Privacy Policy for OLENRI

This Privacy Policy applies to the OLENRI mobile application (Android package ID app.onri.clarity, iOS bundle ID app.onri.clarity) available on Google Play and the Apple App Store. The developer of OLENRI, as listed on the Google Play Store, is OLENRI. Website: https://olenri.com. Contact: [email protected].

1. Who we are

OLENRI ("OLENRI", "the App", "we", "us", "our") is a personal clarity and decision companion mobile application developed and published by OLENRI — the same entity listed as the developer on the OLENRI Google Play Store listing. OLENRI is the data controller for personal data processed through the App.

For any privacy question, data-subject request or complaint, contact us at [email protected].

2. Two ways to use OLENRI

• Anonymous device mode — no account required. We generate a random device identifier that is stored locally on your phone so your past reports remain visible to you on this device. No email, name or contact information is collected.
• Signed-in account — optional. You may create an account with email + password, Google Sign-In or Apple Sign-In. When you sign in we store your email address, an OAuth subject identifier (for Google/Apple) and, if provided, your display name to link your reports across devices.

3. Data we collect and process

The table below matches the OLENRI Google Play Data Safety declaration one-to-one. OLENRI does not share any data with third parties for their own independent purposes — we declare "No data shared with third parties" in Google Play Data Safety. Some data categories are, however, sent to service providers who process it strictly on our behalf and under contract (never for their own purposes, never sold, never used for advertising) — this is why those rows below are marked "Processed by service providers", the same distinction Google Play's Data Safety framework draws between "sharing" and "processing". Full detail on every processor is in Section 5.

Gold Club community content: Gold Club is available on the Gold Club website (olenri.club) to Plus and Pro subscribers. If you choose to submit a story, it is first reviewed by OLENRI before publication; comments and reactions appear immediately. Published stories, comments and reactions are visible only to other signed-in Plus/Pro members — they are not shown publicly on our websites. The public Gold Club website shows only sample content prepared by OLENRI. This is different from your private Clarity reports, Memory and Time Capsule, which only you can see. You can choose to post anonymously. You can delete your own stories on the Gold Club website; to remove a comment, or to have all of your Gold Club content erased, email us (see Section 9).

App ratings and reviews: if you rate OLENRI in the App (Settings → Feedback), your star rating, optional review text and the name you choose to display (or "Anonymous"; if you choose neither, "OLENRI user" is shown) are published immediately on olenri.com and machine-translated (see Anthropic in Section 5). You can edit your rating at any time by submitting it again.

Article feedback on olenri.com: if you rate a Clarity article on our website as helpful or leave a comment, we store the rating, your comment and a random anonymous browser identifier (no name or email). Comments may be displayed under the article after review.

4. Data we do NOT collect

OLENRI does not collect, request or process:

• Precise or approximate location, GPS coordinates
• Photos, videos, or files from your device
• Contacts, calendar, SMS or call logs
• Health, fitness or biometric data
• Web-browsing history outside the app
• Advertising identifiers (no ads SDK is used)
• Credit-card or bank-account numbers — Google Play and Apple handle all payment transactions; the App never sees your card data
• Sensitive attributes such as race, sexual orientation, religion or political opinion

5. Third-party services we actually use

OLENRI relies on a small, deliberate set of third-party processors. Each service listed below is the same set of processors declared in the OLENRI Google Play Data Safety form.

