggregate numbers like page views and load times without setting third-party tracking cookies or building an advertising profile on you. We do not use Google Analytics, Facebook Pixel, or similar trackers.
Your rights
If you live in California, Colorado, Virginia, Connecticut, Texas, or another state with a consumer privacy law (CCPA/CPRA and similar), you have specific rights over your personal information. We extend these same rights to every Clarion user, wherever you are in the US:
Access. You can ask for a copy of the personal information we hold about you.
Export. You can ask us to send you your data in a portable format (for example, JSON or CSV).
Delete. You can delete your account from the settings page, which removes your profile, labs, and logs from our active systems. You can also email us to request deletion.
Correct. You can edit most of your data directly in the app, or ask us to fix something that isn't right.
No sale or sharing for ads. We don't sell your personal information and we don't share it for cross-context behavioral advertising. There is nothing to opt out of on that front.
Appeal. If we deny a request, you can ask us to review that decision. Some states also let you contact your state attorney general if you think we got it wrong.
No retaliation. We won't charge you more or give you worse service for exercising your privacy rights.
To use any of these rights, email us at support@clarionlabs.tech. We will respond within 45 days (or the window your state law requires, if shorter). We may ask you to verify your identity before we act on a request—usually just by confirming from the email on your Clarion account.
How long we keep your data
We keep your data for as long as your account is active. When you delete your account, we remove your personal data from our active systems. Some copies may live in our database provider's routine backups for up to about 30 days before they roll off. We also keep a minimal record of payments, tax information, and legal notices when the law requires it (typically for several years).
How we protect your data
Your data is encrypted in transit (HTTPS) and at rest in our database. Access inside Clarion is limited to the people who need it to run the product. No online service is perfectly secure, so please use a strong, unique password and let us know right away if you think your account has been compromised.
Children
Clarion is built for adults. You must be 18 or older to create an account. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, email support@clarionlabs.tech and we will delete it.
Changes to this policy
If we make meaningful changes to how we handle your data, we'll update this page and, when the change is significant, send you an email. The "last updated" date below always reflects the current version.
Contact us
Questions about privacy, a request about your data, or something that just feels off? Email us at support@clarionlabs.tech. A real person on the Clarion team will get back to you.