Privacy Policy

Your data is sensitive. You’re using ClearSplit to go through one of the most personal experiences a person can go through — a divorce. We take that seriously. This policy explains, clearly, what we collect, why, how we protect it, and what rights you have over it.

If you just want the short version: we only collect what we need to help you, we don’t sell your data, we don’t use it for advertising, and you can delete everything at any time.

Who we are

AKAI Labs LLCis the company that runs ClearSplit and the “data controller” for your information under UK data protection law. That means we’re legally responsible for how your data is handled.

Registered office: 2108 N ST STE N, Sacramento, CA 95816, USA.

Contact: privacy@clearsplit.co.uk for any privacy-related question or request.

What we collect and why

Account information

• Email address — to sign you in (we use magic links, so no password), send essential service emails, and reach you about your account. We keep this while your account is active.
• Your name (optional at first, required when generating forms) — so we can pre-fill court forms for you.

Case information you give us

To guide you through divorce and financial remedy, ClearSplit asks you for information about your case. Depending on what you do in the app, this may include:

• Your date of birth, phone number, address, and occupation (needed for official court forms)
• Your ex-partner’s name, address, and whether they have a solicitor (needed for forms and for calculating deadlines)
• Your marriage date, separation date, and key hearing dates
• Your case number and regional court
• Financial information — income, property, pensions, savings, debts (for Form E and financial remedy tools)
• Whether you have children under 18 and, if you choose to share them, their details (for the children track and Form C8)
• Whether domestic abuse is a concern (so we can route safely)
• Documents you upload — court papers, financial statements, your ex’s Form E, correspondence

Some of this data is “special category data” under UK GDPR — particularly information about domestic abuse. We handle that with extra care, as explained below.

AI chat messages

If you use the AI chat, we store the messages you send and the AI’s replies. This lets us show you your conversation history and improves the service over time.

Usage data

Automatically collected when you use the service:

• Pages you visit and features you use
• Device information (browser type, operating system, screen size)
• Approximate location (country/region, from your IP address)
• Cookies and similar technologies (see our Cookie Policy)

Payment data

If you subscribe, our payment processor (Stripe, once integrated) handles your card details directly. We never see or store your card number. We get back a subscription ID and billing status so we know your account is active.

Why we’re allowed to process your data (legal basis)

Under UK GDPR we can only process personal data if we have a legal basis for each purpose. Here’s our basis for each use:

• To provide the service you asked for — running your account, pre-filling your forms, storing your case data, answering your questions. Basis: performance of the contract between you and us (the Terms of Service).
• To take payment, if you’re on a paid plan. Basis: performance of the contract.
• To send you service emails — magic link emails, deadline reminders, service updates. Basis: performance of the contract.
• To keep the service secure — detecting abuse, fraud, and bots. Basis: our legitimate interest in running a safe service, balanced against your rights.
• To improve the product— understanding which features work and which don’t, fixing bugs, making the AI better. Basis: our legitimate interest in improving the service. We use aggregated or anonymised data wherever possible.
• To send you marketing emails, only if you’ve ticked the box opting in. Basis: your consent. You can withdraw it anytime by clicking “unsubscribe” in any email or emailing us.
• To comply with our legal obligations — for example, keeping tax records. Basis: legal obligation.
• For special category data (like information you give us about domestic abuse). Basis: your explicit consent, which you provide by choosing to share that information. You can withdraw it by deleting the relevant information in the app or asking us to remove it.

Who we share your data with

We don’t sell your data. We don’t share it with advertisers. We don’t share it with partners or third parties for their own marketing. The only people who see your data are:

You

Always. You can see and export everything we have about you.

Our sub-processors

We use trusted third-party services to run ClearSplit. Each of these has signed a Data Processing Agreement (DPA) with appropriate UK international transfer protections (Standard Contractual Clauses / UK International Data Transfer Addendum where data goes outside the UK and EU).

• Supabase — database and file storage. Data is hosted in the EU (Ireland). No international transfer issue.
• Anthropic (AI / Claude) — US-based. When you use AI chat, your messages are sent to Anthropic for processing. Anthropic does not train their models on your data under their commercial terms.
• Vercel — application hosting. US-based.
• Resend (when we launch email) — transactional email delivery. US-based.
• Stripe (when we launch payments) — payment processing. UK/EU/US infrastructure.

