Privacy Policy

Last updated: May 2025 · Ori is operated by Clinton Hazel Jr

The short version: Ori is free to use. Your data is yours — we never sell it to third parties, never share it for advertising purposes, and never let anyone else access it. The only way Ori shows you anything commercial is through Discoveries — personalised suggestions based on your own interests, generated entirely from your data, clearly labelled, and always in your control.

1. Who we are

Ori is a personal data search and memory platform operated by Clinton Hazel Jr, based in Australia. We can be reached at privacy@ori.app.

Ori is free to use. We are sustained by our Discoveries feature — personalised recommendations shown to you based on your own data and interests. We explain exactly how this works in Section 5.

2. What data we collect

Data you upload

When you upload data exports from third party platforms, Ori processes and stores that data to power your personal feed and search experience. This includes:

Account data

When you create an account we collect your name, email address and a hashed password. We use Supabase for authentication and database storage. We do not store plain text passwords.

Usage data

We collect basic usage information to keep Ori working — things like when you signed in and whether uploads succeeded. We do not track your behaviour for advertising purposes.

3. How we use your data

Your uploaded personal data is used for one purpose only — to generate your personal feed, answer your search queries, and provide insights about your own history. Specifically:

We process your data by sending relevant portions to the Anthropic Claude AI API to generate responses. Anthropic's privacy policy governs how they handle data sent to their API. We send only the minimum data required to answer your query.

4. What we never do

We never sell your personal data to anyone. We never use your data to target you with advertising. We never share your data with third parties for their commercial purposes. We never use your data to train AI models. Your data is never accessible to other Ori users.

5. Data storage and security

Your data is stored in Supabase — a secure cloud database provider. All data is encrypted at rest and in transit. Row level security ensures your data is only ever accessible by you when you are authenticated.

Your uploaded data files are stored in Supabase Storage in a private bucket. Only your account can access your files. Ori staff cannot access the content of your personal data.

We follow industry standard security practices including HTTPS encryption, secure authentication, and regular security reviews.

6. Data retention

Your data is retained for as long as you have an active Ori account. You can delete individual data sources at any time from the My Data page. You can delete your entire account and all associated data by contacting us at privacy@ori.app. We will process deletion requests within 30 days.

7. Third party services

Ori uses the following third party services to operate:

Each of these providers has their own privacy policy governing their handling of data.

8. Your rights under Australian Privacy Law

Under the Australian Privacy Act 1988 you have the right to:

To exercise any of these rights contact us at privacy@ori.app. We will respond within 30 days.

If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

9. Children's privacy

Ori is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information please contact us immediately.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by displaying a notice within the Ori app. Your continued use of Ori after changes are posted constitutes your acceptance of the updated policy.

11. Contact us

For any privacy questions or requests contact us at privacy@ori.app. We take all privacy concerns seriously and will respond within 30 days.