Privacy Policy for OLENRI

Effective date: 25 July 2026
Last updated: 30 July 2026

This Privacy Policy applies to the OLENRI mobile application (Android package ID app.onri.clarity, iOS bundle ID app.onri.clarity) available on Google Play and the Apple App Store. The developer of OLENRI, as listed on the Google Play Store, is OLENRI. Website: https://olenri.com. Contact: [email protected].

1. Who we are

OLENRI ("OLENRI", "the App", "we", "us", "our") is an AI-powered clarity and decision-support mobile application developed and published by OLENRI — the same entity listed as the developer on the OLENRI Google Play Store listing. OLENRI is the data controller for personal data processed through the App.

For any privacy question, data-subject request or complaint, contact us at [email protected].

2. Two ways to use OLENRI

Anonymous device mode — no account required. We generate a random device identifier that is stored locally on your phone so your past reports remain visible to you on this device. No email, name or contact information is collected.
Signed-in account — optional. You may create an account with email + password, Google Sign-In or Apple Sign-In. When you sign in we store your email address, an OAuth subject identifier (for Google/Apple) and, if provided, your display name to link your reports across devices.

3. Data we collect and process

The table below matches the OLENRI Google Play Data Safety declaration one-to-one.

Data type	Collected	Shared with third parties	Purpose
Email address	Yes, if you create a signed-in account	No	Account creation, sign-in, password reset, account-management emails
Name / display name	Only if provided by you or by your Google/Apple profile	No	Personalising in-app greetings
User IDs (internal user ID, Google sub, Apple sub, device UUID, push token)	Yes	Yes — pseudonymised (Sentry, RevenueCat, Emergent (push notification delivery))	Authentication, entitlement lookup, crash grouping, delivering push notifications
Purchase history (subscription entitlements: Free, Plus, Pro; expiration dates)	Yes	Yes (RevenueCat)	Managing your subscription and unlocking paid features. Card / payment info is handled by Google Play or Apple — the App never sees it.
User-generated content (your typed thoughts, transcribed voice input, AI-generated clarity reports, Weekly Mirror, Identity Card, Time Capsule)	Yes	Yes (OpenAI via Emergent LLM proxy) — content is used only to generate your reply and is not used by OpenAI to train models under our API terms	Core app functionality: generating your clarity reports, memory and personalised insights
Voice / audio recordings	Ephemeral — transmitted only	Yes (OpenAI Whisper for transcription)	Speech-to-text for voice input. Raw audio is deleted from our servers immediately after transcription; only the transcribed text is retained inside your clarity report.
App activity / in-app diagnostic breadcrumbs	Yes (pseudonymised, PII stripped)	Yes (Sentry)	Debugging crashes and improving stability
Crash logs & performance diagnostics (device model, OS version, app version, stack traces)	Yes	Yes (Sentry)	Diagnosing crashes and monitoring performance; Sentry performance-trace sample rate ≤ 10 % in production, profiling disabled
Language / locale preference	Yes (stored locally and on your account)	No	Localising the app to your language
IP address	Yes — used in-memory for rate-limiting and abuse prevention during a request; web-server access logs retain IP + request timestamp for up to 90 days for security monitoring	No	Rate-limiting, brute-force protection and security monitoring. IP addresses are never written to the OLENRI application database.

4. Data we do NOT collect

OLENRI does not collect, request or process:

Precise or approximate location, GPS coordinates
Photos, videos, or files from your device
Contacts, calendar, SMS or call logs
Health, fitness or biometric data
Web-browsing history outside the app
Advertising identifiers (no ads SDK is used)
Credit-card or bank-account numbers — Google Play and Apple handle all payment transactions; the App never sees your card data
Sensitive attributes such as race, sexual orientation, religion or political opinion

5. Third-party services we actually use

OLENRI relies on a small, deliberate set of third-party processors. Each service listed below is the same set of processors declared in the OLENRI Google Play Data Safety form.

