Privacy Policy

Effective date: 2026-10-20 · Last updated: 2026-10-20

Orga ("Orga", "we", "us") is an app that helps you capture, organise and revisit your personal life. This Privacy Policy explains how we collect, use, store, share and protect your personal information when you use the Orga mobile app, the Orga website (app.orga.day) and related services, and the rights you have.

We treat "your data belongs to you" as a product rule: we do not run ads, do not track you across apps, do not sell your personal information, and do not use your content to train our own models.

1. Who is the controller

• Data controller: Jimmy
• Contact email: gzy.guy@gmail.com
• Postal address: China

We provide Orga to users worldwide. If you are in the European Economic Area (EEA), the UK or Switzerland, we process your personal data under applicable data protection laws, including the GDPR. Regional supplements are in section 10.

2. What we collect

2.1 Account and identity data

• Email address;
• A hash of your password (we use one-way scrypt hashing and never store the plain text);
• Display name (optional);
• Your chosen interface language and time zone;
• The version of this policy and the Terms you accepted, and when you accepted them;
• If you sign in with Apple or Google: the provider account identifier, email address, and (for Apple, only on first authorisation) your name;
• Session data: a hash of the session identifier, creation and expiry times, and the IP address and client User-Agent used for security auditing.

2.2 Content you submit

• Text you enter and the kind of record you are creating (finance, emotion, journal, health, tasks, objects, etc.);
• Images you upload (a Pro feature). Images are compressed on your device, uploaded to our object storage and attached to the corresponding record. When you choose to take a photo or pick one from your library, the system asks for camera or photo permission; we only receive images you actively select and confirm for upload;
• Derived records, summaries, memories and insights generated by AI from your input;
• Feedback you send through the app and an optional contact email.

Your content may contain sensitive personal information, such as health, medical, medication, financial and emotional information. We collect it only when you choose to submit it, and use it only to provide the recording, organisation, statistics and review features. We do not ask for sensitive information that is not needed for a feature.

2.3 Technical and security data collected automatically

• IP address (for rate limiting, abuse prevention, security auditing and session management);
• App version, operating-system platform, request timestamps and error logs;
• Subscription status, product identifiers and transaction identifiers if you purchase a subscription. Payment card details are handled by Apple; we never see your full card number.

We do not use the advertising identifier (IDFA), do not track you across apps, do not run personalised advertising, and do not sell your personal information.

2.4 Data that stays on your device

• Sample data shown in guest mode, stored only on your device and never uploaded;
• Preferences such as theme, language, amount colours and notification switches;
• Login tokens, kept in the system secure storage (iOS Keychain / Android Keystore), not in plain-text preferences;
• If you enable biometric unlock (Plus and above), fingerprint or face verification is performed by the operating system. We never receive your biometric data.

2.5 Website and waitlist

• If you email us through the "Join the waitlist" link on our website, we receive only your email address and whatever you choose to write, and use it only to let you know when Orga launches;
• The website uses browser local storage to remember your theme and language preference. It sets no advertising cookies and loads no third-party advertising or analytics scripts;
• The website is hosted on Cloudflare Pages, which records standard access logs (IP address, User-Agent, request time) for security and troubleshooting.

2.6 What we do not do

• We do not read your contacts, SMS, call logs or precise location;
• We do not record audio, take photos or record video in the background;
• We do not use your content to train our own models;
• We do not use your personal information for automated decision-making that has a legal or similarly significant effect on you.

3. How we use your information

We use your personal information to:

1. Create and manage your account, sign you in, renew sessions and authenticate you;
2. Store your raw input and call AI to produce structured records, memories and insights;
3. Show you history, statistics, trends and reviews;
4. Manage subscriptions, quotas and feature entitlements;
5. Send password-reset emails and service messages, and let you know when Orga launches if you join the waitlist;
6. Keep the service secure, prevent abuse and diagnose failures;
7. Handle your feedback, support requests and data-rights requests;
8. Comply with legal obligations.

Our legal bases, where applicable, include performance of a contract with you, your consent, our legitimate interests (such as service security and abuse prevention), and legal obligations. Where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.

4. AI processing

To turn your input into structured records, we send the text of the entry you submit, the entry time, your time zone, the output language and the processing pipeline used to the third-party AI providers configured for our deployment. Depending on that configuration, these may include OpenAI, Anthropic, Google (Gemini) and DeepSeek.

We do not send AI providers:

• your password or login tokens;
• your contacts, device identifiers or precise location.

A few more things to know:

• AI providers may be located outside your country. Their retention and training practices are governed by their own terms. Where available, we choose configurations that do not use API data for model training;
• AI output may be inaccurate, incomplete or out of date. It is not medical, financial, legal, psychological or other professional advice;
• We do not read your records manually unless you ask for support, we investigate abuse or a security incident, or the law requires it;
• If the text you submit indicates a high-risk signal such as self-harm, suicide or violence, the system may create a safety alert visible only to you and show support resources. The alert does not enter your emotion statistics, and we will not contact you or a third party solely because of it unless the law requires it.

