OruOruBack to Home

Privacy Policy

Effective date: 8 October 2026
Last updated: 8 October 2026

This Privacy Policy explains how personal data is collected, used and shared when you use the Oru mobile app and related services (the "Service").

Who is responsible. Oru is operated by Mihajlo Veljanovski, an individual based in North Macedonia ("Oru," "we," "us"). He is the controller of your personal data under the EU General Data Protection Regulation (GDPR), the UK GDPR and North Macedonia's Law on Personal Data Protection. Contact: support@oru.is.

1. Information we collect

1.1 Information you provide

Account information. When you create or use an account, we collect:

  • your email address;
  • your name, if you provide it (for example through Sign in with Apple);
  • your sign-in method (email and password, Sign in with Apple, or Google);
  • your timezone and preferences (for example, week start day and temperature unit);
  • identifiers from third-party sign-in, such as your Apple user ID or Google user ID.

Passwords are stored only as a cryptographic hash.

Your content. Oru stores what you choose to record:

  • Journal entries and related details (for example, tags and dates).
  • Chat messages you send in the app, and Oru's replies.
  • Tasks, subtasks, task logs and notes.
  • Goals, goal steps and related inputs.
  • Photos you attach to journal entries, taken with the camera or chosen from your photo library. Photos are stored as files, and we keep references ("media keys") that point to them.
  • If you connect Apple Health, State of Mind entries (your logged moods and emotions), which are imported into your journal as entries.

Your journal and chats may reveal sensitive information about you, such as your health, mood or relationships. We process it only to provide the Service to you, as described in sections 2 and 3.

Support and security communications. If you email us or ask for account changes (for example, changing your email), we collect what you provide. Emails to support@oru.is are received through Amazon Web Services and automatically forwarded to our support inbox, hosted by Microsoft (Outlook.com). We send service emails such as verification codes, password-reset codes and security notices.

1.2 Information from your device (only with your permission)

You choose which of these to allow, in the app and in iOS Settings.

Health data (Apple Health / HealthKit). If you allow it, Oru reads the following and syncs it to our servers:

  • sleep analysis (duration and stages),
  • heart rate variability (HRV),
  • step count,
  • workouts (type and summary),
  • menstrual flow,
  • ovulation test results,
  • State of Mind (moods and emotions you log in Apple Health).

Oru reads Health data only after you allow it in the iOS Health permission screen, where you choose each data type separately. You can change this at any time in iOS Settings. This is health data, a special category of personal data. If AI processing is on, which it is by default, some of it is sent to OpenAI as described in section 3. Oru never writes data to Apple Health. We don't use Health data for advertising or marketing, and we don't sell it.

Calendar data (iOS Calendar / EventKit). If you allow it, Oru syncs these fields for your events:

  • title;
  • start and end time, and duration;
  • whether the event is all-day;
  • your own response status (accepted, tentative, declined, pending);
  • availability (busy or free);
  • the event's calendar identifier.

Oru does not sync event notes, attachments, locations, URLs, the organizer or attendees.

Location (iOS Location Services). If you allow it, Oru uses your approximate location (about 1 km accuracy) on your device only to get local weather from Apple WeatherKit. Your coordinates go to Apple, not to us. Our servers receive and store only the weather condition and the temperature.

Notifications. If you turn on reminders, they're scheduled on your device. We don't collect a push notification token.

1.3 Information created by the Service (derived data)

To provide features like insights, summaries and search, the Service creates:

  • sentiment scores, emotion labels and other signals inferred from your content;
  • summaries (for example, daily briefings and weekly narratives) and insight cards;
  • "memory" items and conversation summaries, for continuity across features;
  • numerical embeddings (vectors) created from your text, for search and retrieval.

1.4 Log, device and usage data

Server logs. When you use the Service, our servers and hosting provider receive technical data such as your IP address, timestamps, request identifiers and device characteristics. We use it to operate, secure and debug the Service, for example to limit repeated sign-in attempts.

Device identifier. When you sign in, the app sends a device identifier (Apple's identifier for vendor, or a random ID) to manage your sessions. It isn't the advertising identifier.

Product analytics (PostHog). The app sends usage events to PostHog, our analytics provider, so we can understand how Oru is used and improve it. Examples: finishing onboarding, saving an entry, opening an insight, turning on reminders, seeing an error.

Events are linked to your Oru user ID. They include your app version, iOS version, device model, timezone, sign-in method and account creation date. To do this, the PostHog software stores a random identifier on your device.

PostHog receives your IP address, stores it with these events, and derives your approximate location (city and country) from it for analytics. We don't use analytics data for advertising, and we don't combine it with data from other companies.

Session replay (PostHog). The app also records session replays. A replay is a reconstruction of the screens you see and the taps you make, and we use replays to find bugs and confusing screens. Before anything leaves your device, all on-screen text and images are masked. That includes your journal, chat, insights, and Health values and charts, which are also masked screen by screen. Replays are linked to your Oru user ID.

