Privacy policy

Information you provide

• Account information: your email address, name, sign-in credentials or provider identifiers, and the settings you choose. Sign in with Apple may supply a private relay email instead of your personal email.
• Age information: your date of birth, your acknowledgement of AI processing, and the outcome of age checks. Where available, the mobile app reads an age band from your app store to check eligibility; we keep the eligibility outcome rather than that band.
• Character content: your character’s appearance and personality, onboarding answers, messages, rituals, photos you choose to share, memories, and the replies, images, video, and voice clips the service generates.
• Calls: your voice while a call is live, which is transcribed and not stored, and the call’s transcript, which is saved to your conversation.
• Support information: what you send when you contact us, report content, or appeal an account restriction.

Sensitive information

Conversations and memories can include sensitive information you choose to share, such as your health, sexuality, or beliefs, and what your character infers from it. We use it only to run your conversation and keep Ori safe, never for ads, and you can delete it with the memory controls or by deleting your account.

Information from devices and other services

• Purchase information: product, billing period, subscription status, and store or Stripe identifiers needed to verify purchases and provide your plan. Payment providers handle payment details; we do not receive your full card number.
• Technical information: IP address, browser or operating-system information, app version, request and error logs, and security or app-integrity signals.
• Usage information: screens and actions, event times, and device type. On the website, analytics store nothing on your device: PostHog counts visits with an identifier it derives from your IP address and browser, which changes every day and does not keep either. The app keeps a random analytics identifier on your device. After sign-in, product events are associated with your Ori account ID.
• How you found Ori: the referring site, campaign tags, and ad click identifier of the link you followed, the page you first landed on, or the app store campaign that led to an install. We record it once, on the account you create.
• Error and crash reports: the error, the screen or page it happened on, and your app version and device model.
• Notification tokens: the address your device or browser gives us for delivering notifications.
• Preferences: your timezone, quiet hours, notification choices, and other settings used to personalize the service. Ori does not need precise device location to know your timezone.

How we use information

• Create and secure accounts, authenticate sign-in, check age eligibility, and prevent abuse, including stopping a closed account from being recreated.
• Generate character replies and media, decide what your character remembers and find relevant memories, and provide the personality and experience you choose.
• Verify purchases, enforce plan allowances, restore subscriptions, and provide billing support.
• Deliver sign-in and service emails, and messages and notifications from your character.
• Understand product usage, diagnose problems, improve reliability, and respond to support requests.
• Check content for safety, investigate reports, manage appeals, and meet legal obligations.

AI processing

Ori works by sending the content a feature needs to the AI providers listed below. That can include your message, your voice during a call, relevant earlier messages and memories, character details, photos you share, or the text to be spoken. A provider may therefore receive personal information you include in your conversation. Avoid sharing passwords, financial credentials, or information you do not want processed this way.

The age gate tells you about this processing before you start. It is how the service you ask for works, so it is part of our agreement with you. If you do not want your content processed this way, stop using Ori and delete your account; you can also edit or delete individual memories at any time.

We do not use your conversations, memories, or characters to train AI models. We use service providers to process information for the service, subject to their contractual data-protection obligations; using an AI feature does not make your private conversation public.

Service providers

We share the information needed to operate each feature with the following providers. We require providers acting on our behalf to protect it and limit their use to the services they provide to us. Features that are not enabled do not send information to their optional provider.

• Cloudflare: hosting, networking, security, media storage and delivery, and transactional email.
• PlanetScale: the database that stores account, character, conversation, memory, and purchase records.
• DeepInfra: generating character replies and memory summaries from conversation and character context.
• OpenAI: safety and age checks on messages and images, including photos you share; deciding what your character remembers and organizing memories; and finding relevant memories. Inputs can include text, relevant memories, or images.
• Fal: image and video generation and media processing. Inputs can include prompts, reference images, and text or audio needed for the requested media.
• Inworld: voice calls, voice replies, voice notes, and designed voices. Inputs include your voice during a call, the conversation the call needs, the text a voice speaks, and voice descriptions you write.
• Expo, Apple, Google, and your browser: delivering notifications, which can show a short preview of a message.
• PostHog: product analytics, how you found Ori, and error and crash reports. Our analytics events do not include conversation text, memory content, or uploaded photos.
• Apple and Google: the sign-in, age-check, app-integrity, and store-purchase features each platform provides. Their own privacy policies also govern their account and payment services.
• Stripe: selling web purchases as our reseller and merchant of record, and processing payments and subscriptions.
• Loops: account and subscription lifecycle emails where enabled, using account contact details and event information rather than private conversation content.

