Privacy

Who I am

Oriri is a personal project by Patricia Esteban Cabrera, in Madrid (Spain). There’s no company behind it: there’s a person.

Write to hola@oriri.day about anything in this policy. I answer, not a form.

If this ever stops being a person and becomes a company, I’ll tell you before anything changes.

What I store

To have an account: your email, your password and your date of birth. The password is stored hashed with scrypt and its salt, so not even I can know what it is. The date is used to check you're old enough, and it's copied to your profile for your age and birthday reminder (you can change or remove it there). The one from sign-up stays with your account and is deleted with it.

What you write in the app: tasks, quests, skills, plans, notes, streaks, achievements and how you’ve been feeling, and the photos you upload as the cover of a quest or a task, as a step’s image or as a plan’s reference image. This is the app. Without it there’s nothing to show you.

So it works: your time zone and language, the time of the daily reminder and which devices to send it to, only if you turn it on.

So things can be fixed: which screens you open and what you do, the errors the app throws, and whatever you tell me through “Report a problem”, with any screenshots you attach.

If you join the waiting list and don’t have an account yet: only your email, the date, and where you came from. It’s for one thing: telling you when the next batch opens. It doesn’t go on any other list, and every email carries a link to remove yourself.

What I do NOT do

• ·I don’t store the IP addresses of people using the app.
• ·I don’t sell or hand your data to anyone.
• ·There’s no advertising, no ad profiling, no third-party cookies.
• ·I don’t train AI models on what you write, and I don’t let anyone else do it.
• ·I don’t read your content unless you ask me for help with something specific.
• ·I don’t ask for your real name, your phone number or your date of birth.

The one exception about IPs, worth saying out loud: when someone trips one of the traps for automated scanners, routes like /wp-admin, which no person ever asks for, that address goes on a blocklist for 30 days. That list is never crossed with any account and it’s the only thing in the whole app that holds IPs.

And there is one exception to “I don’t hand over your data”, which you decide yourself, milestone by milestone. If you build an area that isn’t in the catalogue and write a milestone for it, its card offers to hand that milestone over, so it can be suggested to whoever sets up that same area later. It starts off, and it never ticks itself.

If you tick it, the only thing that can end up copied into the catalogue is the milestone’s text: its name, its icon and how it’s earned. Never your name, your email, the date, whether you got it, or which account it came from. It isn’t published on its own either: I read it first. You can untick it whenever you like and the milestone stops being a candidate; anything already copied stays in the catalogue, because once copied it’s just another catalogue text and no longer points back to you.

What I use it for

The AI, and what happens to what you tell it

When you ask Oriri to write you a plan or a skill:

• ·What’s needed to write it travels to Anthropic, which returns the draft. Nothing else.
• ·Anthropic does not use it to train its models.
• ·The plan isn’t stored anywhere until you save it.
• ·Keeping a copy of those plans, so I can read them and improve the next ones, is optional: I ask you once when you start, with no answer picked in advance, and you can change it anytime in Settings → Beta.
• ·What you tell a task's logbook (how it went, what you did and what you did it with) is kept for you, like your notes: you see it in the task and in each phase's summary. It's only used to suggest things if you give permission, and the same goes for what you say about each tool (whether it helped, what you did with it) or whether a session was well explained. Permission is asked once and can be withdrawn in Settings → Personalisation; without it, none of that is used to suggest anything. What you write in «What did you do?» («My notes») goes nowhere: it's yours and nobody reads it.

If you never use the AI, nothing you write ever leaves the database.

With one small exception: if you paste a link into your notes, Oriri asks that website for its title so it can show it to you on a card. It asks from its server, not from your phone, so the website only gets the address you pasted, nothing of yours. YouTube videos work the same way with their thumbnail. And when a plan names an episode of a series, Oriri looks it up on YouTube or Apple Podcasts using the channel or podcast name, also from its server and with nothing of yours.

What you control

• ·The daily reminder: Settings → Reminders. Turning it off deletes nothing.
• ·The copy of AI plans: Settings → Beta.
• ·Permission to use what you rate when suggesting things: Settings → Personalisation. Withdrawing it doesn't delete what's saved; that's deleted right there, one by one.
• ·Handing a milestone of yours to the catalogue: the checkbox lives on that milestone’s card, in your trophy case. Off by default.
• ·Your content: edited and deleted from the app itself, piece by piece.
• ·Your whole account: Settings → Your account → Delete my account.