• OpenAI (accessed via the Emergent LLM proxy) — provides GPT-based language understanding, Whisper speech-to-text and text-to-speech. Your prompts, transcribed audio and report content are sent to OpenAI only for the duration of generating your reply. Under the OpenAI API terms applicable to the Emergent LLM proxy, this content is not used to train OpenAI models.
• Sentry — crash and performance monitoring. We ship the Sentry SDK with sendDefaultPii: false and an explicit scrubber that strips email, IP, name, phone, chat content, transcripts, audio and prompt/response bodies before events leave the device.
• RevenueCat — subscription-entitlement management. Receives pseudonymous user ID, product IDs and purchase timestamps.
• Emergent (push notification delivery) — delivers push notifications you have opted in to. Receives your device push token and pseudonymous user ID.
• Google Sign-In and Apple Sign-In — federated authentication providers used only if you tap the corresponding sign-in button.
• Google Play Billing / Apple App Store — process every subscription payment. OLENRI never sees your card number, bank details or billing address.
• Trustpilot — once a signed-in user has used OLENRI for a few days and completed a few sessions, we send their email address, display name (if set) and a pseudonymous account reference to Trustpilot a single time, so it can send an independent, one-time review invitation. We never send conversations, analyses, or any other app content. Users can opt out anytime in Settings → Account → Review invitations.
• Resend — transactional email delivery (sign-in codes, password reset, account notices) and the OLENRI Clarity newsletter, if you subscribe. Receives your email address and the content of the specific email being sent; never your Clarity reports or conversations.
• Google Firebase Analytics — helps us understand which features are used and how, so we can improve the App. Receives app-interaction events, screen views and purchase events (product ID, price, currency) tied only to Firebase's own app-instance identifier — never your OLENRI user ID, email, name or app content. Not used for advertising, ad personalization or cross-app tracking.
• Google Analytics 4 (websites olenri.com and olenri.club only) — counts page visits on our websites using an anonymous browser client ID, with IP anonymization enabled. Receives the page URL, referrer and basic browser/device information — never your name, email, Clarity reports or Gold Club story content. Not used for advertising.
• Cloudflare — hosts our websites (olenri.com, olenri.club) and provides security (e.g. protection against abuse). Cloudflare processes technical request data such as IP address and browser information solely to deliver and protect the websites.
• Anthropic (accessed via the Emergent LLM proxy) — machine-translates Gold Club stories approved for publication and public app reviews into the OLENRI languages. Receives only the text being translated; never your Clarity reports, conversations or account details.

OLENRI does not use Firebase Crashlytics (Sentry is our sole crash-reporting system), Facebook SDK, TikTok SDK, or any advertising / attribution SDK.

6. AI Processing Consent

Before any personal content is sent to OpenAI or another third-party AI processor, OLENRI asks for the user's explicit consent. If consent is not provided, the relevant features remain unavailable and personal content is not sent to the third-party AI processor.

Users may withdraw this consent at any time through the app settings. After consent is withdrawn, OLENRI will stop sending new personal content to third-party AI processors unless the user provides consent again.

OLENRI requires its third-party processors to provide the same or equivalent level of protection for personal data as described in this Privacy Policy.

7. How we use your data

• To provide the clarity, voice and history features you request.
• To authenticate you and keep your account secure (rate-limiting, brute-force protection, password reset).
• To deliver push notifications you have opted in to.
• To operate paid subscriptions purchased through Google Play or Apple.
• To diagnose crashes and improve stability of the App.
• To understand, in pseudonymous or aggregate form, how the App and our websites are used, so we can improve them (Firebase Analytics, Google Analytics 4).
• To send the OLENRI Clarity newsletter, only if you have subscribed and confirmed your subscription.
• To display Gold Club stories and comments that you choose to publish.

We do not sell your personal data. We do not use your data for behavioural advertising or ad-tracking.

