How Clarity handles your data.

What Clarity is

Clarity records structured relationship check-ins and optional private notes, seals each entry with a cryptographic chain, an independent RFC 3161 timestamp, and a server signature, and lets you later export a record that a third party can verify was written when it claims and has not changed since. It does not establish that a statement is true, only when it was written and whether it changed.

What is collected

Optional pilot feedback includes product ratings and comments linked to your member account. Authorized administrators can read your response. Feedback is not encrypted like private notes. We may share anonymized aggregate findings. Updating feedback replaces your previous response; account deletion removes it. Please omit private relationship content and recovery information.

• Account information: the email address used to sign in (directly, or via a Google sign-in that shares your email and name with Clarity).
• Structured check-in answers: numeric ratings across a fixed set of relationship dimensions. These are readable by the server, because they are what produces trend charts.
• Relationship label and free-text notes: encrypted in your browser before they are sent. The server stores only ciphertext and cannot read this content.
• Timestamp and signature metadata: a hash of each entry, a timestamp from an independent timestamping authority, and a server signature — none of which contain your check-in content.

Who else sees it

• Supabase hosts the database and handles account authentication.
• An RFC 3161 timestamping authority (a third-party time-stamping service) receives only a cryptographic hash of each entry at the moment it is sealed — never the entry's content.
• If you sign in with Google, that provider handles the sign-in itself and shares your email/name with Clarity, as with any third-party sign-in.
• Clarity does not sell data, does not show your records to other users, and does not build any directory or lookup of people.

Optional usage analytics

If you select “Allow analytics”, Clarity records page categories, selected navigation and product clicks, verification pass/fail outcomes, and event times. On signed-in visits these events are linked to your account and grouped by a temporary browser-tab session. Signed-out verification events remain anonymous and are not linked back to a member. Your file name and file contents are never recorded.

The hosting provider may supply an approximate country code. It describes the connection location, not nationality; VPNs can affect it. We do not store raw IP addresses or precise location for analytics. Unknown countries remain unknown.

With analytics allowed, an active visible tab sends a short heartbeat while you interact with the site. The company map shows heartbeats within the last three minutes and refreshes about every 20 seconds. Signed-in accounts count once; anonymous browser tabs use temporary random session references solely for presence and are counted separately. No fingerprints or past anonymous browsing histories are linked to an account. Presence expires from the map after three minutes; expired temporary rows are removed by heartbeats and daily cleanup.

Authorized administrators can request an account-password reset email to your stored, confirmed address. Requests are rate-limited and an audit records the administrator, target account, request time and provider outcome for up to 90 days. Passwords, password hashes and private-vault recovery words are never included in the dashboard or audit.

You can decline or change your choice through “Analytics preferences”. Do Not Track and Global Privacy Control also suppress optional collection. Events are retained for up to 90 days with daily cleanup, and linked events are removed on account deletion. Declining stops future collection; it does not remove previously recorded events. Authorized company administrators can view account membership, onboarding, submission activity, and consented usage events, but not private labels or note text through these dashboards.

Private notes also produce server-readable, rule-based signals such as tone, conflict and boundary language, plus selected context tags. These derived signals support your insight summaries and are separate from optional usage analytics.

Exporting and sharing

You control what leaves your account: exporting a record lets you choose a date range and whether to include your relationship label and note text in the exported file. Anyone you give that file to can verify it independently, without an account and without uploading it anywhere.

Contact

Questions about this page: info@btiworld.org.