Privacy Policy

1. Who we are

9G Labs LLC, a United States company, is responsible for the information described here. Contact us at support@ordara.app.

2. Age

Ordara is for people aged 13 and older, or 14 and older in Canada. When you start, we ask the month and year you were born. If you are below that age, you cannot create an account, and we do not keep what you entered. If you are under 18, you should have a parent or guardian's permission to use Ordara. If we learn an account belongs to someone below the applicable minimum age, we delete it.

3. Information you give us

• Account — your email address, or the identity Apple or Google provides when you sign in with them. Sign-in codes are sent by email; the app does not ask you to create a password. When you create your account we also record whether you ticked the box to receive tips, new features, and offers from us by email.
• About you — the month and year you were born (not the day), your display name, and the answers you give when setting up (where you are in school, how your week looks, how school is feeling, how long you can focus, what else fills your afternoons). These shape your plan and how Ordo talks to you. We do not use these answers for advertising or send them to our analytics tool.
• Your schoolwork — classes, assignments, due dates, notes, study blocks, and your plan.
• What you import — photos, screenshots, documents, typed text, and voice notes you give the app so it can create assignments.
• Ordo conversations — your messages and attachments, Ordo's proposed changes, your approvals and their results, and up to 20 short facts you ask Ordo to remember. You can see and delete those facts in Settings.
• Study Together — the friends you add, the invitations you send and accept, sessions you join, and anyone you block or report. Friends see your display name and whether you are in a session, nothing else. For invitation notifications, we keep the app language selected on each signed-in device alongside its push installation so the invitation arrives in that language.
• Calendar — if you connect Apple or Google Calendar, Ordara reads busy times so it can plan around them. It does not write to your calendar. Event titles are read only if you turn on "Allow Ordo to read calendar event titles" and are used only for the plan Ordo is building at that moment.
• Feature requests — requests, comments, and votes you post on the in-app board. Other signed-in students can read them; your name is not shown.
• Support — your email and message when you write to us.

4. Information collected automatically

• Usage data — which screens you open and which features you use, recorded as patterns, counts, and categories (for example, that an import found four assignments). This is linked to your account. It does not include assignment titles, class names, notes, your setup answers, or anything you say to Ordo. We also count setup steps in aggregate, without linking those counts to an account or device.
• Device and other information — app version, operating system, device model, app language, time zone, and the country your device is set to, which we keep with your account to apply the right age rule. App language is Other Data used for app functionality.
• IP address — Our providers see your IP address when the app connects to them. We use it transiently to limit abuse, not to determine your location. For Apple and Google sign-in, we keep one-way hashes of IP addresses and sign-in tokens, with attempt counts. Records older than one day are removed when a later attempt passes the rate limit. Hashes from the older setup-abuse checks are kept for up to 90 days.
• Subscription state — whether you have Ordara Pro and your purchase history from Apple.
• AI usage — how many AI requests you make and roughly what they cost us, so we can apply limits.
• Crash reports — if the app crashes, a report with the technical trace, your device model, operating system, app version, and your account ID goes to Sentry so we can fix it. It does not include what was on your screen, your schoolwork, or anything you typed.
• Update checks — the app asks Expo's update server for new versions. That request carries the app's platform, version, and update channel, not your account.

5. AI features and OpenAI

Ordo and the import features are powered by OpenAI. When you use them, Ordara sends OpenAI what that request needs: your message and any attachment, the recent conversation, a summary of your classes and assignments, your display name, your saved Ordo facts and tone, the app language selected from five supported values (en, es, fr, de, or ja), and, only if you turned the switch on, calendar event titles. The app language is a transient part of each AI request, used when your message does not establish a language; it is not saved as conversation content. We tell OpenAI not to store these requests, and under OpenAI's API terms your content is not used to train their models. OpenAI may retain request content for abuse monitoring, generally for up to 30 days, with longer retention for legal or safety reasons. We do not use your content to train any model. Before your first AI request, the app asks your permission and explains this. To withdraw it, email support@ordara.app or delete your account; we turn Ordo off for you within 30 days.

