Privacy

Last updated August 2026

Who we are

Clappy is an early-stage product operated by its makers. You can reach us by replying to any message Clappy sends you - that goes to a real person.

What we collect

Your phone number

Your number in E.164 form is your account. There is no email, no password, and no signup form. We need it to know which conversation is yours and to reply to you. Internally it is masked to the last four digits everywhere it appears in a log.

Your messages

We store what you send and what we send back, so the conversation has continuity and so we can tell a repeated forward from a new one.

The videos you forward

For each link we store the URL, whatever public metadata the platform gives us (title, description, author, view and like counts where they are public), and structured knowledge from the video: summaries, topics, named people, places, products and works, attributed claims, instructions, opinions, events, quotes, on-screen text, scenes, and evidence passages. Creator signals such as hook, pacing and format are kept too.

To produce that we either temporarily download the video or let the analysis provider watch its public URL, then transcribe speech and inspect visual moments. The media files are deleted once the analysis is done. The transcript and the structured read are kept; the video is not.

A profile of you and your taste

The reads accumulate into a profile - a short document describing recurring topics, the formats you gravitate toward, and how your taste has shifted recently. It is regenerated from your stored items rather than appended to, so deleting items changes it.

We may keep stated or inferred information about identity, relationships, interests, beliefs, goals, projects, routines, experiences, knowledge, dislikes, creator mode, and how you prefer Clappy to answer. Some inferences can be sensitive. Each memory keeps its source, confidence, sensitivity, current status, and evidence so it can be corrected, superseded, expired, or forgotten without erasing its audit history accidentally.

We keep what you say you want to create separate from patterns in what you save. Saved interests need repeated support before they affect your profile. Categories that stop being relevant may be archived rather than deleted, so they can be found historically and brought back if you mention or save something strongly related to them again.

Clappy also learns broad communication traits from your recent non-link messages, such as casing, punctuation, length, formality, directness, slang, humor, and emoji frequency. It uses those traits to make replies feel less generic; it is instructed not to copy your distinctive phrases or pretend to be you.

Current web research

If you ask Clappy to search or verify something, or your question depends on unstable information such as news, prices, schedules, laws, or current product state, Clappy may send a search query to Gemini Google Search grounding. We keep the query, grounded answer, source titles and URLs, model, and cost with that conversation turn. If research fails, Clappy should say that it could not verify the answer instead of presenting it as current.

Your YouTube channel, only if you ask

If you choose to link a channel, we store read-only OAuth tokens and your channel id. Linking is entirely optional and nothing else stops working without it.

What we do not collect

• No email address, name, or address unless you volunteer it in a message.
• No payment details. There is nothing to pay for.
• No location data, no device identifiers, no advertising identifiers.
• No analytics or tracking on this website. There are no cookies on these pages.

Who else sees it

We use third parties to do things we cannot do ourselves, and they see only what that job needs:

• Our messaging provider carries the messages themselves, and so necessarily handles your number and message contents.
• The AI models we call receive video transcripts, frames, and metadata in order to produce the analysis. For personalized replies they may also receive relevant profile memories, communication style, category summaries, and evidence from a small set of your saves. Gemini receives web-search queries when grounded research is requested. These providers do not receive your phone number.
• Our hosting and database providers hold the data at rest.

We do not sell your data, share it for advertising, or hand it to data brokers. If we are ever legally compelled to disclose something, we will tell you unless we are prohibited from doing so.

How long we keep it

• Video files: deleted after analysis, typically within minutes.
• Everything else: for as long as your account exists.
• On request: immediately, and permanently.

Deleting your data

Text DELETE ME. Clappy confirms, then erases your account and everything attached to it: messages, forwarded items, interpretations, profile and response memories, research turns, action history, and any linked account. Objective video analysis and evidence are deleted when no other user still has that video saved; a shared analysis is retained while another person still references it. This is a hard delete, not a flag.

You can also ask what Clappy knows about you and ask it to forget a specific memory or a group of memories, such as health-related information. Targeted forgetting removes those memories from normal context while retaining enough audit state to honor corrections and prevent the same unsupported inference from silently reappearing.

Text STOP instead if you only want the messages to end. Clappy confirms once and then goes quiet; your data stays until you ask for it to go.

YouTube linking, specifically

Clappy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request read-only access. Clappy cannot upload, edit, delete, or comment as you.
• Access and refresh tokens are encrypted before they are written to our database, using authenticated encryption. Nobody reading the database sees a usable token.
• We use the access to analyse your own uploads so that suggestions are grounded in your actual work. We do not use it for advertising, and we do not transfer it to anyone.
• You can revoke it independently of us at myaccount.google.com/permissions.

Security

OAuth tokens are encrypted at rest. Phone numbers are masked in logs. Magic links are signed, expire in fifteen minutes, and work exactly once. We are a small team and cannot promise perfection; if you find something, reply to Clappy and tell us.

Children

Clappy is not for anyone under 13, and we do not knowingly keep their data.

Changes

If this notice changes in a way that affects what we do with your data, Clappy will text you about it rather than quietly editing this page.