Effective April 6, 2026
Everything you actually want to know about how Clio handles your data — in plain language. The full legal version is one click away.
We earn money from subscriptions. Your data is not for sale — not now, not ever.
We don't show ads, work with advertisers, or use your data to target you with anything.
Your data is yours. Delete your account and it's gone — immediately and permanently.
Creating a Clio account takes two things: your first name and your mobile number. That's it. Everything else — email, city, academic interests — is optional and can be added later in your profile if you want.
If a parent creates a parent account, we also collect the parent's name, email, and payment information. The payment part goes directly to our payment processor — Clio never sees your card number.
When you connect your Google Classroom account, Clio imports your school data so it can actually help you. This includes your class list, assignments and due dates, teacher-posted materials, your submission status, grades posted in GC, teacher announcements, and school events.
This data goes into a private AI knowledge base that belongs only to you. No other student has access to it. We don't share it. We don't sell it. We use it to power your Clio — nothing else.
General chat conversations with Clio are not saved after you close them. The conversation happens, and then it's gone.
| ✓ We do this | ✗ We never do this |
|---|---|
| Use your data to run Clio and personalize your experience | Sell your data to anyone |
| Deliver the Daily Digest and alerts you opted into | Share your data with advertisers |
| Generate practice questions from your teacher's materials | Show you ads of any kind |
| Check your homework against your teacher's rubric | Use your data to train AI models |
| Track anonymized usage to improve Clio | Build a profile of you for any commercial purpose |
| Delete your data immediately when you close your account | Keep your data after you've deleted your account |
Hey Clio, Inc. is a Public Benefit Corporation. Our legal mission is to improve student outcomes and wellbeing — not to maximize profit. Selling your data would directly contradict our stated purpose, and we'd be legally accountable for it.
Clio is your tool. The Family plan gives parents a summary view of your activity — enough for them to stay informed, not enough to read over your shoulder.
What your parents cannot see: Chat conversations, individual homework submissions, practice test questions and answers, or any other content you haven't chosen to share. Your conversations with Clio stay between you and Clio.
A small number of service providers help us run Clio — our cloud host, the AI system that powers responses (Google Vertex AI), our SMS provider, and our payment processor. Each of them is bound by a written agreement that requires them to handle your data only for the purpose of running Clio, with protections at least as strong as ours.
We may also be required to disclose data if a court orders us to. We'll tell you when that happens, if we legally can. If your school has a data privacy agreement with us, we'll notify your school instead — they handle notifying you and your family.
That's the complete list. Nobody else.
Your school or district may enter into a separate data privacy agreement (DPA) with Hey Clio. If they do, it gives your school additional authority over data that comes from school systems — like your Google Classroom content. The DPA may also add protections beyond what's described here. If there's ever a conflict between this page and your school's DPA, the DPA wins.
You're in control of your data. Here's what you can do — and how to do it.
Depending on where you live, you may have additional rights under state law. California and Colorado residents have specific rights including the right to know what data we hold, request deletion, and opt out of data sales (we don't sell data). See our full Privacy Policy for details, or contact us at privacy@heyclio.ai.
Simple rule: we keep your data while you're using Clio. When you stop — and especially when you delete your account — it goes away.
What stays after deletion? Anonymous, aggregated statistics — things like "what percentage of students used practice tests this month" — may be retained to help us measure our mission. This data cannot identify you and cannot be reconnected to your account. We will never try to re-identify it.
Your data is encrypted at rest and in transit. Access to student data inside our company is restricted to the people who need it to run Clio. We use US-based servers only. If there's ever a breach that affects your data, we'll tell you as required by law. If your school has a data privacy agreement with us, we'll notify them within 72 hours.
Connecting Google Classroom to Clio is a two-step process. First, your school enables Clio in its Google Workspace settings — that's a decision made by your school's IT administrator. Then you authorize the connection yourself through Google's standard sign-in. Both steps are required. You can disconnect at any time.
Clio only reads from Google Classroom. It never posts, submits, or changes anything there on your behalf.
Your school controls which apps students can connect through Google Workspace. If your school hasn't enabled Clio yet, the app will let you send a request to your school's IT administrator. Whether your school enables Clio is their decision, not ours.
Because Clio uses Google's API, Google's own API Services User Data Policy also applies to how we handle your GC data. The short version: it can't be used for advertising or AI training — and we don't use it for those things either.
If we change how we handle privacy in a meaningful way, we'll let you know in the app before it takes effect. This page will always reflect our current practices. The full legal version is our Privacy Policy.
Email us any time at privacy@heyclio.ai. We're real people and we read every message. If something here is unclear or you're not comfortable with something, we want to hear about it.
This is a plain-language summary. The full legal Privacy Policy is the binding document.
We wrote this policy to be understood — by students, by parents, and by anyone else who wants to know how Clio handles data. We've tried to use plain language throughout. If something is unclear, email us at privacy@heyclio.ai and we'll explain it.
