Privacy Policy
Last updated: May 14, 2026
This Privacy Policy explains what information we collect when you use the Ora app, how we use it, and your rights regarding that information.
What We Collect and Why
1. Device Push Token
When you enable daily reading reminders, we generate and store an anonymous push token (provided by Expo) to deliver notifications to your device. This token identifies your device — not you personally. It is stored in our database and used only to send you the reminders you requested.
You can disable notifications at any time in your device settings or in the app's Settings tab. If you disable notifications, the push token is no longer used to contact you.
2. User Preferences
The following preferences are stored locally on your device and synced to our servers so your experience remains consistent:
- Language selection (English, Spanish, Portuguese, or Polish)
- Daily reminder time
- Dark mode preference
- Audio playback speed
These are functional settings. We do not use them for advertising or profiling.
3. Timezone
We collect your device's timezone so we can deliver your daily reading reminder at the time you selected. Timezone is not precise location data — it does not identify a city or your physical location.
4. Reading Activity and Progress
We store your streak count, earned badges, and last completed date locally on your device. Your last completed date is also synced to our servers to avoid sending you a reminder on days you have already completed your reading.
5. Anonymous Analytics Events
We collect anonymous usage events to understand how the app is being used and to improve it. These events include actions such as:
- Opening the app
- Starting the audio player
- Completing a reading section
- Completing a daily reading
- Earning a badge
- Completing onboarding
- Tapping a notification
Each event is associated with your device push token — not your name, email, or any account. No event contains the content of what you read or any identifying personal information.
What We Do Not Collect
- No email address, password, or user account is required or created
- No precise location data is collected (only timezone)
- No access to your contacts, photos, or camera
- No advertising SDKs or third-party tracking libraries
- No cookies (Ora is a native mobile app)
- No data is sold to third parties
- No data is used for targeted advertising
Third-Party Services
Ora uses the following third-party services to operate. Each service processes data only as described below.
Supabase
Our database and backend infrastructure is hosted on Supabase (Supabase Inc.). Your push token, device preferences, timezone, last completed date, and anonymous analytics events are stored on Supabase servers. Supabase processes this data on our behalf and is contractually prohibited from using it for any other purpose. Learn more at supabase.com/privacy.
Expo
Ora uses Expo's push notification service to deliver daily reminders. Your device push token is routed through Expo's infrastructure when a notification is sent. Expo does not receive any other information about you. Learn more at expo.dev/privacy.
Children's Privacy
Ora does not require an account, does not collect names, emails, or contact information, and does not engage in behavioral advertising. The app is designed for use by people of all ages, including families. We do not knowingly collect any personal information from children under the age of 13 beyond what is described in this policy (device token and anonymous analytics). Parents or guardians who have concerns may contact us at hello@oradeus.com and we will delete all associated data upon request.
Your Rights and Choices
Notifications
You can disable push notifications at any time in your device's system settings (Settings > Notifications > Ora) or within the app under Settings > Reminders. Disabling notifications stops us from contacting you, but does not delete your push token from our servers. To have your push token deleted, see the deletion request process below.
Data Deletion
To request deletion of all data associated with your device from our servers (push token, preferences, timezone, last completed date, and analytics events), email us at hello@oradeus.com with the subject line "Data Deletion Request." We will process your request within 30 days and confirm when it is complete.
Access
You may request a copy of the data we hold associated with your device by emailing hello@oradeus.com. We will respond within 30 days.
Residents of California (CCPA/CPRA)
California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. Ora does not sell personal information. To exercise your rights, contact hello@oradeus.com.
Residents of the European Economic Area and United Kingdom (GDPR/UK GDPR)
If you are located in the EEA or UK, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. Our legal basis for processing your data is our legitimate interest in operating and improving the app. To exercise your rights, contact hello@oradeus.com. You also have the right to lodge a complaint with your local supervisory authority.
Data Security
We take reasonable technical and organizational measures to protect your data. Our database is hosted on a SOC 2 certified provider, access is restricted to authorized personnel, and data in transit is encrypted using TLS.
Changes to This Policy
If we make material changes to this Privacy Policy, we will update the effective date at the top and, where required by law, notify you through the app or via push notification. Continued use of Ora after a policy update constitutes acceptance of the revised policy.
Contact
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact: hello@oradeus.com