Orlio Privacy Policy

Effective and last updated: August 19, 2026

Orlio is a general-wellness and self-reflection app for adults. This policy explains what information Orlio processes, why it is processed, where it is kept, and the choices available to you.

1. On-device-first design

Your durable personal record is stored on your Apple device. This includes journals, saved conversation history and transcripts, summaries, insights, moods, goals, action items, memories, preferences, and relationship context. If you enable iCloud backup, a copy is stored in your personal iCloud Drive under your Apple account.

Some features you request require secure cloud processing. For those features, Orlio sends the audio, text, and limited context needed to service that request. Cloud processing is not the durable source of your personal record.

2. Information processed

Account information

When you use Sign in with Apple, Orlio receives and stores an Apple-provided user identifier. Orlio also receives your name and email address only when Apple provides them and you choose to share them. Apple may provide a private relay address instead of your personal email address. Account information is linked to your Orlio account and used for authentication, security, support, and account lifecycle operations.

Content you create

Your local record may contain free-form journal text, voice notes, photos you select, live or typed conversations, summaries, insights, goals, preferences, and information about people you add. When you request a cloud feature, Orlio may process the specific audio, transcript, message, or context needed to respond.

Personalized Support lets you choose whether people context and journal context may be used to personalize a request. A selected choice does not send content by itself: sending is off by default and requires your approval at the time of the request. You can turn either choice off, and the change applies to the next request. Locked journal entries are excluded.

Apple Health

With your permission, Orlio may read mindful sessions, sleep analysis, State of Mind, heart rate, heart-rate variability, and step count. Orlio may write mindful sessions and State of Mind entries that you choose to record. HealthKit permissions are controlled by Apple and can be changed in iOS Settings or the Health app.

Health information is used on device unless you separately approve a feature-specific prompt to include a limited health signal in a cloud request. Orlio does not use Health information for advertising, marketing, or sale.

Operational and security information

Orlio's service may process account and session identifiers, timestamps, country or time-zone values supplied for safety localization, usage totals, service-cost estimates, network and access-log information, and error details that are designed to exclude conversation content. This information supports authentication, abuse prevention, service reliability, billing reconciliation, and security.

Apple permissions and capabilities

• Microphone: live voice sessions and voice notes.
• Speech recognition: captions or fallback transcription when that feature is active.
• Photos: journal attachments you select.
• Calendar: events and reminders you choose to read or create.
• Notifications: reminders and check-ins you enable.
• Face ID or Touch ID: optional local privacy lock.
• HealthKit: the Health data described above.
• iCloud Drive: optional backup under your Apple account.

You can revoke system permissions in iOS Settings. Revocation may disable the related feature but does not delete information already saved locally.

3. How information is used

Orlio uses information to authenticate your account, provide requested voice and text features, personalize an approved request, create and return requested summaries or insights, operate export and deletion tools, prevent abuse, maintain service reliability, provide support, and meet legal obligations.

Orlio does not sell personal information, serve third-party advertising, or track you across other companies' apps or websites.

4. Processors and disclosures

Orlio uses a limited number of service providers only to operate requested features and supporting infrastructure. They fall into these categories:

• AI and voice processing providers: may process the audio, text, responses, and bounded context needed to service a voice, chat, summary, or insight request you make.
• Cloud infrastructure and security providers: host Orlio's account, authentication, security, and service infrastructure.
• Apple: provides Sign in with Apple, HealthKit, iCloud Drive, StoreKit, notifications, and other platform services under Apple's terms.

Providers act on Orlio's instructions under contract and are not permitted to use your content for their own purposes such as advertising. The specific providers can vary by feature, region, and release, and Orlio may change them. A current list of provider categories and the identity of a provider relevant to your own data is available on request at support@orlio.ai. Provider retention is governed by the applicable configuration and agreement, and Orlio does not promise zero retention.

Orlio may disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

5. Storage, security, and international processing

Local data is protected by Apple's platform security and any privacy controls you enable. Credentials are held in secure system storage. Data in transit is encrypted. Server-side account and permitted operational data are protected by access controls and encrypted infrastructure.

Orlio also offers an optional setting that applies additional encryption to Journal body text and Journal voice-note audio using a key held on your device. It applies to entries saved after the setting is turned on, so turning it on or off does not change entries already saved. Some fields such as titles, moods, tags, photos, and dates are not covered by this setting. Locking an entry with Face ID or Touch ID is a separate display control.

Cloud providers may process information in countries other than your own. When required, Orlio relies on appropriate contractual or legal transfer mechanisms. No method of storage or transmission is completely secure.

6. Retention

• Local content remains until you delete it, delete your account in the app, or remove it through applicable Apple storage controls.
• Your server account remains until account deletion is completed.
• Operational, security, billing, and access-log information is kept only as long as reasonably necessary for the purposes described above and applicable legal obligations.
• Apple retains App Store transaction records under Apple's terms.
• Processor retention follows the active production configuration and applicable agreements; it is not represented as zero retention unless proven.
• Backups and security logs may persist for a limited period before normal rotation, or longer when legally required.

7. Export, deletion, and other choices

• Export: In Settings, choose Export My Data to receive a portable copy of your Orlio record in JSON or CSV form. Locked Journal entries are excluded, and some attachments such as Journal photos are not included. A copy you save or send is then controlled by you and the destination you choose.
• Delete in the app: Settings, then Account, then Delete Account. Orlio requests deletion of your server-held account data and then removes the Orlio data held on your device and in Orlio's iCloud backup artifacts. If a step does not complete, Orlio tells you and lets you retry instead of reporting success.
• Delete without the app: Follow orlio.ai/account-deletion. A verified external request can delete server-held account data, but cannot remotely erase data on your device or in your personal iCloud Drive.
• Sign in with Apple: Orlio attempts revocation when the required Apple credential is available. Revocation is best effort and is not presented as a guaranteed result of every deletion request. You can also manage Orlio under your Apple ID settings.
• Permissions and Personalized Support: Revoke system permissions in iOS Settings and change Personalized Support choices in Orlio Settings.

Deleting an Orlio account does not cancel an App Store subscription. Manage subscriptions in your Apple ID subscription settings.

Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to processing, or to receive a portable copy. Orlio may need to verify your identity before acting on a request.

8. Adults only and safety

Orlio is for people aged 18 or older. If you are under 18, do not use Orlio. Orlio is not a medical device, healthcare provider, therapy service, emergency service, or substitute for licensed professional care. If you or someone else may be in immediate danger, contact local emergency services. Crisis resources shown in the app are informational and should be verified for your location.

9. Changes and contact

Orlio may update this policy as the service or law changes. Material changes will be reflected by a new effective date and, where appropriate, an in-app or release notice.

Questions and privacy requests: support@orlio.ai

Public privacy URL: https://orlio.ai/privacy