Legal

Privacy Policy

Effective 4 September 2026 · Last updated 6 September 2026

Ordara is a school planner made by 9G Labs LLC ("we," "us"). This policy explains what Ordara collects, why, who helps us process it, how long we keep it, and the choices you have. It covers the Ordara app and the ordara.app website.

1. Who we are

9G Labs LLC, a United States company, is responsible for the information described here. Contact us at support@ordara.app.

2. Age

Ordara is for people aged 13 and older. When you start, we ask the month and year you were born. If you are under 13 you cannot create an account, and we do not keep what you entered. If you are under 18, you should have a parent or guardian's permission to use Ordara. If we learn an account belongs to someone under 13, we delete it.

3. Information you give us

• Account — your email address, or the identity Apple or Google provides when you sign in with them. Sign-in codes are sent by email; the app never asks you to create a password. When you create your account we also record whether you ticked the box to receive tips, new features, and offers from us by email.
• About you — the month and year you were born (never the day), your display name, and the answers you give when setting up (where you are in school, how your week looks, how school is feeling, how long you can focus, what else fills your afternoons). These shape your plan and how Ordo talks to you. They are never used for advertising and never sent to our analytics tool.
• Your schoolwork — classes, assignments, due dates, notes, study blocks, and your plan.
• What you import — photos, screenshots, documents, typed text, and voice notes you give the app so it can create assignments.
• Ordo conversations — your messages, attachments, and up to 20 short facts you ask Ordo to remember. You can see and delete those facts in Settings.
• Study Together — the friends you add, the invitations you send and accept, sessions you join, and anyone you block or report. Friends see your display name and whether you are in a session, nothing else.
• Calendar — if you connect Apple or Google Calendar, Ordara reads busy times so it can plan around them. It never writes to your calendar. Event titles are read only if you turn on "Allow Ordo to read calendar event titles" and are used only for the plan Ordo is building at that moment.
• Feature requests — requests, comments, and votes you post on the in-app board. Other signed-in students can read them; your name is not shown.
• Support — your email and message when you write to us.

4. Information collected automatically

• Usage data — which screens you open and which features you use, recorded as patterns, counts, and categories (for example, that an import found four assignments). This is linked to your account. It never includes assignment titles, class names, notes, your setup answers, or anything you say to Ordo.
• Device information — app version, operating system, device model, language, time zone, and the country your device is set to, which we keep with your account to apply the right age rule.
• IP address — seen by our providers when the app connects to them. We do not store it or turn it into a location. Before you have an account, a one-way hash of it is kept for up to 90 days to limit abuse of the setup step.
• Subscription state — whether you have Ordara Pro and your purchase history from Apple.
• AI usage — how many AI requests you make and roughly what they cost us, so we can apply limits.
• Crash reports — if the app crashes, a report with the technical trace, your device model, operating system, app version, and your account ID goes to Sentry so we can fix it. It never includes what was on your screen, your schoolwork, or anything you typed.
• Update checks — the app asks Expo's update server for new versions. That request carries the app's platform, version, and update channel, not your account.

5. AI features and OpenAI

Ordo and the import features are powered by OpenAI. When you use them, Ordara sends OpenAI what that request needs: your message and any attachment, the recent conversation, a summary of your classes and assignments, your display name, your saved Ordo facts and tone, and, only if you turned the switch on, calendar event titles. We tell OpenAI not to store these requests, and under OpenAI's API terms your content is not used to train their models. OpenAI may keep a copy for up to 30 days to monitor for abuse, then deletes it. We do not use your content to train any model. Before your first AI request, the app asks your permission and explains this. To withdraw it, email support@ordara.app or delete your account; we turn Ordo off for you within 30 days.

6. If you are under 18

We never use anyone's information for targeted advertising, sell it, or build profiles. If you are under 16 in the UK, EEA, Switzerland, or Canada, usage data (Section 4) is never collected and there is no switch for it.