8. Data retention and deletion

• Clarity reports, memory, Weekly Mirror, Identity Card, Time Capsule — retained until you delete them individually or delete your account.
• Account record (email, hashed password, OAuth sub, display name) — retained until you delete your account.
• Soft-deleted account records — when you tap "Delete account" in the app, your account is marked for deletion and retained for a 15-day recovery grace window, after which it is permanently purged. Signing in again during the window restores the account with its original data.
• Voice recordings — deleted immediately after transcription (typically within a few seconds).
• Generated TTS audio — stored on our server no longer than 30 minutes and then automatically purged.
• Crash logs and performance traces (Sentry) — retained up to 90 days, then purged.
• Purchase history (RevenueCat) — retained for the duration of the subscription plus applicable financial-record requirements (typically up to 7 years).
• IP addresses — used for rate-limiting in short-lived counters that are automatically deleted within about 24 hours (sign-in and password-reset attempt limits are also counted per email address; those records are deleted within about an hour); web-server access logs may retain IP + timestamp for up to 90 days for security monitoring.
• Newsletter subscription records — retained while you remain subscribed. Unsubscribing (one click, no login needed) stops all further emails immediately, but the subscription record itself (email, language, status) is kept for compliance/audit purposes unless you request full deletion by emailing us.
• Gold Club stories, comments and reactions — when you delete a story it is immediately hidden from all members; the hidden copy is kept in our systems until you ask us by email to erase it. Deleting your OLENRI account does not automatically remove content you have published in Gold Club; email us and we will permanently erase it.
• App ratings and reviews, article feedback — retained while published; email us to have yours removed.

9. Account deletion

You can delete your OLENRI account and associated personal data at any time:

• In the App: Settings → Account → Delete account.
• By email: send a request from your account email to [email protected].
• Web: full instructions and data-scope details are available at /delete-account.

In-app deletions are registered immediately; the account becomes inaccessible from the app at once, and a 15-day recovery grace window lets you undo an accidental deletion by simply signing in again — after which the account and its data are permanently purged. Email deletion requests are completed within 30 days of ownership verification. Some records may be retained where the law requires (e.g. financial records for tax purposes) or where anonymised data is used for aggregate analytics — see Section 8.

10. Legal basis (GDPR / UK GDPR)

• Performance of contract — to provide the app features you request.
• Legitimate interests — to keep the service secure, prevent abuse, improve stability, and measure feature and website usage in pseudonymous or aggregate form (Firebase Analytics, Google Analytics 4). You can object at any time by emailing us.
• Consent — for AI processing of your content, push notifications, the newsletter (confirmed by double opt-in; one-click unsubscribe in every email) and Gold Club publications. You can withdraw consent at any time in the App settings or via the unsubscribe link; to withdraw a Gold Club publication, delete your story on olenri.club or email us to remove comments or all of your Gold Club content.
• Legal obligation — for financial-record retention related to paid subscriptions.

11. Your rights

Wherever you live you have the following rights, and we honour them on request:

• Access — request a copy of your data.
• Correction — update inaccurate data.
• Deletion — via in-app Settings → Delete account (registered immediately; permanently purged after a 15-day recovery grace window), or by email (see Section 9; completed within 30 days of ownership verification).
• Portability — request your data in machine-readable form.
• Object / restrict — object to processing based on legitimate interests.
• Complain — lodge a complaint with your local data-protection authority.

12. International transfers

Our sub-processors (OpenAI, Sentry, RevenueCat, Emergent (push notification delivery), Trustpilot, Resend, Google (Firebase Analytics, Google Analytics 4), Cloudflare, Anthropic) are based in the United States and Europe. When data is transferred outside your country we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards published by those vendors.

13. Security

All data is transmitted over HTTPS/TLS. Passwords are stored as bcrypt hashes. Database connections use TLS. Employee access to production data is restricted and logged. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data using widely accepted industry practices.

14. Children

OLENRI is not intended for children under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has used the App, email [email protected] and we will remove the related data.

15. Sensitive content note

OLENRI is not a medical, mental-health, legal or financial advisor. If you are in crisis, please contact your local emergency services or a mental-health professional. In the United States you can dial 988. Internationally see findahelpline.com.

16. Changes to this policy

We will notify you of material changes by updating the "Last updated" date above and, where appropriate, by an in-app message before the change takes effect. Continued use of OLENRI after such a notice constitutes acceptance of the updated policy.

17. Contact

OLENRI · https://olenri.com
Privacy questions, data-subject requests or complaints — email [email protected].