Plain-language privacy
Privacy Policy
Last updated 22 August 2026
Orlo is a voice journaling app. You speak, and Orlo turns what you said into written entries you can keep. This policy explains what we collect, where it goes, and how to get rid of it. Questions can be sent to support@heyorlo.com.
Who we are
Orlo is operated by the developer of the Orlo iOS app. Contact: support@heyorlo.com.
What we collect
Your recordings
When you record an entry, the audio is uploaded to private storage so it can be transcribed and so Orlo can retry if processing fails. Stored audio is automatically deleted after 48 hours. Your written entry remains available after the audio is deleted.
What we make from your recordings
The transcript, rewritten entry, extracted highlights, lessons, and the people, places, themes, and other connections Orlo detects.
Your account and app state
Your display name, email address from Sign in with Apple or Google, reminder time, notification token if enabled, chosen Journeys, progress, and subscription status. Apple handles payment-card details; they never reach Orlo.
We do not collect advertising identifiers or location data. Orlo contains no third-party advertising or tracking SDKs.
Where your information goes
| Provider | What they receive | Why |
|---|---|---|
| Supabase | Audio, transcripts, entries, account records | Storage, database, and sign-in |
| OpenAI | Audio and selected text | Speech-to-text and supporting analysis |
| Anthropic | Transcript text | Faithful writing and verification |
| RevenueCat | Subscription status and app user ID | Managing subscriptions |
| Apple / Google | Sign-in identity | Authentication |
| Railway | Requests sent to Orlo's server | Backend hosting and processing |
These providers process content to deliver the service under their own terms. We do not sell your data or share it for advertising. We use business API services whose terms do not permit training general models on Orlo's API content.
How long we keep it
Stored audio is automatically deleted after 48 hours. This window lets Orlo retry a failed transcription without asking you to record the story again.
Your transcript, polished entry, extracted content, tags, and Journey progress are kept until you delete the entry or delete your account.
Deleting your data
Delete a single entry from its entry menu. To delete everything, open Settings, choose Account, then Delete account. This permanently removes your profile, entries, transcripts, extracted content, stored audio, and sign-in record. There is no recovery window.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete personal data and to object to processing. Deletion is available in the app. For anything else, email support@heyorlo.com; we respond within 30 days. In the UK or EU, our principal lawful basis is performance of our contract with you, with consent for optional notifications.
Children
Orlo is not directed at children under 13, and we do not knowingly collect their data. If you believe a child provided information, email us and we will delete it.
Security
Audio is stored in a private bucket that is not publicly readable. Access to your data requires an authenticated session. No system is perfectly secure, but Orlo does not make your recordings public or accessible through public file URLs.
Changes
If this policy changes materially, we will update the date above and, when appropriate, notify you in the app.