Privacy policy
CLEO is a family organiser. This policy explains what CLEO collects, why, where it is kept, who can see it, and how you can see, download or delete it. We follow the Australian Privacy Principles in the Privacy Act 1988.
In this policy "we" means the business that runs CLEO. You can contact us at hello@cleoapp.com.au.
The short version
- We collect what you put into CLEO so it can work for your family, and nothing more.
- We do not sell your information, and we do not show ads.
- Your family's information is visible only to the people in your household, and only to the extent their role allows.
- You can download everything we hold about you, and delete your account, from the app at any time.
What we collect
- Your account: your email address and the name you give. You sign in with a code sent to your email, so we do not store a password.
- Your household: its name, time zone, the people in it, their colours and roles, and when guest access ends.
- What you add: calendar events, tasks and chores, shopping lists, birthdays (and the year, if you add it), gift ideas, the dinner plan, notes, drawings and recipes.
- Children: a child's name and colour. If a parent sets up a child's own login, we also keep the child's birth date, a record of the parent's consent (who gave it and when), the child's 4 number PIN in a scrambled form we cannot read, and basic details of the devices the child is signed in on (device type and browser).
- Messages: messages between a child and the grown-ups a parent has approved, and any report a child makes about a message.
- Staff records: for households that use Staff, pay rates, shifts, hours, leave, and papers that are uploaded (such as contracts or checks) with their expiry dates.
- Linked calendars: the private link to a Google or Apple calendar you choose to link, and the events we read from it.
- Email capture: if you forward an email to one of your household's CLEO addresses, we read it only to find calendar invites. We keep the sender, subject and the events found. We do not keep the rest of the email.
- Notifications: if you turn on phone notifications, the browser gives us an address to send them to.
- Help requests: what you write to us and basic details of your device, so we can help.
- A record of important changes in your household (such as who was invited or removed), which parents can see.
- The waitlist: if you join it, your email address, your name if you give it, which link you came from, and whether you are one of the first 100 founding families.
Why we collect it
We use your information to run CLEO for your household: to show your calendar and lists, send reminders and alerts, let children and approved grown-ups message each other, help staff and parents keep track of work, and keep your account secure. We use the waitlist to tell people when CLEO opens. We use help requests to answer you. We may look at overall counts (for example, how many households use a feature) to improve CLEO. Our team cannot see your family's events, messages, notes, tasks or staff records from our admin view.
Children
CLEO is set up by parents. Children cannot make an account by themselves. A child can have their own login only if a parent or legal guardian in the household sets it up and gives consent. The minimum age for a child's own login is 4.
A child's login has no email address. It is put on a device with a short code from a parent, and opened with a PIN. A child sees only their own jobs, the events they are on, dinner, birthdays, and messages with grown-ups a parent has approved. Parents can read their children's messages, sign a device out, reset the PIN, turn the login off, or remove it at any time.
Who can see your information
- Parents in a household can see and manage everything in it, except other parents' private "Just me" calendars.
- Family and friends, and staff, see only what is shared with them. Staff see only their own work records.
- Children see only their own view, described above.
- Our team can see account emails, household names, counts and plans, so we can support you. We do not look at your family's content.
- We do not sell or rent your information. We share it only with the service providers below, so CLEO can run, or where the law requires it.
Where it is kept and our service providers
- Supabase stores CLEO's database and uploaded files in Sydney, Australia.
- Vercel hosts the CLEO website and app. Its servers can be outside Australia.
- Resend sends CLEO's emails (sign-in codes, invites and waitlist emails) and receives email sent to CLEO addresses. Its servers for CLEO are in Japan, and it is a United States company.
- Phone notifications are delivered through your browser maker's push service (for example Apple, Google or Mozilla).
Some of these providers are outside Australia. We choose providers that protect information to a standard that is similar to the Australian Privacy Principles, and we only give them what they need to do their part.
How long we keep it
We keep your information while you use CLEO. When you delete your account, your login and everything only you can see are deleted, along with households where you are the only person. Things you added to shared households are removed with your account. Staff work records stay with the household they were made for. Backups are kept for a short time and then replaced.
Your choices
- See and download: use Download my data on the home screen.
- Correct: change your details in the app, or ask us.
- Delete: use Delete my account on the home screen, or ask us.
- Notifications: turn topics or phone notifications on or off from the bell.
You can also ask us for a copy of your information, or ask us to correct it, at hello@cleoapp.com.au. We will reply within 30 days.
Keeping it safe
Every request to CLEO's database is checked against your role in the household, so people only get what they are allowed to see. Information is sent over encrypted connections. Sign-in codes, pairing codes and PINs expire or lock after too many tries. If a data breach is likely to cause serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.
Questions and complaints
Email hello@cleoapp.com.au. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
We will update this policy when CLEO changes. We will tell you in the app if a change is important.