Privacy policy
Last updated 31 October 2026
Clasp is made by Atheriods Ltd ("we"), a company registered in England and Wales, which is responsible for your data under UK data protection law. Contact: [email protected].
Clasp is built to know as little about you as possible. There are no accounts, phone numbers, email addresses, contact uploads, adverts or analytics.
What stays on your phone
Your name, your keys, your contacts, your messages, photos, videos, voice notes, documents, notes, profile photo and settings are stored only on your phone, encrypted. We can't see them and can't restore them if you lose your phone.
What passes through our server
- Messages are end-to-end encrypted on your phone before they leave it. Our relay holds each sealed message in a mailbox only until the other phone collects it, then deletes it (anything never collected is deleted after 30 days). Mailbox names are random codes that only the two people in a chat can work out. We can't read messages or see who is talking to whom by name.
- Photos, videos, voice notes and documents are encrypted on your phone and stored as locked pieces until downloaded, then deleted (30 days at most). The key travels only inside the encrypted message.
- Calls are encrypted between the two phones. To connect, the phones may use Cloudflare's network relay, which passes encrypted call data along without being able to listen.
- Groups don't exist on the server: each message goes to each member separately, encrypted.
- Profile photos go only to people you've added, end-to-end encrypted.
- Location you share goes only to the contacts you choose, end-to-end encrypted.
Like any internet service, our hosting provider (Cloudflare) handles your device's network address to deliver data. We don't keep logs of addresses or activity.
Time capsules
A time capsule's message is locked on your phone and sent to your friend straight away. Only its key is kept on our server, which hands it out on the opening date. The server never has the message, and your friend can't open it early.
Articles (public)
Articles are the one public part of Clasp. What you publish there (pen name, title, text, cover photo, comments and poll votes) is stored on our server and can be read by anyone using Clasp, and by anyone you send an article's web link to. Your pen name isn't linked to your Clasp identity or your contacts. To limit abuse, we keep a scrambled (one-way) form of the network address that posted, voted or reported, not the address itself. Reported articles and comments may be hidden and reviewed by the Clasp team. You can delete your own articles and comments at any time.
Recordings and notes
Recordings, transcripts and notes are made and kept on your phone, encrypted, using Apple's on-device speech recognition and Apple Intelligence. Transcribing a voice message also happens on your phone.
Enhanced notes are optional and used only when you tap them. Then the transcript (not the recording) is sent through our server to Anthropic's Claude API to write the notes or answer your question. We don't keep the transcript; we keep only a count of uses per day to limit costs. Anthropic processes it under its commercial terms and doesn't use it to train its models.
Maps
Map search, routes and navigation use Apple's MapKit. These requests go to Apple, as in Apple Maps, and are covered by Apple's privacy policy.
Clasp Demo
If you add the optional "Clasp Demo" contact, messages you send it are decrypted by our server so it can reply. They're used only to reply and aren't kept afterwards. Don't send it anything private.
Children
Clasp isn't directed at children under 13.
Your rights
Because nearly everything stays on your phone, deleting the app deletes your data. For any privacy question or request under UK or EU data protection law, email [email protected].
Changes
If this policy changes, we'll update this page and the date above.