7. Your choices

• Usage data. In the UK, EEA, Switzerland, and Canada, Settings → Privacy → Share usage data is off until you turn it on and can be turned off any time. Elsewhere, email support@ordara.app to stop usage data for your account and delete what was collected; we do it within 30 days.
• AI permission. Email support@ordara.app to withdraw it, or delete your account. Ordo and import stop.
• Calendar titles. Settings → Calendar.
• Ordo memory. Settings → Memory shows every saved fact; delete any of them.
• Notifications. All reminders are scheduled on your device by you. Change them in Settings or turn them off in iOS Settings.
• Study Together. Remove or block friends in Settings → Friends. Reports go to us.
• Subscription. Manage or cancel in iOS Settings → your name → Subscriptions. Apple handles billing and refunds.
• Delete your account. Me → Account & Security → Delete account. This removes your account, content, conversations, and Study Together data from our systems and revokes the Apple or Google sign-in grant. It is immediate and cannot be undone. To have the records held by our subscription and analytics providers removed as well, email support@ordara.app. Apple keeps its own record of your purchases.
• Marketing email. Every email we send about tips, features, or offers has an unsubscribe link, or email support@ordara.app. In the UK, EEA, Switzerland, and Canada the box starts unticked and we only email you if you tick it. These emails are the same for everyone who opted in; we do not use your information to personalise them.
• Access or export. Email support@ordara.app for a copy of everything we hold; we answer within 30 days.

8. Who helps us process your information

We do not sell or rent personal information and do not share it for advertising. We use these providers, each under a contract that limits them to working for us: Supabase (accounts, content, and files; United States), OpenAI (AI features, Section 5; United States), PostHog (usage data; United States), Sentry (crash reports; United States), RevenueCat (subscription status, with your email and name so we can find your purchase when you write in; United States), Apple and Google (sign-in, payments, calendar when connected), Expo (delivering Study Together invitation notifications and delivering app updates), Cloudflare (Turnstile bot protection for sign-in and the website; global network), and Resend (sending account and security emails; United States). Each of them is contractually required to protect your information to the same standard as this policy. We may also disclose information when the law requires it, to protect someone's safety, or if the business is sold, in which case this policy continues to apply. If you are in Japan: your information is transferred to the United States, which has no single national privacy law like Japan's APPI; our providers protect it under the contracts described above.

9. How long we keep it

Your account, schoolwork, conversations, and Study Together data: until you delete them or your account. Usage data: 12 months. AI usage counters: 90 days; cost records: 24 months. Notification tokens: until you sign out or delete your account. Safety reports: 24 months. Feature requests: until you delete them or your account. Subscription records at RevenueCat: while your account exists, then on request. Email delivery records at Resend: only as long as needed to deliver and troubleshoot email, then deleted under its retention policy. OpenAI's abuse-monitoring copy: up to 30 days. Crash reports at Sentry: 90 days.

10. California residents

We collect the categories in Sections 3 and 4 for the purposes in this policy and keep them for the periods in Section 9. We do not sell or share personal information as California defines those terms, and we do not use it for cross-context behavioural advertising. You may ask what we hold, correct it, delete it, and you will not be treated differently for asking.

11. UK, EEA, and Swiss residents

Ordara is operated from the United States and your information is transferred there under standard contractual clauses and, where a provider is certified, the EU–US Data Privacy Framework. We process your information to provide the app (contract), for our legitimate interests in keeping it working and secure, and, for usage data, with your consent, which you give and withdraw with the switch in Settings → Privacy. You have rights of access, rectification, erasure, restriction, portability, and objection; we answer within one month. You can complain to your data protection authority.

12. Website and waitlist

ordara.app uses a cookieless form of PostHog that stores nothing in your browser, so it shows no cookie banner. If you join the waitlist we keep your email, the name you optionally give, which phone you use, and how you reached the page, and use them only to email you about the launch; every email has an unsubscribe link. We use Cloudflare Turnstile to protect sign-in and the waitlist form from bots. It processes the security signals needed to distinguish people from automated traffic, but does not access, store, or transmit what you type; details are in Cloudflare's Turnstile Privacy Addendum.

13. Security

Connections are encrypted; each account's data is isolated from every other's; sign-in tokens live in the device keychain; files are stored in private buckets readable only by you. No system is perfectly secure. If a breach affects you we will tell you.

14. Beta builds

If you are using a TestFlight (beta) build, features may change or occasionally break, and we may contact you about the beta at the address you signed up with. Everything in this policy applies to beta builds too.

15. Changes

We update the date above when this policy changes and tell you in the app or by email before significant changes take effect.

16. Contact

9G Labs LLC — support@ordara.app