Privacy policy
Last updated: [DATE]. Applies to the Orra Android app and orra.withgridd.com.
Orra is a reflection app: astrology, tarot and a sankalpa jar. To do that we need your birth details and what you choose to write to us. We use them to make your readings, and for nothing else. We never sell your data and never show you third-party ads.
1. Who we are
Orra is run by [ENTITY], [ADDRESS] ("we", "us"). Under India's Digital Personal Data Protection Act 2023 we are the Data Fiduciary for your data. Questions or complaints: [GRIEVANCE OFFICER], [email protected].
2. Who can use Orra
Orra is for people aged 18 and over. We don't knowingly collect data from anyone younger. If we learn an account belongs to someone under 18, we delete it.
3. What we collect and why
| What | Examples | Why we need it |
|---|---|---|
| Account | Email, Google account ID, your first name | To sign you in and keep your readings across phones |
| Your birth details | Date, time and place of birth | To work out your chart (Moon sign, nakshatra, ascendant). Time is optional |
| People you add | Their name, birthday, and time and place if you know them; how they relate to you | To work out your Guna score with them |
| What you write | Questions, check-ins, sankalpas | To answer you, and to show your history back to you |
| What we make for you | Daily cards, answers, Guna scores | So you can read them again |
| Settings | Language, notification time, how often | To send cards when and how you asked |
| Device | Push token, app version, phone model, crash reports | To deliver notifications and fix bugs |
| Usage | Which screens you open and buttons you tap, tied to a random ID | To learn what works. Never your questions or birth details |
| Purchases | What you bought, when, and whether it is active | To unlock Plus or question packs. We never see your card or UPI details |
Please don't write health, legal or money details you'd rather keep private in your questions. Orra doesn't need them, and won't make predictions about them.
4. Consent
We ask for your consent when you start onboarding, in plain words, before we save your birth details. Notifications are a separate yes or no. You can withdraw consent any time by deleting your account (section 8); that stops all processing except what the law makes us keep (section 7).
5. Other people's details
Only add someone if they would be okay with it. They can ask us to remove their details by writing to [email protected], and we will. When you send someone an invite link and they add their own birthday, they become an Orra user in their own right. You see your Guna score with them, never their birth details.
6. Who we share data with
We use these companies to run Orra. Each gets only what it needs and may use it only to provide its service to us.
| Company | What they do for us | What they get | Where |
|---|---|---|---|
| Supabase | Database, sign-in, servers | Everything listed in section 3 | Mumbai, India |
| Anthropic (Claude) | Writes answers and daily cards | Your question, a summary of your chart, the cards drawn, and your first name | United States |
| Google (Gemini) | Backup writer if Claude is down | Same as Anthropic | United States |
| Google (Firebase Cloud Messaging) and Expo | Delivers notifications | Push token, notification text | United States |
| PostHog | Product analytics | Usage events with a random ID | US |
| Sentry | Crash reports | Error details with a random ID; no questions or birth details | US |
| Google Play and RevenueCat | In-app purchases | Purchase records with a random ID | United States |
| Dodo Payments | Card and UPI payments on the web (INR, USD) | Your payment details, which they collect directly | [confirm] |
| eSewa, Khalti | Wallet payments on the web (NPR) | Your payment details, which they collect directly | Nepal |
| Vercel | Hosts our website and invite pages | Page requests, invite codes | Global |
Anthropic and Google process your text under their business terms, which don't let them train their models on it. We'll share data with police or courts only when Indian or Nepali law requires it.
7. How long we keep it
- While your account is open, we keep your data so you can see your history.
- If you delete your account, we delete it straight away from our database. Copies in backups are gone within [BACKUP DAYS] days. We also ask PostHog to delete the usage events tied to your random ID; PostHog runs those deletions in a weekly batch, so they are gone within about a week.
- If you don't open Orra for [INACTIVE MONTHS] months, we'll email you, then delete your account at least 48 hours later unless you sign in.
- Purchase records are kept as long as tax law requires. Security logs are kept for one year to spot and fix breaches.
8. Your rights
You can:
- See what we hold about you. Write to [email protected] and we'll send a summary.
- Correct your birth details, name or language in the app, or ask us.
- Delete your account and data: Settings → Delete account and data. Or from the web at orra.withgridd.com/delete without reinstalling.
- Withdraw consent for notifications in Settings or your phone's settings, and for everything else by deleting your account.
- Complain to our grievance officer. We reply within 30 days. In India, if you're not satisfied, you can go to the Data Protection Board of India. In Nepal, you can take a complaint to the District Court.
- Nominate someone to act for you if you die or can't act yourself, by writing to [email protected].
9. Security
Data is encrypted in transit and at rest. Each user can only read their own rows (row-level security). The app never holds our secret keys; AI calls are made from our servers. Staff access is limited and logged.
If a breach affects your data, we'll tell you and the Data Protection Board without delay, with what happened, what it means for you and what we're doing about it.
10. Notifications and analytics
We send at most 2 notifications a day. You can choose fewer or turn them off in Settings. Analytics use a random ID, not your name or email. We don't use advertising IDs.
11. Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.