Privacy Notice
This notice explains how ClearPath Solutions (“ClearPath”, “we”, “us”) uses personal data in the ClearPath Home family organiser.
Business correspondence address: 27 Saint Marys Avenue,
Cathedral Road,
Cork,
T23 D2VF
Privacy contact: roy@clearpathsolutions.ie.
Accounts are for adults. Adults may create profiles for children and family members only where they have authority to do so. Do not add passwords, payment-card details, unnecessary medical information or anything you are not entitled to share.
1. Data we process
- Account and access: email address, Firebase user ID, verification state, household membership, consent and legal-acceptance receipts.
- Family organiser data: names, avatars, calendar events, work schedules, school dates, trips, birthdays, notes, tasks, shopping, meals, household records and messages entered by users.
- Optional sensitive data: health, allergy, medication and care information. Separate explicit consent is requested before the first medical entry.
- Optional images and AI requests: photos selected for import or records, AI-request text, and the minimum household context needed for the request.
- Optional notifications: family reminders created on the user’s device; lock-screen display depends on device settings.
- Technical data: security, error and service logs generated by hosting and infrastructure providers. ClearPath does not add advertising trackers to the app.
2. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create accounts, authenticate users, sync a private household and provide organiser features. | Performance of the service contract and legitimate interests in providing a secure service. |
| Protect accounts, prevent cross-household access, investigate faults and maintain service availability. | Legitimate interests and applicable legal obligations. |
| Process optional health or care information entered by an authorised adult. | Explicit consent, which can be withdrawn in Settings with a deletion option. |
| Process a request using the optional AI feature. | Separate consent, off by default. Withdrawal does not affect non-AI features. |
| Send verification, password-reset and essential security messages. | Performance of contract and legitimate interests; these are not advertising messages. |
3. Household visibility
Every verified adult account that joins the same household can see that household’s shared information, including sensitive information added there. Other households cannot access it. The household owner can review and remove member accounts and rotate the invitation code.
4. Processors and transfers
| Provider | Use | Data involved |
|---|---|---|
| Google Firebase / Google Cloud | Authentication, Firestore, hosting, functions and notifications. | Account, household and technical data. |
| Cloudflare | Security proxy for optional AI requests. | Token-validation data, request metadata and AI payload. |
| Anthropic | Optional AI response and image/text extraction after consent. | Selected request and minimum context. |
| Open-Meteo | Weather forecast. | Approximate coordinates; family names are not sent. |
| Open Food Facts databases | Optional barcode/product lookup. | Barcode/product code; family records are not sent. |
Some providers may process data outside the EEA. Where required, ClearPath relies on applicable provider terms, adequacy decisions or safeguards such as Standard Contractual Clauses. Processor contracts, locations and transfer assessments must be kept under review.
5. Retention and deletion
Household data is kept while the household remains active. An account’s routing record is deleted when the account is deleted. If the final household member deletes their account, the household data is deleted. If other members remain, shared household information remains available to them. Provider security logs, support records and backups may persist for limited documented periods. Deletion may take time to propagate through provider backups.
6. Rights
Depending on the circumstances, people may have rights of access, correction, erasure, restriction, objection, data portability and withdrawal of consent. The app provides editing, export and account-deletion controls. Requests can also be sent to roy@clearpathsolutions.ie. Identity may need to be verified; valid requests are normally handled within one month.
Concerns may be raised with the Irish Data Protection Commission or another competent EEA supervisory authority.
7. Children
ClearPath does not knowingly offer accounts directly to children. Adult account holders decide what child information is necessary, keep it accurate and remove it when no longer needed. Avoid full school addresses, unnecessary medical detail and information that could create a safeguarding risk.
8. AI and automated decisions
The optional assistant may suggest entries, but it does not make legal or similarly significant decisions. Proposed changes are shown for user confirmation before saving. AI output can be wrong and must be checked.
9. Security and changes
ClearPath uses verified accounts, household-scoped access rules, authenticated server functions, encrypted HTTPS transport, size and revision controls, restricted invitation codes and security headers. No internet service can guarantee absolute security. See Security Information. This notice will be updated when processing materially changes.