Effective date: [DATE] — Last updated: [DATE]
The short version: Your conversations, goals, and personal data are stored in your private iCloud account. We cannot read them. Conversation content is sent to our AI provider only during active chats, and is not stored by them. We collect anonymous analytics to improve the app. We will never sell your data.
Ora is developed and operated by [YOUR COMPANY NAME] ("[we]", "[us]", "[our]"). Ora is a personal coaching app that helps you set intentions and follow through across three areas of your life: Mind (work and focus), Body (health and fitness), and Soul (relationships and personal growth).
If you have any questions about this policy, you can reach us at privacy@ora-app.com.
We collect only what is necessary to provide the service. Here is everything, with nothing left out:
| Data | Purpose | Where it's stored |
|---|---|---|
| Email address | Account creation and login (OTP verification) | Apple iCloud (CloudKit private database) |
| Phone number (optional) | Account recovery backup, if you choose to add one | Apple iCloud (CloudKit private database) |
| First name | Personalisation (Ora addresses you by name) | Apple iCloud (CloudKit private database) |
| Conversations | Your chat messages with Ora across all three pillars | Apple iCloud (CloudKit private database) |
| Intentions and goals | Things you commit to doing, and whether you completed them | Apple iCloud (CloudKit private database) |
| Check-in preferences | Your preferred check-in times for each pillar | Apple iCloud (CloudKit private database) |
| Anonymous usage analytics | Understanding how the app is used (which features, where people get stuck) | TelemetryDeck (EU-hosted, no personal identifiers) |
| Subscription status | Managing your subscription through Apple's App Store | Apple (managed entirely by Apple's StoreKit) |
The majority of your data — your profile, conversations, intentions, and goals — is stored in Apple's CloudKit private database. This is your personal iCloud storage. The data is encrypted in transit and at rest by Apple. We do not have access to read your conversations, goals, or personal information stored in CloudKit. This data syncs across your Apple devices using your iCloud account and is subject to Apple's Privacy Policy.
Some data is processed and stored locally on your iPhone, including your notification preferences, biometric authentication settings, and cached conversation data. If you enable Apple's Foundation Models features, on-device AI processing happens entirely on your phone and no data is sent to any server.
Your data is sent to external services in only two situations:
When you send a message in a conversation, the content of that conversation (your messages and Ora's responses) is sent to our server, which forwards it to Anthropic's Claude AI to generate Ora's reply. This is the core of how the app works — Ora's coaching responses are generated by an AI language model.
What is sent: The current conversation (typically the last 20 messages in that pillar), your first name, and your stated goals. This is the minimum context needed for Ora to respond helpfully.
What happens to this data at Anthropic:
When data is NOT sent: Browsing the home screen, viewing your progress, changing settings, receiving notifications, and all on-device AI features (notification text generation) happen without any data leaving your device.
When you sign up or log in with email, we send a one-time verification code to your email address through Amazon Simple Email Service (SES). Your email address is shared with this service solely for the purpose of delivering the code. If you add a phone number, a verification SMS may be sent through Amazon Simple Notification Service (SNS). These services process your contact information only to deliver the message and are subject to Amazon Web Services' data processing terms.
We use TelemetryDeck for anonymous usage analytics. TelemetryDeck is a privacy-first analytics service hosted in the European Union.
What TelemetryDeck collects:
What TelemetryDeck does NOT collect:
TelemetryDeck generates a hashed, anonymous identifier that cannot be reversed to identify you. Because no personally identifiable information is collected, this analytics does not require tracking consent under GDPR or Apple's App Tracking Transparency framework. You will never see a tracking permission popup from Ora.
Ora is a paid subscription app. All payments are handled entirely by Apple through the App Store. We do not collect, process, or store any payment information including credit card numbers, billing addresses, or Apple ID credentials. Your subscription status is managed by Apple's StoreKit framework. For details on how Apple handles payment data, see Apple's Privacy Policy.
Your conversations, intentions, and profile data remain in your iCloud account for as long as you use Ora. If you delete the app, your iCloud data remains in your Apple account (as with any iCloud-synced app). You can delete your data at any time:
Anonymous analytics data in TelemetryDeck cannot be linked back to you and is retained in aggregate form.
Ora uses the following third-party services. Each has its own privacy policy:
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Anthropic (Claude) | AI conversation generation | Conversation content during active chats | Link |
| Apple (iCloud / CloudKit) | Data storage and sync | All user data (encrypted, in your private account) | Link |
| Apple (StoreKit) | Subscription payments | None from us — Apple manages this directly | Link |
| TelemetryDeck | Anonymous analytics | Anonymous event signals only, no PII | Link |
| Cloudflare | Server hosting (API proxy) | Conversation requests pass through (not stored) | Link |
| Amazon SES | Email delivery (OTP codes) | Email address (for delivery only) | Link |
| Amazon SNS | SMS delivery (OTP codes, if phone added) | Phone number (for delivery only) | Link |
We do not sell, rent, or share your personal data with any other third parties. We do not work with data brokers. We do not serve advertisements.
We take the following measures to protect your data:
No system is perfectly secure. If we discover a data breach that affects your personal information, we will notify affected users as soon as reasonably possible and take steps to mitigate the impact.
Regardless of where you live, you have the following rights:
Under the General Data Protection Regulation (GDPR), our legal basis for processing your personal data is:
We do not rely on consent as a legal basis for core processing, because the data processing is necessary to deliver the service. You can withdraw from the service at any time by cancelling your subscription and deleting your account.
Our analytics provider (TelemetryDeck) is hosted in the European Union. Conversation data processed by Anthropic may be processed in the United States, under Anthropic's data processing terms.
Under the California Consumer Privacy Act (CCPA), you have the right to know what data we collect, request its deletion, and opt out of any sale. We do not sell personal information. The categories of data we collect are detailed in Section 2 above.
Ora is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@ora-app.com and we will delete that data.
Ora is an AI-powered personal coaching tool. It is not a medical device, therapy service, or healthcare provider. Ora does not diagnose conditions, prescribe treatments, or provide medical, psychological, or financial advice. If you are experiencing a mental health crisis, please contact a qualified professional or your local emergency services.
We may update this privacy policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
We will not reduce your rights under this policy without your explicit consent.
If you have questions, concerns, or requests regarding your privacy or this policy:
We aim to respond to all privacy-related enquiries within 14 days.