CLUTCH · OCTOBER 27, 2026
Privacy
What stays on your Mac and Clutch, what the server needs, and how to manage your data.
About this policy
Clutch is a desktop device, a Mac app, and a service at clutch.diy. This policy describes the current alpha: what data it needs to work, where the data stays, and how to request its deletion.
The owner of the Clutch project in Ukraine is responsible for operating the service. Privacy and support contact: [email protected]. This policy applies to Clutch; third-party service policies also apply if you connect those services.
What stays with you
- Personal reminders: text, time, repeats, and sync status are stored on the Mac and Clutch. They are sent directly over local Wi-Fi or USB; the shared Clutch server does not receive your personal schedule.
- Device control: brightness, night mode, and widget order are exchanged between the paired Mac and Clutch. The home Wi-Fi password is entered through the device’s local page or USB and stored on Clutch.
- Personal widgets: the latest Netatmo, Codex, EcoFlow, and Bambu readings may be stored locally so the screen does not become empty after a restart. When the connection is lost, they are marked as stale.
- Integration credentials: Netatmo and EcoFlow tokens and the Bambu access code are stored in the Mac Keychain. Local pairing and some Clutch data are stored in the device’s memory; do not treat the physical device or its backup as secure storage for secrets.
What the Clutch server receives
For connections and data delivery, the server stores technical owner/device identifiers, client pairings, access-key hashes, the selected region and locality, configured public Telegram channels, and keywords. Keywords can contain personal information; add only what is needed for notifications.
The server also receives technical connection status, firmware version, and permitted device and update diagnostics. The last contact and firmware version are stored to monitor operation. Current telemetry is processed for device status; it is not a log of your personal reminders.
An internet connection transmits the IP address and technical request parameters. Clutch uses Cloudflare for HTTPS and access protection. Cloudflare may process this technical data for delivery, protection, and diagnostics.
The data is needed to run the service, personalize the region and rules, and troubleshoot problems. The reviewed app contains no advertising tracking or sale of data for advertising.
Connected services
- Netatmo Home Coach. Sign-in takes place on Netatmo’s official page. The authorization code and token refresh pass through the Clutch server; tokens are processed for this exchange and are not written by the broker to a database or files. A sign-in attempt expires after 10 minutes; expired attempts are cleared approximately every 30 seconds. The Mac reads room measurements directly from Netatmo and sends them to Clutch.
- Codex. With your permission, Clutch uses the installed Codex/ChatGPT runtime and account folder to read limits and usage statistics. Clutch does not read conversation text or session files to build this widget and does not upload the account folder to its server.
- EcoFlow. The email and password are sent from the Mac to EcoFlow’s EU service for sign-in. Locally stored tokens and access to power station telemetry are used after that; the Clutch server does not act as an intermediary for these requests.
- Bambu Lab and Philips Hue. The Mac and Clutch use the local network to communicate with the printer or Bridge. Hue can receive a local signal command from Clutch without a running Mac. The Hue authorization data needed for this is also stored on the device.
- Telegram and public sources. The server-side collector reads selected public channels and matches messages against rules. This feature does not require the user’s personal Telegram account. Alert and weather sources receive server requests; their data is delivered to devices according to region.
Connecting integrations is optional. Their own terms and privacy policies apply independently of Clutch: Netatmo, OpenAI, EcoFlow, Bambu Lab, Philips Hue, Telegram, Cloudflare.
Retention and deletion
On your devices. Local settings, reminders, and the latest measurements remain until changed or cleared. Disconnecting an integration stops its active use, but does not automatically erase all old readings, Clutch memory, or your backups. Deleting the Mac app does not guarantee that its Keychain entries are cleared. RESET on Clutch only restarts the device.
On the Clutch server. Owner/device registration, pairings, region, Telegram rules, and the last contact are kept while needed for connections, or until a deletion request is completed. Mac sleep or loss of network access does not cause deletion. There is currently no automatic retention limit for inactive registrations. Changing rules replaces the current configuration; the previous one may remain in a backup.
Backups and logs. Central keeps the 7 most recent verified managed backups. A new backup is created on a daily schedule and after the service starts; these are 7 generations, not a guaranteed 7 days. Older technical archives outside this rotation are also included when handling deletion. Local Central and tunnel logs are limited to approximately 4 MiB per stream and are replaced based on size, not age. We do not claim that all backups or logs are automatically erased after a certain number of days.
How to request a copy, correction, or deletion
In the current alpha, email [email protected] and say what you want to do: obtain a copy, correct data, or delete the server registration. We will verify ownership through a trusted channel without asking for a password, token, or secret key. For deletion, we will agree whether the request concerns one device or the entire registration and explain which server features will stop.
Our operational target is to acknowledge receipt within 3 business days and complete the request within 30 calendar days after ownership verification and clarification of scope. This is manual processing, not automatic clearing on a timer. We will give you a specific date; if there is an obstacle or a reason to retain certain data, we will explain why, what remains, and the further retention period.
A server deletion request covers the relevant working records, pairings, rules, diagnostics, and copies under Clutch’s control, including older archives. Revoking a key alone is not enough. We confirm completion after checking this list and ensuring that restoring a backup will not bring back deleted records. If some data has not yet been cleared, we report a partial result, not complete deletion.
What needs to be done separately. To delete a reminder, remove it in the Mac app and wait for confirmation that it has synced with Clutch. To end an integration’s access, disconnect it in Clutch and, if needed, revoke permission in the service itself. Server deletion does not automatically erase data on the Mac, in Keychain, on Clutch, or in your backups, and does not delete independent accounts with Netatmo, EcoFlow, or other services. Before giving Clutch to another person, contact support about clearing the device and its pairings.
Processing by Cloudflare and other independent providers is also governed by their policies. We do not equate their logs and backups with Clutch’s local rotation; we explain the limits of the completed request in our response.
The website and support requests
Website preorders (added October 29, 2026). When you submit the preorder form, the website database stores your email address or phone number, the form language, the version of your confirmed consent to be contacted, the submission time, and the request reference. The project owner uses this information to contact you about your preorder. To request deletion of your preorder request, email [email protected].
The website stores selected interface settings if you use them. The help and privacy pages do not submit forms and do not contain advertising trackers. Cloudflare may use technical cookies for protection or authorization; see the Cloudflare cookie description.
When you contact support, we receive your email address, message, and submitted attachments to handle the request. Do not send passwords, tokens, access codes, or private messages that are not needed to describe the problem. We keep correspondence while it is needed to handle the request and provide agreed follow-up support. You can request deletion of messages and attachments; we use the process described above and clarify email provider limitations separately.
Internet services and their infrastructure may process data in other countries. The Clutch operator needs access to server data for support and maintenance. The specific terms of third-party processing are described in the respective service policies.
Changes and contact
If data handling changes, we will update this page and its revision date. We will communicate significant changes through available product channels. For privacy questions, corrections, or deletion of data, contact [email protected].