Your email address, so we can sign you in. The name you choose, so teammates can recognise you. Your votes, attendance and the amounts your team’s organiser records against you. If you organise a team, the payment details you choose to add, such as a PayID or a BSB and account number, so the people in your team know where to pay you. Anything you write in your team’s chat, and when you read it. If you turn on notifications, a device token so we can send them. If the app crashes, we receive a technical report of what failed, scrubbed of personal information before it leaves your device. We also count which parts of Clanira get used, so we can tell what is worth improving. We never record your name, your teams, never any amount, never the words of a message, and never a recording of your screen.
We collect most of this from you, when you sign in, set up your profile, join a team, vote, write in chat or change a setting. Your organiser records your attendance and the amounts against your name. Crash reports and usage counts come from the app itself. We use this information to run Clanira: to sign you in; to run your team’s sessions, votes, chat and shared records; to send the notifications you turn on; to answer your requests; to keep the service secure and deal with misuse; and to work out what to improve.
What you write in team chat is stored so your team can read it, and it stays with the team. We do not read your messages, and nobody outside your team can, unless someone reports one to us. Someone from the Clanira team then reads that message so we can decide what to do about it. A notification about a new message shows only your team’s name and the words “New message”; it never shows who wrote it or what they said, so nothing appears on your lock screen that you would not want a stranger to read. Messages are not used for advertising and are never used to train anything.
Card numbers, or any password or PIN that could move money. The payment details an organiser adds (section 1) are there for their team to read. Clanira is free, so there is no billing relationship and nothing we could ever charge you for. Money changes hands between you and your team, outside Clanira, and we cannot move money on your behalf. We do not ask for your address, date of birth or any government identifier.
Members of a team can see each other’s names, votes and attendance for that team, the payment details its organiser adds, and everything written in that team’s chat since they joined. Only the organiser and co-organisers can see balances and ledger entries. Nothing crosses a team boundary: someone in one of your teams cannot see anything about another team you are in, including that it exists. If you block someone, their new messages stop reaching you. What they wrote before you blocked them stays where it is, because in a team that shares money those messages are often the record of who agreed to pay for what.
Your data is stored on managed cloud infrastructure in the Sydney region, Australia. Some services that help run Clanira process limited information overseas, including: sign-in emails, which means your email address and your code, sent from Japan; crash reports and usage counts, processed in the European Union; and notifications, which pass through a service in the United States, and through Apple or Google, to reach your phone. A notification carries a device token and its text, which can include your team’s name, a session time or an amount. If you email us, the service that forwards our email handles your message. These services act on our instructions and may use your personal information only to provide their service to us. We limit what each one receives to what it needs to do its job, and where Australian privacy law applies to sending information overseas, we take the reasonable steps it requires.
Your profile lasts as long as your account. Ledger entries are kept for as long as the team exists, because other members’ balances are calculated from them, and a settlement with a row missing is wrong for everyone in it. When you leave a team, your entries stay but you lose access to that team. Chat messages stay with the team for as long as the team exists. If you are removed from a team you keep the conversation exactly as it was the day you left, and nothing new reaches you; if you later rejoin that same team, you will be able to read what was said while you were away. If you delete your account, your messages remain with the team but your name is replaced with “Former member”. If a message is removed, whether by whoever wrote it, by an organiser, or by us, its text is deleted rather than hidden, and it cannot be recovered by anyone, including the person who wrote it. We also keep backup copies of the database so it can be restored after a failure. Each backup is deleted within 90 days of being made, so anything deleted from Clanira, including a deleted account, is gone from every backup within 90 days.
Usage counts are on by default; “Help improve Clanira” in Profile turns them off, and nothing else changes when you do. You can change your display name at any time from Profile. You can delete your account in Profile, or by emailing [email protected] from the address you sign in with. Deletion anonymises your profile and keeps the ledger rows other members depend on; we will tell you plainly if something blocks it, such as a balance still to settle or being the last organiser of a team. You can ask for a copy of what we hold about you, or for something to be corrected, by emailing [email protected] from the address you sign in with. We reply within 30 days and never charge.
If you think we have mishandled your personal information, email [email protected] and tell us what happened. We will look into it and reply, generally within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Sign-in is a six-digit code emailed to you, so there is no password to reuse or leak. Every row in the database is access-controlled by team membership and enforced by the database itself, not only by the app.
Clanira is not directed at children under 13. A junior can appear on a roster as a member of a team, recorded by an adult organiser, without holding an account of their own.
If we change this policy materially, we will update the date at the top and say what changed on this page. We will not quietly rewrite it.