Clavier · Terms Privacy

Privacy Policy

Last updated: 1 May 2026

Short version: Clavier collects only what's needed to run the app and your account. We don't sell your data, ever. This page explains exactly what we keep, why, where it lives, and how to delete it.

What we collect

Email address

Only if you sign in with email or Google. We use it to send sign-in links, receipts, and the occasional important account email.

Display name

You pick it. Used in leaderboards and social features.

Typing stats

Your words-per-minute, accuracy, key-by-key history, sessions completed, streaks. Used to show your progress and to power leaderboards if you opt in.

Device info

A random device ID we generate, your platform (web/desktop), and the app version. Used to keep you signed in and to investigate bugs.

Subscription info

If you buy Clavier Pro, Lemon Squeezy sends us a customer ID and subscription status (active, cancelled, expired). We never see your card details.

Google sign-in info

If you sign in with Google, Google sends us your email, name, and a stable Google account ID. Nothing else.

That's the full list. We don't track you across the web, we don't run advertising trackers, and we don't have third-party analytics on the app right now.

Where your data lives

Your account, typing stats, and subscription status are stored on a server in Singapore (run by Fly.io). Backups are encrypted at rest.

Your device's offline cache (lessons, recent sessions) lives in your browser's local storage and is never sent anywhere unless you sign in for cloud sync.

Who we share it with

Three companies, only for what they help us do:

Lemon Squeezy — handles all Pro subscription payments. They store your card and your billing email; we don't.
Resend — sends the magic-link sign-in emails on our behalf. They see your email address only at the moment we ask them to send a message.
Google — only if you choose to sign in with Google. Standard OAuth flow.

We don't sell your data, share it for advertising, or hand it to data brokers. If we ever had to share something because of a court order, we'd push back where reasonable and tell affected users unless we're legally barred from doing so.

How long we keep it

We keep your account data for as long as your account exists. Sign-in tokens are deleted from the device after sign-out. Magic-link tokens expire after 15 minutes. If you delete your account, we erase your stats and personal info within 30 days; we may keep a tiny audit record (timestamp + anonymous user ID) for up to a year for fraud investigation.

Your rights

You can:

See what we have — email us and we'll send a copy.
Correct it — most of it is editable directly in Settings.
Delete your account — email hello@useclavier.com from the address on your account and we'll wipe it.
Export your data — typing stats can be exported on request.

If you're in the EU or UK, GDPR gives you all of the above plus the right to complain to your local data protection authority.

Cookies and local storage

The app uses your browser's local storage to remember your sign-in tokens, your offline cache, and your settings. We don't use third-party cookies. We don't need a cookie banner because we're not setting tracking cookies.

Children

Clavier isn't aimed at kids under 13. If you find out a child under 13 created a cloud account, email us and we'll delete it.

Changes

If we change something meaningful, we'll email registered users and update the "Last updated" date above.

Contact

Questions, requests, complaints — email hello@useclavier.com.