The short version. Ori is built local-first: your journal lives on your device. To generate readings and insights, some of your content is sent to trusted AI providers that process it on our behalf. We don't sell your data, and we don't use it for advertising.
What Ori collects
Ori only handles what you put into it or choose to connect:
What you write and say — journal entries, and voice recordings that are transcribed to text.
Daily check-ins — your responses to a short daily wellbeing check-in.
Connected data you choose to link — health and activity data from Oura, Apple Health (on iPhone) or Health Connect (on Android) — such as sleep, heart rate, heart-rate variability, respiratory rate, blood-oxygen, temperature, steps and workouts — and calendar event metadata, only if you connect those services.
Basic technical information needed to run and maintain the app.
You don't need to create an account or give us your name to use Ori's core journal.
Where your data is stored
Your journal entries and related data are stored primarily on your device. Ori does not maintain a central copy of your journal.
Health data — Apple Health, Health Connect, and Oura
If you choose to connect a health source, here is exactly what happens:
What Ori reads. With your permission, Ori reads sleep (including stages), heart rate, resting heart rate, heart-rate variability, respiratory rate, blood-oxygen, body temperature, steps, distance, floors, calories, exercise sessions, mindfulness minutes, and blood-pressure readings you've logged. On Android, Health Connect may also ask you separately to allow access to your past data so Ori can build your personal baseline from your existing history.
Where it lives. Your health history is stored on your device. Ori's server does not keep a copy of it.
What leaves your device. When Ori writes your daily letter (and only if you've chosen the mode that uses your health data), a summary of your recent days — which can include actual readings such as your heart-rate variability, resting heart rate, respiratory rate, sleep duration and temperature trend — is sent with your journal content to our server and on to Anthropic to compose that letter. It is used to write your letter, not to build profiles, advertise, or train models on your data.
Retention. Ori's server does not store your health readings. Anthropic may retain API inputs for a limited period for safety and abuse monitoring under its own policies.
Your control. You can disconnect a health source at any time in Ori's Sources screen, revoke permissions in Apple Health or the Health Connect app, and delete Ori's data from within the app. Reflect mode uses no health data at all.
Health data is never sold, never used for advertising, and never shared with anyone except the service providers below, strictly to provide the feature you're using.
Service providers we use
To power specific features, certain content is sent to the following providers, which process it on our behalf to deliver the service:
Anthropic — generates the narrative "Letter" and other insights from your text and, if you've connected a health source in full mode, the daily health summary described above.
Deepgram — converts your voice recordings to text (primary).
AssemblyAI — automatic voice-transcription failover when Deepgram is unavailable.
OpenAI, ElevenLabs, and Google Speech-to-Text — batch transcription fallbacks if live transcription fails, plus OpenAI for text embeddings and fallback AI processing.
Oura — accessed only to read the biometric data you authorize.
These providers are bound by their own terms and privacy practices. We share only what's needed to provide the feature you're using.
What we don't do
We don't sell your personal data. We don't use your journal content for advertising. We don't share it with third parties except the service providers above, or where required by law.
Your choices and deletion
You can clear Ori's data from within the app's settings, or by deleting the app from your device. You can disconnect Oura at any time to stop biometric access. For any privacy or deletion request, email us and we'll help.
Sensitive content & a note on wellbeing
Journaling can involve sensitive, personal reflection, and we treat that content with care. Ori is a tool for self-reflection — it is not a medical device and does not provide diagnosis, treatment, or clinical advice. If you are in crisis or need urgent help, please contact your local emergency services or a crisis line.
Children
Ori is not directed to children under 13, and we do not knowingly collect data from them.
Changes to this policy
As Ori adds features (such as encrypted backup), we'll update this policy and revise the effective date above.