5. Sharing and processors

We do not sell or rent your personal information, and we do not share it for advertising. We share information only as necessary with the following types of providers, which must process it on our instructions:

Our operators access account and content data in a controlled admin console only when handling your support request, investigating abuse or a security incident, or when required by law. The admin console has separate access controls.

If we are involved in a merger, acquisition or asset transfer, your personal information may be transferred as part of the transaction. We will notify you in advance and require the recipient to remain bound by this policy.

This policy does not cover what third parties do with your information. Apple's App Store, Google sign-in, the AI providers described above and any external sites we link to have their own privacy policies, which you should read before use.

6. International transfers

Our servers are located in Malaysia. The AI, hosting and subscription providers listed above may be located in the United States, the European Union, Singapore or other countries. Where your personal information is transferred outside your country, we apply the safeguards required by applicable law, such as standard contractual clauses and other contractual, technical and organisational measures.

7. Storage and retention

After you delete your account, we delete or anonymise your personal information within a reasonable period (normally no more than 30 days), except where law requires retention. We may retain necessary information for longer where required by law, or to handle disputes, abuse investigations and security incidents, and will delete or anonymise it when that purpose is complete.

8. Security

We use reasonable technical and organisational measures, including:

• HTTPS for all traffic;
• scrypt password hashing and system secure storage for login tokens;
• refresh tokens stored only as hashes, with short-lived, rotating access tokens;
• restricted access to servers, databases and object storage;
• an admin console protected by Cloudflare Access and a separate account system;
• least-privilege access and security audit logs.

No system is completely secure. Please protect your device, credentials and verification codes. If a personal-data security incident occurs, we will notify you and the relevant regulators as required by law.

9. Your rights

Subject to applicable law, you have the right to:

• access and copy your personal information;
• correct inaccurate or incomplete information;
• delete your account and related data;
• withdraw consent (without affecting processing before withdrawal);
• object to or restrict certain processing;
• receive a copy of your data (portability);
• request an explanation of our personal-information processing rules;
• complain to your local data protection authority.

You can delete your account directly in the app: Settings → User info → Delete account. You can also contact us at gzy.guy@gmail.com. To protect your account, we may ask you to verify your identity.

We normally respond to requests within 30 days, or within any longer period required by law.

10. Regional supplements

10.1 European Economic Area, UK and Switzerland

If you are in the EEA, the UK or Switzerland, you have the rights granted by the GDPR or equivalent local law, including access, correction, deletion, restriction, objection, data portability and the right to lodge a complaint with your local supervisory authority.

Our legal bases include performance of a contract (providing Orga), consent (for example when you choose to submit sensitive information), legitimate interests (service security, abuse prevention, product improvement) and legal obligations. We do not make decisions based solely on automated processing that have a legal or similarly significant effect on you.

Where required by applicable law, we will appoint an EU or UK representative and publish their contact details on this page.

10.2 California, United States

If you are a California resident, we do not sell or share your personal information (including for cross-context behavioural advertising). You have the right to know the categories and sources of personal information we collect, to request deletion or correction, to exercise your rights without discrimination, and to use an authorised agent. Contact us at the email in section 1.

10.3 Mainland China

If you are in mainland China, we process your personal information under the Personal Information Protection Law of the People's Republic of China (PIPL) and related laws:

• the scope of personal information we process is described in section 2, and the purposes in section 3;
• we obtain your separate consent, or satisfy another lawful condition, before processing sensitive personal information (such as health, medical or financial information) or providing your personal information outside mainland China;
• you may exercise your rights to access, copy, correct, supplement, delete, withdraw consent, transfer and receive an explanation of our processing;
• if you have questions or concerns about our processing, contact us, or complain to the competent cyberspace or market-regulation authority.

10.4 Other countries and regions

If the law of your country or region gives you additional personal-information rights (for example access, correction, deletion, restriction, portability or complaint), we will respect and help you exercise them to the extent required by applicable law. This policy does not exclude any rights you have under mandatory local law.

11. Children

Orga is not directed to children. We do not knowingly collect personal information from children under 13. If the digital-consent age in your country or region is higher, that higher age applies, and minors below it should use Orga with the consent of a parent or guardian. If you believe we have collected a child's personal information, contact us and we will verify and delete it.

12. Subscriptions and payments

iOS subscriptions are purchased through Apple's App Store in-app purchase. Apple processes your payment information under its own privacy policy. We receive only the subscription status, product identifier and transaction identifier needed to grant or revoke your entitlement. RevenueCat is used to validate subscription status and synchronise entitlements and does not receive your full payment card details.

Deleting your Orga account does not cancel an Apple subscription. You must cancel it separately in your App Store subscription settings; see the Account Deletion page.

13. Changes to this policy

We may update this policy. We will notify you of material changes in the app or by email and update the effective date at the top of this page. If you do not agree with the updated policy, you may stop using the service and delete your account. Continuing to use the service after a change takes effect means you accept the updated policy.

14. Contact

Questions, requests or complaints about this policy:

gzy.guy@gmail.com

We normally respond within 30 days.

This policy is available in Chinese and English. Both versions are equally authentic; if there is any ambiguity, the English version prevails.