Privacy policy

Who we are

Clementina is a personal tracker made and run by one person in Portugal, who is the controller of your data. Questions or requests about your data: 8thaurora@gmail.com. The supervisory authority is the CNPD (Comissão Nacional de Proteção de Dados).

Clementina is for people aged 16 or over.

What we keep

Your email address, and a password and an authenticator app only if you add them (the password is stored as a hash we can’t read).

What you log: your expenses, budgets and categories, your weigh-ins (weight, day, time and note) and ideal weight, your workouts (type, day and note), workout types and weekly goal, and your settings (currency, language, time zone, week start, widgets).

For each device you’re signed in on: when you signed in, when it was last used, and its browser’s description (for example “Safari on iPhone”), so Settings → Devices can show them and sign one out. Not its IP address: your browser only ever talks to Clementina’s server, never to the database.

A message you send through Contact is emailed to the owner with your email address, so they can reply; Clementina doesn’t keep it.

When something breaks, the site notes the error itself: what failed and where in its code, never anything about you.

To order the language list, the app reads which languages your browser prefers, in memory only; it isn’t kept.

While a page is open, the server keeps what it needs to show it in memory, and forgets it 10 minutes after the page’s last use; it’s never written to disk.

Nothing else: no analytics, no tracking cookies and no visit logs. Clementina never stores your IP address.

Clementina makes no requests to other sites from your browser.

Why

To run the app for you (the contract between us). Your data is never sold, shared for advertising or used to train anything.

Your weight and your workouts are health data: Clementina keeps them only with your explicit consent, which you give once, when you sign up, on Select trackers. Deleting a tracker’s data in Settings → Delete data deletes it at once; deleting both Weight’s and Workouts’ data withdraws your consent, and so does deleting your account.

Your devices and the error notes: to keep your account and the site secure and working (a legitimate interest).

Who processes it for us

Supabase (database and sign-in, in Frankfurt), Northflank (the servers, in the EU), Cloudflare (the network in front of the site) and Resend (the emails with your codes and exports, from Ireland; an email holds the code or the export, and nothing else about your account).

The owner can technically see your data through Supabase’s dashboard, and only looks when you ask for help or to fix a problem.

Your data is stored in the EU. Supabase, Cloudflare and Resend are US companies and Northflank is a UK one: where they can reach data from outside the EU, it’s under the safeguards the GDPR requires (an adequacy decision of the European Commission, or its standard contractual clauses).

Cookies

Two cookies keep you signed in on this device; page scripts can’t read them. They last as long as you keep using Clementina there (up to 400 days after your last visit, the most browsers allow). Sign out, change your password, or use Settings → Devices to end them. One more cookie remembers this device’s time zone and language for your first sign-in. No tracking cookies.

Another cookie remembers the theme you chose in Settings (System, Light or Dark), so each page opens in it.

Your rights

Export your data any time (Settings → Export data: one file for each tracker you choose) and delete your account (Settings → Delete account), which removes everything at once.

You can also ask for a copy of your data, to correct it, to delete it, to restrict or object to how it’s used, or to receive it in a file you can take elsewhere, and withdraw your consent (deleting your account does it too): write to 8thaurora@gmail.com, and you’ll have an answer within a month. You can complain to the CNPD at any time (cnpd.pt).

How long

Until you delete your account. Deleted expenses, weigh-ins and workouts stay a day so Undo works, then go for good; deleting a tracker’s data in Delete data removes it at once. A device’s record goes when it signs out. An email address typed on the sign-in screen whose code is never entered goes after an hour. Backups, if any, follow the database provider’s retention.