If you want details of the specific DPA for any of these, email privacy@clearsplit.co.uk.

Courts and government

You use ClearSplit to prepare documents that youthen send to the court or government. We don’t send anything on your behalf — you’re always the one who files.

If we’re legally required to disclose data (for example, a valid court order from a UK court), we’ll comply, but we’ll push back on overly broad requests and tell you unless we’re legally prevented from doing so.

International data transfers

Some of our sub-processors are based in the United States. When your data is transferred to the US, it’s protected by UK-approved safeguards — specifically, the UK International Data Transfer Agreement or Standard Contractual Clauses signed as part of each sub-processor’s DPA with us.

Our primary case data storage (Supabase) is in the EU (Ireland), which offers UK-equivalent protection.

How long we keep your data

• Active account data — while your account is active.
• When you delete your account — we hard-delete your personal case data, uploaded documents, and chat history within 24 hours.
• Billing records — we keep invoices and payment records for 6 years after the transaction (UK tax law, and equivalent in California).
• Magic link tokens — 15 minutes (then invalid).
• Session tokens — up to 30 days, or until you log out.
• Audit logs (who logged in when) — 90 days, for security.
• Inactive accounts— if you haven’t used the service for 2 years, we’ll email you warning that we’re going to delete your account. If you don’t log in within 30 days of that email, we delete everything.

Your rights

Under UK GDPR you have rights over your personal data. We’ll always act on valid requests within 30 days (usually much faster).

• See what we have (right of access) — download everything we hold about you.
• Correct anything wrong (right to rectification) — most of this you can do directly in the app; for anything else, email us.
• Delete your data (right to erasure) — use the delete account button in settings, or email us. We delete within 24 hours.
• Export your data (right to data portability) — we provide an export button that gives you a ZIP of everything.
• Restrict processing — you can ask us to pause processing while we sort something out.
• Object to processing — particularly for anything based on our legitimate interests or marketing.
• Withdraw consent — where we rely on consent (for marketing, or for special category data you shared), you can withdraw it at any time.
• Complain to the regulator— the UK Information Commissioner’s Office (ICO). You can do that at ico.org.uk/make-a-complaint. We’d rather you came to us first so we can fix things, but you have the right to go straight to them.

To exercise any of these rights, email privacy@clearsplit.co.uk.

Security

We take security seriously. Practical measures include:

• All data encrypted in transit (HTTPS) and at rest (Supabase storage encryption)
• Session cookies are HttpOnly, Secure, and SameSite=Lax
• Passwordless sign-in by magic link (no passwords to leak)
• Access to production data restricted to the people who need it to run the service
• Documents you upload are stored in access-controlled buckets, not publicly accessible

No system is perfectly secure. If something does go wrong, we’ll follow UK GDPR breach notification rules: we’ll tell the ICO within 72 hours if the breach is likely to risk your rights, and we’ll tell you directly if it affects you personally.

Children

ClearSplit is for adults. You must be 18 or over to use the service. We don’t knowingly collect personal data about users under 18.

If you use ClearSplit to prepare forms that include information about your children (for Form C8, Form C100, or similar), we process that information because you’ve asked us to, to help you with your case. We don’t use it for anything else and we don’t contact the children.

A note on domestic abuse safety

If you’re using ClearSplit in the context of domestic abuse, we take extra care. Specifically:

• The Quick Exit button, on every page, redirects you to BBC Weather and logs you out in one click.
• Email and push notifications (when we launch them) won’t show case details — just “You have something to review.”
• We’ll never share your contact information with your ex-partner or their solicitor.
• You can delete everything instantly if you need to.

Automated decision-making and profiling

We don’t make automated decisions that have legal or similarly significant effects on you. Our AI produces information and suggestions, but you always make the final decisions about your case.

Changes to this policy

We may update this policy. If we make material changes we’ll email you at least 14 days before they take effect. The “Last updated” date at the top of this page always tells you when it last changed.

Contact

Questions, requests, complaints — email privacy@clearsplit.co.uk.

AKAI Labs LLC
2108 N ST STE N
Sacramento, CA 95816
USA