We make money from subscriptions, not from your data. We will never sell, rent, or license your personal information to anyone.
We do not show you advertising. We do not use your data to target ads. We do not work with advertising networks of any kind.
You can delete your account and all your data at any time. We will delete it immediately and permanently when you do.
Clio is a product of Hey Clio, Inc., a Delaware Public Benefit Corporation. Our stated public benefit is improving student educational outcomes and wellbeing through AI tools designed for healthy, responsible engagement with technology. That mission shapes every decision we make about data — including this policy.
When this policy says "Clio," "we," "us," or "our," it means Hey Clio, Inc., 16192 Coastal Highway, Lewes, Delaware 19958.
This policy applies to anyone who uses the Clio app or the heyclio.ai website — including students who create a Clio account and parents or guardians who create a parent account. If you are a parent reviewing this policy on behalf of your child, this policy covers your child's data and your own.
If your school uses Google Workspace for Education, your school's IT administrator controls which third-party apps students can connect to their school Google account. Your school must enable Clio before you can connect your Google Classroom data.
Your school or district may also enter into a separate data privacy agreement (DPA) with Hey Clio, Inc. A DPA provides additional protections and obligations regarding how we handle data that originates from your school's systems — such as your Google Classroom courses, assignments, grades, and teacher materials.
When a DPA is in place, your school or district has authority over school-sourced data as required by that agreement and applicable law. This means your school or district may direct us to delete or transfer that data, and may establish additional requirements for how it is handled. Where a DPA's terms conflict with this Privacy Policy, the DPA controls with respect to the data it covers.
This policy continues to govern all data you provide directly to Clio — such as your name, phone number, preferences, and content you create within the app — unless a DPA or applicable law requires otherwise.
Clio is intended for students who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use Clio. If we become aware that we have collected information from a child under 13, we will delete it immediately. If you believe a child under 13 has created a Clio account, please contact us at privacy@heyclio.ai.
When you create a Clio account, we ask for your first name and mobile phone number. Everything else is optional and can be added later in your profile settings if you choose.
When you chat with Clio or use voice, your prompts are used to generate a response. General chat sessions are not stored after the session ends. Practice test and homework review conversations are stored as part of those sessions and accessible in your Study view.
We use the information we collect for one purpose: providing Clio to you. Specifically:
We will never use your information to show you advertising, sell or share it with data brokers, use it to build a profile for purposes unrelated to Clio, or train AI models on your personal data. These are not policies we might change — they are commitments tied to our corporate mission as a Public Benefit Corporation.
We collect anonymized, aggregated data about how students use Clio — things like which features are used and how often, and whether usage correlates with better grades. This data is stripped of any information that could identify you before it is analyzed. It is used only to improve Clio and measure our mission. It is never shared with or sold to third parties.
We will never attempt to re-identify anonymized data. If we publish research or reports that reference a specific school or district, we will obtain that school or district's written approval first.
We collect technical data about app crashes and performance issues to keep Clio working well. This data does not include your personal information or your school data.
Clio uses artificial intelligence to power its core features — including generating practice test questions, reviewing your homework against your teacher's rubric, and answering your questions about coursework. Specifically, Clio uses:
Your data is sent to Google Vertex AI solely to generate responses for you. Google is contractually prohibited from using your data to train its AI models. We do not use your data to train any AI models — ours or anyone else's.
We monitor AI output quality and audit for bias to help ensure Clio's responses are accurate, appropriate, and fair. We will never use your data to develop synthetic, inferred, or derived data profiles about you.
Connecting your Google Classroom account to Clio is a two-step process. First, your school must enable Clio in its Google Workspace for Education settings — this is a decision made by your school's IT administrator. Once your school has enabled Clio, you authorize the connection yourself using Google's standard sign-in process. Both steps are required: your school enables access, and you choose to connect.
Your Google Classroom data is used exclusively to power Clio's features for you. It is loaded into a private AI knowledge base that is yours alone — no other student has access to it, and it is never shared with other students, schools, or third parties for their own purposes.
We use your GC data to show you your upcoming assignments and tests, generate practice questions based on your actual teacher's materials, check your homework against your teacher's rubric, and alert you when something is due or overdue.
Because Clio accesses Google Classroom data, our use of that data is also governed by Google's API Services User Data Policy, which you can read at developers.google.com/terms/api-services-user-data-policy. Consistent with Google's policy, we use Google API data only to provide Clio's features to you — not for advertising, and not to train AI models.
Clio reads your Google Classroom data. It does not post, submit, or change anything in Google Classroom on your behalf.
We do not sell your personal information. We do not share it with advertisers. The only parties who may receive your information are the service providers who help us operate Clio — and they may only use it for that purpose.
