Clocktower Privacy Notice

• Account information, including your phone number, authentication records, name, and institution.
• Enrollment-journey information, including your intake answers, milestones, reminders, schedules, and completion status.
• Content you provide, such as chat messages, support questions, feedback, reports, community profile details, interests, and messages to other users.
• Safety and eligibility information, including date of birth, consent records, blocks, and moderation reports.
• Device and delivery information, including push tokens, notification preferences, and delivery records.
• If the feature is enabled and you are eligible, a profile photo used to create a stylized avatar. The original is deleted after processing; the stylized avatar may remain until you remove it or delete your account.

We use information to authenticate you, personalize your enrollment journey, answer or route questions, operate community and event features, deliver notifications, investigate safety reports, support users, improve the beta, and comply with legal obligations. We do not sell personal information or use it for targeted advertising.

Information may be visible to other community members according to the feature and your settings. Authorized Clocktower operators—and, where an institution participates, authorized institution staff—may access information needed for support, event operations, escalated questions, and safety review.

We also use service providers for specific jobs: Supabase for authentication, database, storage, and server functions; Twilio for phone verification; OpenAI for semantic matching and eligible avatar processing; Expo, Apple, and Google for app builds, beta delivery, push notifications, and related diagnostics; Postmark for operational email; and Vercel for the public web service. These providers process information under their own terms and our configurations.

Clocktower is not for children under 13. Date of birth is used to apply age-based restrictions and is not shown to other users. Minor accounts cannot upload profile photos and are restricted from adult-to-minor direct contact. Parent access, roommate matching, and mentor pods are optional, institution-invited features controlled by Clocktower rollout flags; when enabled, each keeps its own scoped safeguards and does not expose routine peer moderation to the school.

If you install the iPhone beta through TestFlight, Apple may collect crash information, device details, screenshots, comments, or contact information that you choose to include in TestFlight feedback. Apple may make that information available to Clocktower so we can diagnose problems and improve the beta.

We keep beta account data while your account is active and as needed to operate and secure the service. You can choose Delete my account in the app. The deletion process removes your authentication account, current avatar files, and user-scoped product data. Limited audit, moderation, legal, or de-identified records may remain where needed for safety, legal obligations, dispute resolution, or to preserve non-personal institution content.

To ask for access, correction, or deletion help, contact us at the address below.

Contact Envoq LLC, the operator of Clocktower, by emailing info@clocktowerhq.com with privacy questions or requests. We may update this notice as the beta changes and will revise the effective date when we do.