Privacy
Last updated: [date it goes up]
This page covers clara.lifestyle and alpha.clara.lifestyle. Both use the same account, so one page explains both.
Who we are
YDT Holdings Oy, Business ID 3608568-3, Kankaistenkatu 22, 13220 Hämeenlinna, Finland. We decide how your data is used (we are the "controller"). Write to us any time: privacy@clara.lifestyle.
Your account
What we keep: your name, your password in scrambled form, when you created the account, the day you last signed in, and what you log in Clara on alpha (training, food and body details you choose to enter).
Why: to give you the service you asked for (GDPR Art. 6(1)(b)).
How long: until you delete the account. If nobody signs in for 24 months, we delete it.
Delete it: in Settings on alpha.clara.lifestyle, or write to privacy@clara.lifestyle. Deleting the account also takes you off both email lists. Copies leave our backups within 30 days.
You don't give an email address to create an account.
Our two email lists
You can join either, both or neither when you create an account. Each has its own box, and neither is needed for the account.
• News about Clara: occasional emails with news about Clara. Kept until you leave.
• Tell me when the new app opens: one email when the new Clara app opens. Kept until it opens and for 12 months after that email, then deleted.
What we keep: your email address, which list, when you ticked the box, when you confirmed, and which wording you agreed to.
Why: because you said yes (GDPR Art. 6(1)(a)). The confirmation email proves that yes (our legitimate interest, Art. 6(1)(f)).
Confirming: we send one email with a confirm button. If you don't press it within 7 days, your address is deleted.
Leaving: every email has a leave link for that list. One tap, no sign-in. When you leave the last list, your address is deleted.
We don't track whether you open or click our emails.
Cookies
| Cookie | Site | What it does | How long | Needs your yes? |
|---|---|---|---|---|
| Your cookie choice | clara.lifestyle | Remembers Accept or Reject | 12 months | No, it is needed to remember your choice |
_ga, _ga_<ID> | clara.lifestyle | Google Analytics: counts visits and pages | up to 2 years | Yes. Only set after you press Accept |
| Sign-in cookie | alpha.clara.lifestyle | Keeps you signed in | while signed in | No, it is needed for the service |
Google Analytics never runs on the sign-up page. Press "Cookie settings" at the bottom of any page to change your choice. Reject removes the Google cookies.
Bot check: the sign-up page uses Cloudflare Turnstile to keep out bots. It reads your IP address and basic browser details and sets no cookie. Cloudflare does this for us, but uses those signals as its own controller when it improves Turnstile: Cloudflare Turnstile privacy addendum.
Abuse limits: to stop floods of sign-ups we keep short counters made from a scrambled network address. They are deleted within a day.
Who else handles your data
Only these services, only to run Clara, each under a data processing agreement:
• Cloudflare (servers, database, bot check). Database in the EU.
• Resend (sends our emails).
• Google (Analytics on clara.lifestyle after your yes; our email inbox).
Some of them are based in the United States. Transfers rely on the EU-US Data Privacy Framework, with the EU standard contractual clauses as the fallback.
We never sell your data. We make no automated decisions about you.
Age
You must be 13 or older.
Your rights
You can ask to see your data, correct it, delete it, take a copy with you, or object to how we use it. You can withdraw any yes at any time; that doesn't undo what happened before. Write to privacy@clara.lifestyle and we answer within one month.
Complaints
You can complain to the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi. For cookies, the supervisor is Traficom.
Changes
If this page changes in a way that matters, we tell account holders before it applies. The date at the top shows the latest version.