Privacy Policy
Effective Date: August 4, 2026 (Version 2.1)
Your health data — doses, symptoms, photos, notes — stays on your device. We don't operate servers, we can't see it, and we never send it anywhere. When you set up the app we ask a few optional questions about who you are and how you found us. Those answers, and only those, are shared with the provider that runs our subscription screens. You can decline every one of them, and you can turn the sharing off later in Settings.
Introduction
Your privacy is important. This Privacy Policy explains what information the Cleyra app (“we” or “our”) can access, how it is used, and your choices. Cleyra is a mobile health tracking app focused on isotretinoin (Accutane) treatment. Importantly, we do not collect or store your personal health data on our servers – all health information you enter into Cleyra stays on your device only. We do collect a small set of optional, non-health setup answers, which are described below. By using Cleyra, you agree to this Privacy Policy. If you do not agree, please do not use the app.
What We Collect, and What We Don't
- No Account or Cloud Data: Cleyra does not require you to create an account or log in. We do not collect your name, email address, or contact information, and we do not store any of your data on our servers.
- Limited App Analytics:When you set up Cleyra we ask for your age range, gender, the state (or country) you live in, how you heard about us, and what you want the app to help with. You can answer “Prefer not to say” to any of these except age range, which we use to confirm you meet our minimum age requirement. If you choose “Something else” for how you heard about us, you may type the name of the app or site you came from; that text is shared too. If you answer, we share those items with Helium, the provider that runs our subscription screens, to understand who uses Cleyra and improve it. Helium also records basic app events and the country your device connects from, and passes that same information on to PostHog, the tool we use to analyse it. We do not collect device identifiers for advertising, and we do not collect precise location. You can turn this sharing off at any time in Settings.
- No Health Data to Third Parties: Your doses, symptoms, notes, photos, appointments, and treatment history stay on your device. We never receive them, and we never send them to any third party, including our analytics and subscription providers.
Information Stored Locally on Your Device
Cleyra functions as a personal log for your isotretinoin journey. All data you enter into the app is stored locally on your device's storage. This includes:
- Treatment Details: e.g. treatment start date, planned duration, daily dosage (mg), body weight, and cumulative dose goals you input.
- Daily Check-ins: your daily logs of whether you took or skipped your dose, symptom ratings, along with any notes you add.
- Photos and Videos:any progress photos or videos you capture are stored in the app's local storage (not in your public camera roll unless you export them).
- Appointments: information you optionally log about doctor visits or lab tests.
- Reminders: your chosen medication reminder times and notification settings.
- App Preferences: settings like whether you completed onboarding and any other in-app preferences.
How This Data Is Used on Your Device: The app uses the above information to display your treatment progress — for example, showing symptom trends, calculating adherence percentage, reminding you to take medication, and storing photos to compare progress. All processing happens on your device. We do not see or collect this data.
Device Permissions
Cleyra may request certain device permissions to enable features:
- Camera Access: To take progress photos directly in the app. Photos are stored locally. We do not transmit or upload them.
- Photo Library Access: To let you import or export photos. The app does not scan or collect your gallery.
- Notifications: For local medication reminders. No reminder data is sent to any server.
Granting permissions is optional. Core functionality works without them. You can revoke permissions in your device settings at any time.
Third-Party Services and Data Sharing
- App Stores & In-App Purchases: Purchases are handled by Apple App Store or Google Play Store. We do not see your payment information.
- Helium (Paywalls and App Experience): Helium runs our subscription screens. It receives the setup answers described above, basic app events such as when a subscription screen is shown, and the country your device connects from, which is derived from your IP address. It never receives your health data. See Helium's Privacy Policy.
- PostHog (Product Analytics): Helium forwards the events and setup answers described above to PostHog, where we analyse them. The Cleyra app itself does not contain PostHog software and sends nothing to PostHog directly. PostHog never receives your health data. See PostHog's Privacy Policy.
- Customer Support: If you email us at support@cleyra.skin, we use your information only to respond. We do not link emails to in-app data.
We will not disclose your information to third parties unless required by law. We do not sell your data, and we do not use any of it for advertising.
Consumer Health Data
Some information you enter into Cleyra relates to your health, including your doses, symptoms, photos, notes, appointments, and treatment history. This information is stored only on your device. We do not collect it, we do not have access to it, and we do not share it with anyone.
The information we do collect is limited to the setup answers listed above: your age range, gender, the state or country you live in, how you heard about us, and what you want the app to help with. We collect it to understand our userbase and improve the app. We share it with Helium, our paywall and app experience provider, which passes it on to PostHog, the tool we use to analyse it. Those are the only two companies that receive it. We do not sell it and we do not use it for advertising.
You can withdraw your consent at any time by turning off “Share basic info to improve Cleyra” in Settings. Doing so clears the answers held on your device and stops any further sharing. You can also email support@cleyra.skin with any request about your data.
Data Retention and Deletion
All data stays on your device until you delete it. Uninstalling Cleyra permanently removes all locally stored data, including your setup answers. We have no copy to restore. We encourage you to export photos or notes before deleting.
Setup answers you previously shared may still be held by Helium and PostHog. Turning off sharing in Settings, or uninstalling the app, stops any further sharing, but it does not by itself erase what has already been sent. Email us at support@cleyra.skin if you want that data removed and we will pass the request on.
To request deletion of any data we might have (e.g., support emails), contact us at support@cleyra.skin.
Security Measures
Our local-first approach reduces breach risk. Your data remains under your control. We recommend using a strong device passcode and keeping your OS updated. All network communications (e.g., subscription verification) use HTTPS encryption.
Children's Privacy
Cleyra is not intended for children under 13. During setup the app asks for your age range, and anyone who indicates they are under 13 is blocked from continuing. That answer is not saved and nothing is shared with anyone. Teens 13-17 may use the app with parental consent and supervision.
California Privacy Rights (CCPA)
We take a privacy-by-design approach. We do not sell personal information. California residents may contact us at support@cleyra.skin to exercise their CCPA rights.
Changes to This Privacy Policy
We may update this policy as needed. We will notify users of significant changes by updating the Effective Date and via in-app or app store notices.
Contact Us
Michael Curtis (d/b/a Cleyra)
San Diego, California, USA
Email: support@cleyra.skin