Privacy policy
Last updated 28 October 2026
CliffsMe reads the sources you connect so it can show you what matters. It is designed to see as little as possible, keep it as briefly as possible, and never act on your behalf.
Who we are
CliffsMe is operated by CliffsMe (operated by Paul Napper Web Design), Sunshine Coast, Queensland, Australia. Contact us at privacy@cliffsme.com. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
What we collect
Your account
Your name, email address and, if you sign in with Google, your profile photo. Your preferences (interests, important people, work domains, muted words, time zone).
Your connected sources
Only for sources you choose to connect, with the narrowest access each platform offers (read-only wherever it exists; see the note on Meta below):
| Source | What we read |
|---|---|
| Gmail | Sender, recipients, subject, preview snippet and labels of messages from the last two days. We do not download full message bodies or attachments. |
| Google Calendar | Events from yesterday to two days ahead: title, time, location, attendees, description. |
| Microsoft Outlook | Inbox message previews and calendar events in the same windows as above. |
| Slack | Messages from the last day in channels you belong to, your direct messages and mentions, and the names of people involved. |
| Posts on Pages you manage, with their comments and reactions, and those Pages’ Messenger conversations. | |
| Your own posts, their comments and counts, and your direct messages (Professional accounts only). | |
| TikTok | Your profile and your recent videos’ titles and view, like and comment counts. |
| Nothing is read from LinkedIn directly. CliffsMe recognises LinkedIn’s notification emails (messages, invitations, mentions, comments) in the inboxes you’ve connected and shows them as LinkedIn items. | |
| Only messages you forward to your CliffsMe number, and chat exports you upload yourself. | |
| News | Public headlines from publishers for the topics you follow. No personal data. |
Meta (Instagram, and Facebook Page messages) has no read-only permission for messages and comments, so those permissions technically also allow replying. CliffsMe only reads with them and never sends, posts or deletes anything.
How we use it
- To prepare your personal, work and to-do editions: grouping related items, ranking what matters, and writing short summaries.
- To show you the original item and link you back to it.
- To keep the service secure and working, and to answer you when you contact us.
We do not sell your data, share it with advertisers, use it for advertising, or use it to train artificial intelligence models.
AI processing
Summaries are written by Claude, a model made by Anthropic, PBC, which we run through Google Cloud’s Vertex AI. The items needed for your edition are sent to that service for processing. Under Google Cloud’s and Anthropic’s commercial terms, these inputs and outputs are not used to train their models. Content from your sources is treated strictly as data; CliffsMe ignores any instructions contained in it.
Google user data
CliffsMe’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above, is not transferred to others except as necessary to provide those features (for example, AI summarisation), for security, or to comply with law, and is never used for advertising. No human reads your Google data unless you ask us to for support, it is needed for security, or the law requires it.
Where it is stored and for how long
- Data is stored in Google Cloud (Firebase) and processed by Google Cloud, which also runs the AI model. Some of these providers process data outside Australia, including in the United States.
- Access tokens for your sources are encrypted with AES-256-GCM and are never sent to your browser or device.
- Raw items from your sources are deleted automatically after 30 days by default. You can choose 7, 14, 30 or 90 days in Preferences.
- Disconnecting a source immediately deletes its tokens and every item from it.
- Deleting your account deletes your profile, connections, items, editions and to-dos.
Your choices
You can see what each source can read before connecting it, mute a source, disconnect it, or delete your account at any time from within CliffsMe. You can also revoke access directly from your Google, Microsoft, Slack, Meta or TikTok account settings. To request access to or correction of your information, or to make a complaint, email privacy@cliffsme.com. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner.
See how to delete your data and how we protect it.
Changes
If we change what we collect or how we use it, we will update this page and tell you in the app before the change takes effect.