2. How we use information, and our legal bases

If you're in the European Economic Area (EEA), the UK or North Macedonia, data protection law requires a legal basis for each use of your personal data. We rely on the following:

  • Creating and running your account, signing you in, storing and syncing your content, and providing the app's features: performance of our contract with you (GDPR Art. 6(1)(b)).
  • Providing AI-assisted features (journal analysis, insights, briefings, suggestions, search and chat), which are on by default and can be turned off (see section 3): performance of our contract with you (Art. 6(1)(b)).
  • Reading and syncing the Apple Health data types you allow, and showing them to you in the app: your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)), which you give when you allow each Health data type in the iOS permission screen. You can withdraw it at any time in iOS Settings.
  • Syncing Calendar data and showing weather: your consent (Art. 6(1)(a)), given through the iOS permission. You can withdraw it in iOS Settings.
  • Sending reminders you've turned on, and service emails (verification, password reset, security notices, support replies): performance of our contract with you (Art. 6(1)(b)).
  • Understanding how the app is used and fixing problems, through product analytics and masked session replay: our legitimate interest in improving the app and fixing bugs (Art. 6(1)(f)). You can object at any time (section 6).
  • Protecting the Service and our users (fraud prevention, abuse detection, rate limiting, incident response): our legitimate interest in keeping the Service secure (Art. 6(1)(f)).
  • Complying with legal obligations, and establishing or defending legal claims: legal obligation (Art. 6(1)(c)) and our legitimate interests (Art. 6(1)(f)).

Withdrawing consent doesn't affect processing done before you withdrew it.

We don't use your Health data for advertising or marketing. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

What's required. An email address, or a sign-in with Apple or Google, is needed to create an account. Everything else (Health, Calendar, Location, reminders, AI features) is optional, and Oru works without it, with fewer features.

3. AI processing

Many Oru features use OpenAI, a third-party AI provider, to create outputs such as:

  • journal analysis (emotions and themes);
  • insights and daily briefings;
  • writing suggestions;
  • chat replies;
  • summaries and embeddings.

AI processing is on by default. To provide these features, we send OpenAI:

  • your journal entries, including State of Mind entries imported from Apple Health, and text you're actively writing when real-time journaling guidance is on;
  • your chat messages;
  • your tasks, task notes, goals and goal steps;
  • if you've allowed Health access, health information derived from your Apple Health data (see "Health data and AI" below);
  • if you've allowed Calendar access, your calendar event titles and times.

We don't send your photos to OpenAI.

Health data and AI. If you've allowed Health access and AI processing is on, we send OpenAI:

  • Daily sleep, activity and heart data: your sleep duration, a sleep score Oru calculates from your sleep data, your daily step count, your resting heart rate variability (HRV), and your workouts (type and duration). We use them to write your daily briefing and weekly reflection, to answer your questions in chat, and to create search embeddings so Oru can recall this context later.
  • Menstrual cycle information calculated from your Health data: period dates, cycle lengths, your current cycle phase and day, and your projected next period. The phase may be confirmed from your ovulation test results. We send this when you ask Oru about your cycle in chat, and as patterns (for example, how your mood varies across your cycle).
  • State of Mind entries you import from Apple Health. They become journal entries and are sent like your other journal entries.

We send daily totals, averages and summaries like these, not the sample-by-sample records stored in Apple Health.

You can turn AI processing off in the app under Profile → Privacy & Data → AI Features. One switch turns AI off for journal analysis, chat, insights, goals, and the calendar and health data in your daily context.

When it's off:

  • we stop sending new content, including Health-derived data, to OpenAI;
  • chat and AI-generated insights stop;
  • your daily briefing uses a simpler non-AI version.

Your Health data keeps syncing to our servers so the app can show it to you, until you turn off Health access in iOS Settings. Outputs created earlier (for example, stored summaries or insight cards) stay in your account until you delete them or your account.

How OpenAI handles it. OpenAI processes this data, including Health-derived data, only to return results to us. Data we send through OpenAI's API isn't used to train its models, and we haven't opted in to share it for training. OpenAI may keep it for up to 30 days to monitor for abuse, unless the law requires longer retention.

AI outputs can be wrong and may reflect inferences. Don't rely on them for medical, legal, financial or other professional advice. Oru isn't a medical service.

4. How we share information

We share information only as needed to provide and protect the Service, and only with:

Service providers that process data on our behalf:

  • Amazon Web Services (AWS): hosting, databases, storage of your photos, background job processing, and receiving support email.
  • OpenAI: AI processing, as described in section 3.
  • PostHog: product analytics (including your IP address and the approximate location derived from it) and masked session replays.
  • Resend: sending service emails (verification codes, password reset, security notices).

These providers process your data on our behalf under data processing agreements, including the EU Standard Contractual Clauses where applicable. They may use their own sub-processors.

Support inbox. Emails you send to support@oru.is are forwarded to an inbox hosted by Microsoft (Outlook.com). It's a consumer email service, so we don't have a data processing agreement with Microsoft. Microsoft handles these emails under its own terms and privacy statement (https://www.microsoft.com/en-us/privacy/privacystatement).

