Privacy Policy
Introduction
Clann is operated by O'Hanlon Software (Ontario, Canada). This policy explains what we collect, how we use it, and the choices you have. By using Clann you agree to what's described here.
What We Collect and Why
- Account: name, email, profile photo, and sign-in credentials (handled by our identity provider - we don't store passwords)
- Family content: family group details, the photos and videos you upload, captions, comments, and any EXIF metadata your photos already contain (date, camera, GPS if present)
- Children's profiles: names, dates of birth, and photos that you add for children in your family group (see "Children" below)
- Device & usage: device type, OS, app version, IP, and product analytics events (logins, feature use) so we can keep the service running and improve it. Mobile analytics events are processed by PostHog; website usage is measured with Google Analytics. We do not use this data for advertising
- Invited contacts: the email of anyone you invite, kept only to deliver the invite and prevent abuse
- Payments: if you buy a print or subscription, billing and shipping details handled by Stripe and Prodigi. We don't store card numbers
We use this information to provide the service, send you transactional notifications, process orders, prevent abuse, and meet legal obligations. We do not use it for advertising.
Storage and Security
- End-to-end encryption: photos and videos are encrypted on your device before upload, using keys held only by the devices in your family group. We store the encrypted files and cannot read them. New family groups are end-to-end encrypted by default; family groups created before this was introduced remain encrypted in transit and at rest until an admin turns it on.
- What end-to-end encryption does not cover: the names of people you tag, reactions, and album and group names are not end-to-end encrypted. Captions, comments and voice notes are end-to-end encrypted. Captions and comments written before encrypted text shipped in August 2026 remain readable to us until they are converted.
- Photos and videos are stored in private object storage and served via short-lived signed URLs - they are not publicly addressable
- All traffic is encrypted in transit (HTTPS); data is encrypted at rest by our cloud providers
- Access to production systems is restricted to authorised personnel and logged
Sharing
We never sell your data, use your photos to train AI, share with advertisers or data brokers, or use your content for marketing.
We share data only: within your family group; with the sub-processors listed below; when legally required; or as part of a business transfer (you'll be notified).
Sub-processors: Supabase (auth, database, storage), AWS (object storage), Stripe (payments), RevenueCat (subscription management), Resend (email), Prodigi (print fulfilment), Expo (push notifications), PostHog (mobile product analytics), Google Analytics (website usage analytics), and Apple/Google for sign-in and notification delivery.
Children
Clann is for adults (18+). Children don't create accounts, but adults can add a child profile and share photos of children within a family group. As the account holder, you are responsible for confirming you have the right to upload photos of any child.
Children's photos get the same private-storage protections as everything else. We never use them to train AI or share them with advertisers. A parent or guardian can email support@getclann.com to delete a child's profile, photos, and metadata.
Your Rights
You can access, correct, export, or delete your data at any time from the app, or by emailing support@getclann.com. You can opt out of non-essential notifications in-app.
Residents of the EU, UK, Switzerland, and California have additional rights under GDPR, UK GDPR, and CCPA - including the right to lodge a complaint with your local data protection authority. Clann does not sell personal information or share it for cross-context behavioural advertising.
Retention
We keep your data while your account is active. When you delete your account from the app, we immediately remove your profile, sign-in record, family content, and associated photos and videos from our database and authentication system. Encrypted database backups held by our infrastructure provider are retained for a short period (typically up to 7 days) before they roll off and your data is no longer recoverable. Payment and order records are retained by us and by Stripe as required by tax and accounting law (typically up to 7 years). Analytics events used to operate and improve the product are retained while needed for trend analysis and may also be processed by PostHog under their data retention settings.
Cookies & International Transfers
In the mobile app, we use local storage only to keep you signed in and remember your preferences. On our website (getclann.com), we set essential cookies that keep you signed in, and - only if you choose “Accept all” in our cookie banner - Google Analytics cookies (_ga, _ga_*) that help us understand which pages people visit so we can improve them. If you decline, no analytics scripts are loaded. We do not use advertising cookies or cross-site behavioural tracking, and we never sell or share this data with advertisers. Mobile product analytics are sent to PostHog using a generated identifier rather than a browser cookie.
You can change your cookie choice at any time: .
Clann operates internationally; your data may be processed in the US or EU. Where data leaves the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses.
Contact & Updates
Questions, requests, or complaints: support@getclann.com (O'Hanlon Software, Ontario, Canada). We aim to respond within 30 days.
We may update this Policy from time to time. Updates become effective when posted. We may notify You by email or through the Application for material changes.
Privacy, Security & Pricing FAQ
How does Clann protect family photos and videos?
Clann encrypts photos and videos on your device before upload for new family groups, using keys held only by devices in that family group. Existing family groups use encryption in transit and at rest until an admin enables end-to-end encryption. Captions, comments, tagged-person names, and album and group names are not end-to-end encrypted. Stored files are private and delivered through short-lived signed URLs.
Does Clann use family photos for AI training or sell personal data?
No. Clann does not use family photos or videos to train AI, sell personal data, share data with advertisers or data brokers, or use family content for marketing.
Who can access photos shared through Clann?
Only people invited to your family group can access its photos and videos. Production-system access is restricted to authorised personnel and logged, and media files are not publicly addressable.
How much does Clann cost?
Clann is free to download and includes a 7-day free trial. Premium costs $6.99 USD per month or $39.99 USD per year.