OpenAI (accessed via the Emergent LLM proxy) — provides GPT-based language understanding, Whisper speech-to-text and text-to-speech. Your prompts, transcribed audio and report content are sent to OpenAI only for the duration of generating your reply. Under the OpenAI API terms applicable to the Emergent LLM proxy, this content is not used to train OpenAI models.
Sentry — crash and performance monitoring. We ship the Sentry SDK with sendDefaultPii: false and an explicit scrubber that strips email, IP, name, phone, chat content, transcripts, audio and prompt/response bodies before events leave the device.
RevenueCat — subscription-entitlement management. Receives pseudonymous user ID, product IDs and purchase timestamps.
Emergent (push notification delivery) — delivers push notifications you have opted in to. Receives your device push token and pseudonymous user ID.
Google Sign-In and Apple Sign-In — federated authentication providers used only if you tap the corresponding sign-in button.
Google Play Billing / Apple App Store — process every subscription payment. OLENRI never sees your card number, bank details or billing address.

OLENRI does not use Google Firebase, Google Analytics, Crashlytics, Facebook SDK, TikTok SDK, or any advertising / attribution SDK.

6. How we use your data

To provide the clarity, voice and history features you request.
To authenticate you and keep your account secure (rate-limiting, brute-force protection, password reset).
To deliver push notifications you have opted in to.
To operate paid subscriptions purchased through Google Play or Apple.
To diagnose crashes and improve stability of the App.

We do not sell your personal data. We do not use your data for behavioural advertising or ad-tracking.

7. Data retention and deletion

Clarity reports, memory, Weekly Mirror, Identity Card, Time Capsule — retained until you delete them individually or delete your account.
Account record (email, hashed password, OAuth sub, display name) — retained until you delete your account.
Soft-deleted account records — when you tap "Delete account" in the app, your account is marked for deletion and retained for a 15-day recovery grace window, after which it is permanently purged. Signing in again during the window restores the account with its original data.
Voice recordings — deleted immediately after transcription (typically within a few seconds).
Generated TTS audio — stored on our server no longer than 30 minutes and then automatically purged.
Crash logs and performance traces (Sentry) — retained up to 90 days, then purged.
Purchase history (RevenueCat) — retained for the duration of the subscription plus applicable financial-record requirements (typically up to 7 years).
IP addresses — held only in memory during a request for rate-limiting; web-server access logs may retain IP + timestamp for up to 90 days for security monitoring.

8. Account deletion

You can delete your OLENRI account and associated personal data at any time:

In the App: Settings → Account → Delete account.
By email: send a request from your account email to [email protected].
Web: full instructions and data-scope details are available at /delete-account.

In-app deletions are registered immediately; the account becomes inaccessible from the app at once, and a 15-day recovery grace window lets you undo an accidental deletion by simply signing in again — after which the account and its data are permanently purged. Email deletion requests are completed within 30 days of ownership verification. Some records may be retained where the law requires (e.g. financial records for tax purposes) or where anonymised data is used for aggregate analytics — see Section 7.

9. Legal basis (GDPR / UK GDPR)

Performance of contract — to provide the app features you request.
Legitimate interests — to keep the service secure, prevent abuse and improve stability.
Consent — for push notifications and any optional analytics. You can withdraw consent at any time from Settings.
Legal obligation — for financial-record retention related to paid subscriptions.

10. Your rights

Wherever you live you have the following rights, and we honour them on request:

Access — request a copy of your data.
Correction — update inaccurate data.
Deletion — via in-app Settings → Delete account (registered immediately; permanently purged after a 15-day recovery grace window), or by email (see Section 8; completed within 30 days of ownership verification).
Portability — request your data in machine-readable form.
Object / restrict — object to processing based on legitimate interests.
Complain — lodge a complaint with your local data-protection authority.

11. International transfers

Our sub-processors (OpenAI, Sentry, RevenueCat, Emergent (push notification delivery)) are based in the United States and Europe. When data is transferred outside your country we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards published by those vendors.

12. Security

All data is transmitted over HTTPS/TLS. Passwords are stored as bcrypt hashes. Database connections use TLS. Employee access to production data is restricted and logged. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data using widely accepted industry practices.

13. Children

OLENRI is not intended for children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has used the App, email [email protected] and we will remove the related data.

14. Sensitive content note

OLENRI is not a medical, mental-health, legal or financial advisor. If you are in crisis, please contact your local emergency services or a mental-health professional. In the United States you can dial 988. Internationally see findahelpline.com.

15. Changes to this policy

We will notify you of material changes by updating the "Last updated" date above and, where appropriate, by an in-app message before the change takes effect. Continued use of OLENRI after such a notice constitutes acceptance of the updated policy.

16. Contact

OLENRI · https://olenri.com
Privacy questions, data-subject requests or complaints — email [email protected].