Safety checks

Automated systems examine messages and media for safety and content-rule violations. We also check conversations for signs that a user is under 18, which can pause replies until an age check. Authorized people may review reported or flagged material to investigate a report, enforce our rules, or handle an appeal. Safety systems can make mistakes; contact support to challenge a restriction or a pause.

Legal requests and other disclosures

We disclose information to law enforcement or in legal proceedings only when valid legal process requires it, and only what that process reaches: account details for a subpoena, records of account activity for a court order, and the content of conversations and media only with a search warrant or its equivalent. Requests from outside the United States must come through the applicable international legal process.

We tell you about a request before disclosing unless the law or a court order forbids it or the request is an emergency. In an emergency involving a risk of death or serious injury, we may disclose the minimum information needed to prevent it.

We report apparent child sexual abuse material to the National Center for Missing & Exploited Children, as US law requires. We may also disclose information when reasonably necessary to address fraud or security incidents or to protect people and their rights. If our business is reorganized or transferred, information may be transferred with it under appropriate confidentiality protections, with notice where required.

We do not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising trackers in Ori.

Cookies, local storage, and permissions

Ori uses cookies and device storage for sign-in and preferences. The website uses no cookies or device storage for analytics; the app stores the analytics identifier described above. Blocking storage can prevent sign-in or other features from working. Account IDs and the app's analytics identifier can link product events to the same user; the analytics are not anonymous.

The app requests device access only for features that need it: the microphone for calls, the camera and photo library for photos you share, and notifications. Notifications can show a short preview of a message on your lock screen. You can change those permissions in your device settings. Turning off notifications does not delete your account or cancel a subscription.

Retention and deletion

We keep your account, characters, conversations, and memories until you delete them or your account. You can edit or delete individual memories and export your character data from the app. Guest sessions that never sign up are deleted after 30 days without use. Records of each AI request, including its inputs and outputs, are deleted after 30 days.

Deleting your account deletes its characters, conversations, memories, and stored media, including photos, voice clips, and videos, right away. Copies in our database backups are removed as those backups expire. Only the following records are kept afterwards, each for the period stated, and none holds your conversation history:

• Safety evidence: when content was flagged as breaking our rules and no review cleared it, the flagged message or image and a few messages around it, kept for 90 days to handle appeals and claims. Sexual content involving a minor is kept for one year, as US law requires.
• Account block: if an account was suspended or did not pass an age check, a keyed hash of its email address (never the address itself) and the reason, kept for two years so the account cannot be recreated.
• Legal holds: information covered by a preservation request or legal proceedings, kept until the request expires or the matter ends. A preservation request lasts 90 days unless it is renewed.
• Purchases: payment records, without your conversations, kept as tax and accounting law requires.
• Analytics and error reports: product events and crash reports, which contain no conversation content, are not removed automatically; email us to have them deleted.

Processing grounds and international transfers

Where a legal basis is required, we process information to perform our agreement with you, including the AI processing that provides the service; to comply with legal obligations, including retaining and disclosing information as described above; and to pursue legitimate interests such as keeping the service secure, preventing banned accounts from returning, understanding product usage, and responding to support requests. Where processing depends on consent, you may withdraw it.

We and our providers may process information in the United States and other countries, whose privacy laws may differ from those where you live. Where required, transfers must use applicable contractual or other lawful safeguards. Contact us for information about the safeguards applicable to your information.

Your privacy rights

Depending on where you live, you may have rights to access, correct, export, or delete personal information, restrict or object to processing, or withdraw consent. Use the account and memory controls in Ori or email support@ori.chat. We may need to verify your identity before acting on a request.

You may complain to your local data-protection authority and, where applicable, appeal our response to a privacy request by contacting us. We will not discriminate against you for exercising privacy rights. Some requests may be limited by legal obligations or the rights of other people.

Adults only

Ori is intended only for adults aged 18 or older. If you believe a minor has provided information or created an account, contact support@ori.chat so we can investigate and take appropriate action.

Policy changes and contact

We may update this policy as the service changes. The effective date appears above. We will provide notice of material changes and obtain consent where required.

Prologue Machines, LLC, Delaware, United States. Privacy questions and requests: support@ori.chat.