A journal that's nobody's business but yours.

Private isn't a setting. It's the design.

You should be able to write the truest version of your day without wondering who else can read it. With Ori, there's no account to create and no copy of your journal sitting in someone's cloud. Your entries stay on your device. Nothing is sold or shared with advertisers or data brokers, and you choose what Ori is allowed to see — and can turn any of it off. The one time your words leave the phone is to write your letter — sent once to the AI, and not kept.

What "private" actually means here

• On-device, not on a server. Your journal lives on your phone — not in a database somewhere you can't see.
• No account, no email wall. You don't hand over your identity to start. There's nothing to sign up for.
• Nothing sold, nothing shared. You are not the product. There are no ads and no data brokers in the loop.
• You hold the switches. You decide what Ori sees — your words, your sleep, your activity — and you can turn any source off.

Stored, processed, retained — the three words that matter

Most privacy pages blur these three together. Here they are, separated — this is the whole data model:

That's the honest shape of it: stored on-device, processed transiently, retained nowhere else — and the privacy policy is the binding version of this page.

Still writes you back

Private usually means you're on your own with a blank page. Not here. Even though your journal is stored only on your phone, Ori still reads your day back to you each evening as a short, honest letter — drawn only from what you shared. To write that letter, the day's words are sent once to the AI that writes it and aren't kept — the privacy policy spells out exactly what moves and what never does. Quiet, yours, and free.