Privacy

What she keeps

• Your conversations and what she remembers from them. This is the product — an assistant with no memory is a different one. It is kept until you ask for it to go.
• Your account. Email, mobile number, which devices are yours, and whether the subscription is paid.
• What you connect, if you connect it. Calendar, mail and messages are reached only after you grant access, only for the accounts you grant, and you can withdraw it at any time.

Each customer's memory lives in a separate encrypted database. There is no shared table of everybody's conversations, and no analytics built on their contents.

Who else sees it

Three suppliers, because she cannot hear, speak or think without them. They are paid to process it and are not permitted to use it for anything else.

• Deepgram — turns what you say into text, and text back into her voice.
• Google Vertex AI — the model that does the reasoning.
• Google Cloud — the machines this runs on.

Nobody else. Your conversations are not sold, not shared with advertisers, and not used to train anybody's model, including ours.

Google user data

If you connect a Google account, Orena requests only the access needed for the feature you asked for — calendar access to read and manage your events, and permission to send mail when you tell her to send mail. She does not request access to anything else in your account.

Orena's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms: your Google data is used to give you the feature you turned on, and for nothing else. It is never used to train or improve any machine-learning model. It is not sold or transferred to anyone. And no person here reads it — see the next section for the one narrow exception, which you control.

Whether we can read it

Stored data is encrypted, and the disk it sits on is encrypted with a key we can destroy. That protects against a stolen disk or a copied backup. It does not mean nobody could ever look: the software has to read your memory in order to answer you, so anyone who can run that software could in principle read it too. Saying otherwise would be a comfortable lie.

What we do instead is make reading impossible to do quietly. Support can only look at your memory through a door you open, over a window that has already closed, and Orena tells you out loud, in her own voice, when it happens. Not in an email afterwards.

Some of that is still being built. Where a protection is not finished, this page will say so rather than describe it as though it were.

Making it stop

• Disconnect an account — from your account page. Access is withdrawn at the provider, not merely forgotten here.
• Delete everything — email alex@hiorena.com and Orena Technologies LLC will do it that day. There is no button for this yet, deliberately: what she remembers is most of what she is to you, and a one-click control for destroying it needs more thought than the rest of the account page together.
• Ask what is held — same address, same day.

Who to ask

Orena is a product of Orena Technologies LLC, which is the data controller for everything described on this page. Questions about any of it, including the ones this page does not answer: alex@hiorena.com.