Legal
Privacy Policy
Last updated: March 31, 2026
The short version
Your memories are yours. We don't sell your data, we don't read your memories, and voice processing happens entirely on your device. We collect only what's needed to make Orca work.
1. What We Collect
When you use Orca, we collect the following information:
- Account information: Your email address when you create an account.
- Voice recordings: Processed on your device using Apple's on-device Speech Recognition. Raw audio is never stored or transmitted to our servers.
- Screenshots and photos: Processed locally using Apple's Vision framework for text extraction. Images are not transmitted to our servers.
- Memory content: The text of your memories, associated categories (Echos), dates, tags, and reminders (Pings).
- People & contacts data: Names, birthdays, and occasion dates you manually enter for People profiles. This data is stored in Supabase and is only accessible to you.
- Sports & finance data: Team preferences and stock tickers you track. Used only to fetch relevant data from ESPN and Yahoo Finance APIs. No personal information is shared with these services.
- Location data: Used only to show local weather in the app via Apple's WeatherKit. Your location is not stored on our servers and is never shared with third parties.
- Usage analytics: Anonymous, aggregated data about feature usage and session length via Mixpanel. No memory content is ever included in analytics.
2. How We Use Your Data
- To provide the Orca service: storing, organizing, and reminding you of your memories.
- To sync your memories across your devices when cloud sync is enabled.
- To improve the app through anonymous usage patterns.
We never sell your personal data. We never use your memory content for advertising. We never share your memories with other users unless you explicitly use a sharing feature.
3. Data Storage & Security
- Your memories are stored locally on your device using Apple's encrypted SwiftData storage.
- When cloud sync is enabled, data is stored in Supabase (PostgreSQL) with AES-256 encryption at rest and TLS 1.3 in transit.
- Row Level Security ensures only you can access your data — Orca employees cannot read your memories.
4. Voice & Photo Processing
Orca uses Apple's on-device Speech Recognition for voice capture. Your voice is processed entirely on your iPhone — audio is never sent to Orca's servers or any third party. Only the resulting text transcription is stored.
Photos and screenshots are processed using Apple's Vision framework, also entirely on-device. Images are never uploaded to our servers.
Orca uses third-party APIs including ESPN (sports scores and schedules) and Yahoo Finance (stock quotes) to enrich your memories. These services receive only the team name or ticker symbol needed to fetch relevant data — no personal information is ever shared with them.
5. Location & Weather
Orca requests your location only to display local weather via Apple's WeatherKit service. Location data is used in real-time and is not stored on our servers. You can disable location access at any time in iOS Settings → Privacy → Location Services → Orca.
6. iOS Spotlight Indexing
Orca indexes your memory content locally on your device using Apple's Core Spotlight framework. This allows your memories to appear in iPhone's native search. This index is stored entirely on your device and is not shared with Apple or Orca's servers.
7. Your Rights
- Access: View all your data within the app at any time.
- Edit: Modify any memory, Echo, or Ping at any time.
- Delete: Delete individual memories or your entire account. Account deletion removes all data from our servers within 30 days.
- Export: Data export is planned for a future update.
8. Children's Privacy
Orca is not designed for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Orca after changes constitutes acceptance of the updated policy.