Privacy Policy
Claido: Create AI Idol
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Claido stores your fictional character profiles, selected portraits or photos, conversation messages, creation draft and synchronization queue on your iPhone. Your optional local name, interface language and chat language preferences stay on the device. A random installation secret is generated automatically and stored in the device Keychain; there is no user account or login. The backend receives character profiles including any selected avatar photo and conversation messages for storage and synchronization. It uses a SHA-256 hash of the installation secret to separate your records. When you request a reply, character name, personality, voice preferences, topics, excluded topics and a limited recent conversation history are sent to the AI service. Photos and the installation secret are not sent to the AI provider. Railway infrastructure receives network requests and associated metadata such as IP address, request time and route, including visits to this public policy. Cloudflare terminates public HTTPS for the application API and website and forwards requests to the Railway service. It processes network request metadata and the headers and contents needed to proxy that traffic.
How we use information
Local storage lets you create and edit characters offline, reopen conversations, and prepare changes for synchronization. The installation secret authorizes access to your own server records without an account. Server storage supports synchronization and conversation history; OpenRouter routes chat requests to the configured OpenAI model to generate replies. The app accesses a selected photo or a camera image only when you choose a portrait. Text export and copying are initiated by you. The app contains no advertising, analytics SDK, payment system, support-ticket form or email sending system.
Service providers and sharing
Cloudflare provides public HTTPS and reverse-proxy routing for the API and website, processing request traffic before forwarding it to Railway. The application backend and PostgreSQL database are hosted on Railway. Railway processes infrastructure and service request metadata. Chat requests are sent through OpenRouter to OpenAI, the provider of the configured gpt-4.1-mini model, to produce replies. These providers process the submitted text under their own policies and service arrangements. Character photos pass through Cloudflare and are stored by the Claido backend but are not included in model requests. The application does not publish your characters or conversations to other installations. If you export or copy a conversation, the destination application or service you choose may receive that text under its own rules. The privacy contact email is for privacy inquiries only and is not part of an in-app email delivery feature.
Data retention
Local characters, conversations, drafts and pending changes remain until you delete them or remove app data. The studio data file is excluded from device backups by the app; the installation secret is stored with a device-only Keychain accessibility class. Keychain entries can persist beyond removal of the app, so reinstalling does not guarantee server deletion. Server records remain in the active database until an authorized deletion request removes them. There is no application-managed automatic expiry or backup schedule. Cloudflare, Railway, OpenRouter and model-provider infrastructure logs or backups may be retained separately according to their own policies; this app does not promise a particular retention period or immediate backup erasure.
Deleting your information
Deleting a character removes its local profile and conversation immediately and queues deletion of its active server records when a connection is available. Erase all my data in Settings requires a connection and removes local records only after the server confirms deletion of all profiles and messages authorized by your installation secret. This action also clears the creation draft and local profile name. Interface and chat language preferences and the device authorization secret may remain so the installation can continue to operate. Exported files or copied text are independent copies and must be removed from the destinations where you saved them. Active database deletion does not promise immediate erasure from infrastructure backups or logs. If you lose the installation secret, the app cannot recover or authorize those server records through an account. If a confirmed erase request is interrupted, its local intent is retained so synchronization retries deletion before uploading old records.
Permissions and your choices
The system photo picker gives the app only the images you explicitly select and does not require broad access to your photo library. Camera permission is requested only when you choose to take a character portrait. You can deny or withdraw camera permission in iOS Settings and continue using built-in portraits or selected photos. Withdrawing permission does not delete images already saved in character records; delete the character or erase your data to remove those copies. The app does not request microphone, location, contacts or tracking permission. Text export uses the system file destination chooser; copying writes the selected conversation to the system clipboard at your request.
Your privacy rights
You can inspect and edit your character data, view conversation history, export text, delete individual characters or erase your installation's data through the app. Depending on applicable law, you may have additional access, correction, deletion, objection or complaint rights. Contact cuthwin.tattershall@icloud.com for privacy questions or rights requests. Do not send passwords, installation secrets or sensitive chat contents by email. Because there is no account or email identity record, locating or verifying access to installation-scoped data can be limited if the installation secret is lost.
Security
The app uses public HTTPS through Cloudflare, with requests forwarded to the pinned HTTPS Railway origin, for backend requests and a cryptographically random device-only Keychain installation secret. The server checks a hash-derived installation namespace on private records. Character profiles, photos and message content are encrypted in PostgreSQL using AES-256-GCM with a server-side key. Local files use iOS file protection and atomic writes. Provider and encryption keys are not embedded in the app. The application server avoids logging request bodies, authorization secrets and conversation content; infrastructure providers can still process their own request metadata. These measures reduce risk but do not guarantee absolute security. Do not share sensitive personal information in conversations.
Children’s privacy
Claido is intended for people aged 16 and older and is not directed to children under 16. It does not request a birth date or operate an account-based age verification system. Conversations are fictional AI interactions, may contain errors and are not professional advice. If you believe a child has submitted personal information, contact cuthwin.tattershall@icloud.com so the concern can be assessed, subject to the limitations of installation-scoped identification.
Changes to this policy
This policy describes the implemented application and backend practices as of the effective date above. If the data processing, providers or features change, this page and its effective date will be updated. You can reopen the current public policy from Settings in the app. Review it periodically before sharing additional information.