All service providers are bound by written agreements that require them to handle your data only as directed by us and to protect it with measures at least as stringent as those described in this policy and any applicable data privacy agreements.
We may disclose your information if required to do so by law, court order, or valid legal process — for example, in response to a subpoena. We will notify you of any such request where legally permitted to do so. Where a school or district has entered into a data privacy agreement with us, we will notify the school or district of any law enforcement request for their students' data in advance of any compelled disclosure, unless prohibited by law. The school or district is responsible for notifying affected students and families.
If Hey Clio, Inc. is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before that happens and you will have the opportunity to delete your account. Where a school or district has entered into a data privacy agreement with us, we will notify the school or district of the proposed transfer. Any successor entity will be required to assume our obligations under existing data privacy agreements. If a school or district does not approve of the successor, it may terminate its data privacy agreement with us.
If you are a parent or guardian, you can create a parent account linked to your student's Clio account. Parent accounts are created on the Clio website, not inside the app. When you sign up, we show you your student's name for confirmation before your account is created.
Parent accounts provide a read-only summary view of your student's Clio activity. This includes:
A note to students: Your parents can see a summary of your Clio activity — whether you're using the app consistently and broadly how your grades are trending. They cannot read your conversations with Clio or see your individual homework submissions. Clio is your study tool. We designed parent visibility to keep your parents informed without giving them a window into everything you do.
We keep your information for as long as your account is open and you are using Clio. Your Google Classroom data is refreshed periodically from Google's servers to keep it current.
When you delete your Clio account, we delete all of your personal information immediately and permanently. This includes your profile, your Google Classroom data, your practice test history, your homework review sessions, your reminders, and your streak data. There is no waiting period and no recovery after deletion.
The only data we retain after deletion is anonymized and aggregated — it has been stripped of any information that could identify you, and it cannot be re-linked to your account.
If a paid subscription expires due to non-payment, your account enters a 30-day grace period. During this time your account is suspended but your data is kept, so you can resume your subscription without losing your history. If the subscription is not renewed within 30 days, your account and all associated data are permanently deleted.
Cancellations take effect at the end of your current billing period. You keep full access until then. Cancelling your subscription does not delete your account or your data — your account simply reverts to the free plan. To delete your data, you need to delete your account.
When you submit a homework photo or file for review, it is deleted from our systems as soon as the review session is complete. We do not store your homework submissions beyond that session.
When a school or district that has entered into a data privacy agreement with us requests the deletion or transfer of student data, we will comply within 60 days.
You have the following rights with respect to your personal information. To exercise any of them, you can use the settings in the Clio app, or contact us at privacy@heyclio.ai.
You have the right to know what personal information we hold about you. You can view your account information in the Clio app at any time. To request a complete copy of your data, contact us at privacy@heyclio.ai.
If your school or district has entered into a data privacy agreement with us, requests for access to education records may be directed through your school or district.
You can update your name, phone number, email, and other profile information directly in the app's settings at any time.
You can delete your account and all associated data at any time through the app. Deletion is immediate and permanent. If you are unable to access your account, contact us at privacy@heyclio.ai and we will process your deletion request within 30 days.
You can disable the Daily Digest and SMS alerts at any time in the app's settings. You can also reply STOP to any Clio text message to unsubscribe immediately.
You can disconnect your Google Classroom account from Clio at any time in the app's settings. Doing so will remove your GC data from Clio's systems. You can also revoke Clio's access directly through your Google account at myaccount.google.com/permissions.
You may have additional rights under state law. See "Your State Privacy Rights" below for details specific to your state.
We implement and maintain technical and organizational security measures aligned with the CIS Critical Security Controls framework, including:
We cooperate with audits and assessments by school partners as required by applicable data privacy agreements.
If we become aware of a security breach that affects your personal information, we will notify you as required by applicable law. Where a school or district has entered into a data privacy agreement with us, we will notify the school or district within 72 hours of confirming the breach. We maintain an incident response plan that governs how we detect, respond to, and report security incidents.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website and sending a notice through the app. The date at the top of this policy reflects when it was last updated. Your continued use of Clio after a policy update means you accept the updated policy. If you don't agree with changes, you can delete your account at any time.
Depending on where you live, you may have additional rights under state privacy law. This section describes those rights by state. If your state is not listed below, the rights described earlier in this policy still apply to you.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA), including the right to know what personal information is collected, used, and disclosed; the right to request deletion of your personal information; and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California rights, contact us at privacy@heyclio.ai.
If you are a Colorado resident, you have rights under the Colorado Privacy Act, including the right to access, correct, and delete your personal data, and the right to opt out of targeted advertising. We do not engage in targeted advertising. To exercise your Colorado rights, contact us at privacy@heyclio.ai.
If you have questions about this Privacy Policy, want to exercise your data rights, or want to report a concern about how we handle data, please contact us:
Email: privacy@heyclio.ai
We respond within 5 business days.