Apple and Google. Apple provides Sign in with Apple and WeatherKit; WeatherKit receives your approximate coordinates directly from your device. Google provides Google sign-in, if you use it. They handle that data under their own privacy policies.

Authentication providers. If you use Sign in with Apple or Google sign-in, we receive information from them (such as your email, your name if you share it, and your account ID) and use it to sign you in.

Legal and safety. We may disclose information if we believe it's reasonably necessary to:

  • comply with law or respond to lawful requests;
  • protect rights and safety;
  • prevent fraud or abuse.

Business transfers. If Oru is transferred to another person or business (for example, sold, or contributed to a company), information may be transferred as part of that. This policy will continue to apply to it unless you're told otherwise.

We don't sell your personal information. We don't share it for cross-context behavioral advertising, and we don't use it to track you across other companies' apps or websites.

5. Data retention

We keep your account information and content for as long as you have an account. The exceptions below apply, and so does anything we must keep longer for legal reasons.

  • OpenAI may keep data it receives from us for up to 30 days (see section 3).
  • PostHog keeps analytics events for up to 7 years and session replays for up to 1 year, unless we delete them sooner.
  • Support emails are kept in our AWS mail storage for 30 days after they arrive, then deleted there. Copies stay in our support inbox for as long as needed to handle your request.
  • Server logs are kept for 90 days, then deleted automatically.
  • Backups. We keep automated backups of our database. Deleted data, including data deleted with your account, may stay in our backups for up to 7 days before it ages out. Photos aren't backed up; once deleted from storage, they're gone. If our production database is ever deleted, for example because Oru shuts down, a final snapshot of it is kept until we delete it.

Account deletion. You can delete your account in the app. When you do, we immediately delete your account and your content from our database: journal entries, chats, tasks, goals, insights, and the health and calendar data synced to us. We then delete your photos from storage. Copies can remain in database backups for up to 7 days and in server logs for up to 90 days, and data held by our providers is kept as described above (OpenAI up to 30 days).

Analytics data held by PostHog isn't deleted automatically. Email support@oru.is and we'll delete it.

6. Your choices and rights

You can:

  • access and update certain account details in the app;
  • allow or revoke Health, Calendar and Location access at any time in iOS Settings (Health: Settings → Health → Data Access & Devices → Oru). Allowing Health access is your consent for Oru to read the Health data types you choose; revoking it stops Oru reading them;
  • turn AI processing off in Profile → Privacy & Data → AI Features. This stops sending your content, including Health-derived data, to OpenAI (see section 3);
  • turn reminders on or off, and change their time, in Profile;
  • delete content (for example, journal entries), and delete your account in the app.

Your rights. Depending on where you live, including in the EEA, the UK and North Macedonia, you have the right to:

  • access your personal data and get a copy of it;
  • correct inaccurate data;
  • delete your data;
  • restrict how we process it;
  • receive the data you gave us in a portable format;
  • object to processing based on our legitimate interests, including analytics and session replay;
  • withdraw consent at any time, where we rely on consent (for example, your Health access in iOS).

To exercise any of these rights, including deletion of your PostHog analytics data, email support@oru.is. We'll respond within one month. We may need to confirm it's you first.

Complaints. We'd like to hear from you first. You also have the right to complain to a data protection authority:

7. Security

We use reasonable administrative, technical and physical safeguards designed to protect your information. No method of transmission or storage is completely secure.

8. Where your data is stored, and international transfers

Your data is stored and processed in the United States:

  • our servers, database and photo storage are on AWS (US East, N. Virginia);
  • analytics and replays are on PostHog's US cloud;
  • email delivery is handled by Resend, in the US;
  • AI processing is done by OpenAI, in the US;
  • support emails are forwarded to an inbox hosted by Microsoft (Outlook.com), which may store them in the US or other countries.

Our providers may also process data in other countries through their sub-processors. Oru is operated from North Macedonia, so we access data from there.

The US and North Macedonia don't have the same data protection laws as the EEA or the UK. When your data moves outside the EEA or the UK, we rely on these safeguards:

  • EU-U.S. Data Privacy Framework, including the UK Extension, for providers certified to it: AWS (under Amazon.com, Inc.'s certification), PostHog, Resend and Microsoft. For Microsoft (Outlook.com), this certification is the only safeguard, because we have no data processing agreement with Microsoft. You can check certifications at https://www.dataprivacyframework.gov/list.
  • EU Standard Contractual Clauses (with the UK Addendum for UK data, and the Swiss amendments where relevant), included in our data processing agreements with AWS, OpenAI, PostHog and Resend. These also serve as the safeguard under North Macedonia's Law on Personal Data Protection.

To get more information about these safeguards, email support@oru.is.

9. Children's privacy

You must be at least 16 to use the Service if you're in the European Economic Area or the United Kingdom, and at least 13 everywhere else. We don't knowingly collect personal information from children below these ages. If you believe a child has given us personal information, contact support@oru.is and we'll delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, in the app). The "Last updated" date above reflects the most recent revision.

11. Contact us

Mihajlo Veljanovski (Oru), North Macedonia. Email: support@oru.is