Privacy Policy
1. Data We Collect
| Data type | What | Purpose | Linked to user |
|---|---|---|---|
| Account identifier | Email address | Authentication via Supabase magic link | Yes |
| Reading events | Episode start, episode complete, reading time per session | Product analytics, A/B test evaluation | Yes (by user ID) |
| Cohort assignment | A/B variant label assigned at onboarding | Experiment tracking | Yes |
| Device info | OS version, device model | Crash diagnostics | No (aggregated) |
We do not collect:
- Financial information — in-app purchases are processed entirely by Apple (StoreKit) or Google Play. We receive only a purchase confirmation token, not card or payment details.
- Location data
- Contacts or photos
- Content of messages
2. Data Processor
Account and event data is stored in Supabase (supabase.com), a third-party backend platform. Supabase acts as a data processor under our instructions. Data is stored in the AWS region selected at project creation (us-east-1 by default).
We do not sell or share your data with any other third party.
3. Data Retention
| Data | Retention period |
|---|---|
| Reading events | 90 days from event timestamp, then deleted |
| Cohort assignment | Until account deletion |
| Email / account | Until you request account deletion |
| Device diagnostics | 30 days |
4. Your Rights
If you are located in the European Economic Area, United Kingdom, or California, you have the following rights:
- Access: request a copy of the data we hold about you
- Deletion: request deletion of your account and associated data
- Portability: request your data in a machine-readable format
- Correction: request correction of inaccurate data
To exercise any right, email: [email protected]. We will respond within 30 days.
5. Children
ORA is rated 17+. We do not knowingly collect data from users under 17. If we learn that a user under 17 has created an account, we will delete that account and its data.
6. Changes to This Policy
We will post any changes to this page and update the effective date. Continued use of the app after changes constitutes acceptance.
7. Contact
oraxlabs LLC
[email protected]
https://oraxlabs.io/privacy/