Cookies

There’s no cookie banner because there’s no need for one. No advertising cookies, no third-party cookies, no cross-site tracking. Only these:

Usage analytics use no cookies and no JavaScript in your browser: they’re recorded on the server.

Who the app leans on

All of them except Unsplash work on my behalf, and none of those receives your data to use on their own account. Unsplash is different, and it’s spelled out just below.

About covers, plan reference images and step images, so there are no surprises. A photo, GIF or image you add with a link is fetched by your browser straight from the website it comes from, like any image on the internet, and that website sees your IP address. A step’s video isn’t fetched until you tap it, and then it opens on its own site. If you don’t want that for a cover or a step, upload the photo from your camera roll or paste it: those stay in the app.

About Unsplash, which is where you can search for a photo for a quest or task cover, or for a plan’s reference image. The photos it shows you, and the one you pick, are fetched by your browser from Unsplash, because its terms ask for them to be linked rather than copied. So Unsplash sees your IP address when it shows them to you and every time you see that cover, like any website. What you type into its search box, on the other hand, is sent by the app from its server, without your IP and without saying who you are. When you open the tab, the first search runs on its own with the name of the quest, task or plan. And when you pick a photo, the app tells Unsplash so it can count the download for the person who took it, again without saying who you are. Unsplash doesn’t work on my behalf: what it sees, it handles under its own privacy policy. The recipe photos don’t go through this: even when they come from Unsplash, they’re stored in the app.

Outside the European Union: Vercel, Resend and Anthropic are in the United States. Those transfers rely on the mechanisms in Chapter V of the GDPR, the European Commission’s standard contractual clauses or Data Privacy Framework certification, depending on the provider, set out in the data processing agreement each of them publishes. Unsplash is in the United States too, but it doesn’t process anything on my behalf: it’s like any other website your browser fetches an image from.

How long it’s kept

• ·While you have the account, what you’ve written stays. It’s yours, and it’s what makes your history mean anything.
• ·Email confirmation and password recovery links expire in 24 hours and are swept automatically.
• ·What you report and its screenshots: 90 days after it’s resolved.
• ·An uploaded photo: while it’s the cover of a quest, a task or one of your recipes, or the image of one of a task’s steps (in the bin too, since it can be restored), or the reference image of a plan, a half-built plan or one of your recipes. Once it’s no longer the cover of anything it’s deleted, and one you uploaded but never used is deleted the next time you upload another, once it’s a day old.
• ·The error log: 90 days.
• ·The blocklist: 30 days from the last attempt.
• ·The waiting list: until you come in or until you remove yourself.

Deleting your account

Settings → Your account → Delete my account.

It’s immediate and permanent: it takes your characters, tasks, plans, streaks, achievements, history, cover photos and anything you reported along with its screenshots. There’s no bin, no grace period, and no need to ask me. The only thing that survives for a while are the database service’s own backups, 30 days at most.

Your rights

You can access your data, correct it, delete it, take it with you, object to its processing and restrict it.

Almost all of it happens in the app without asking permission. The one honest exception: automatic download of your data isn’t built yet. Write to me and I’ll send it in a readable file within a month at most. I’d rather say that than promise a button that doesn’t exist.

If you think I’m doing something wrong, you can complain to the Spanish Data Protection Agency (aepd.es). Before that, if you like, write to me: it’s usually faster.

Two delicate things, said plainly

The screenshots you attach come from your screen and you’re the one sending them: check what’s in them before you hit send. I look at them, they’re for fixing what you told me about, and they’re deleted along with the report.

The mood journal and the exercise plans say things about your health. I store them because they are the app, I don’t use them for anything else, and I don’t show them to anyone. You can use Oriri without ever writing them.

Minors

To use Oriri you have to be at least 14, and whatever age the law of your country requires if it’s higher. In Spain, 14 is the age at which you can consent to your data being processed on your own; in other European Union countries it goes up to 16. When you sign up I ask for your date of birth, and below 14 it won’t let you continue.

If I find out an account belongs to someone below that age, I delete it.

Changes

Oriri is in beta and this policy will change with it. When something changes that actually affects you, I’ll tell you inside the app, in What’s new, and not in a footnote. The date of the last revision is always at the top.

Write to me

hola@oriri.day. I answer.