For Safari imports, we send the page text, current date and your time zone to OpenAI to find assignments. We keep only the assignments and classes you approve, plus technical records to prevent duplicate saves. We do not save the page or its address.

6. If you are under 18

We do not use anyone's information for targeted advertising, sell it, or build profiles. If you are under 16 in the UK, EEA, Switzerland, or Canada, usage data (Section 4) is not collected and there is no switch for it.

7. Your choices

• Usage data. — In the UK, EEA, Switzerland, and Canada, Settings → Privacy → Share usage data is off until you turn it on and can be turned off any time. Elsewhere, email support@ordara.app to stop usage data for your account and delete what was collected; we do it within 30 days.
• AI permission. — Email support@ordara.app to withdraw it, or delete your account. Ordo and import stop.
• Calendar titles. — Settings → Calendar.
• Ordo memory. — Settings → Memory shows every saved fact; delete any of them.
• Notifications. — Reminders are scheduled on your device by you. Change them in Settings or turn them off in iOS Settings.
• Study Together. — Remove or block friends in Settings → Friends. Reports go to us.
• Subscription. — Manage or cancel in iOS Settings → your name → Subscriptions. Apple handles billing and refunds.
• Delete your account. — Me → Account & Security → Delete account. This removes your account, content, conversations, and Study Together data from our systems and revokes the Apple or Google sign-in grant. Deleting your account cannot be undone. To have the records held by our subscription and analytics providers removed as well, email support@ordara.app. Apple keeps its own record of your purchases.
• Marketing email. — Every email we send about tips, features, or offers has an unsubscribe link, or email support@ordara.app. In the UK, EEA, Switzerland, and Canada the box starts unticked and we only email you if you tick it. These emails are the same for everyone who opted in; we do not use your information to personalise them.
• Access or export. — Email support@ordara.app for a copy of everything we hold; we answer within 30 days.

8. Who helps us process your information

We do not sell or rent personal information and do not share it for advertising. We use these providers, each under a contract that limits them to working for us: Supabase (accounts, content, and files; United States), OpenAI (AI features, Section 5; United States), PostHog (usage data; United States), Sentry (crash reports; United States), RevenueCat (subscription status, with your email and name so we can find your purchase when you write in; United States), Apple and Google (sign-in, payments, calendar when connected), Expo (Study Together push tokens and localized invitation copy, and app updates; United States), Cloudflare (Turnstile bot protection for sign-in and the website; global network), and Resend (sending account and security emails; United States). Each of them is contractually required to protect your information to the same standard as this policy. We may also disclose information when the law requires it, to protect someone's safety, or if the business is sold, in which case this policy continues to apply. If you are in Japan: your information is transferred to the United States, which has no single national privacy law like Japan's APPI; our providers protect it under the contracts described above.

9. How long we keep it

Your account, schoolwork, conversation messages, and Study Together data: until you delete them or your account. Files and photos you attach in an Ordo chat: until that chat has gone 30 days without a new message, then deleted; the chat's text stays. When you start a new chat with Ordo, your previous chat ends: you can no longer see it, and its messages and attachments are deleted 30 days after it ended. Usage data: 12 months. AI usage counters: 90 days; cost records: 24 months. Study Together push tokens and the app language stored alongside each push installation: until you sign out on that device or delete your account. Safety reports: 24 months. Feature requests: until you delete them or your account. Subscription records at RevenueCat: while your account exists, then on request. Email delivery records at Resend: only as long as needed to deliver and troubleshoot email, then deleted under its retention policy. OpenAI's abuse-monitoring copy: generally up to 30 days, with the exceptions in Section 5. Crash reports at Sentry: 90 days.

10. California residents

We collect the categories in Sections 3 and 4 for the purposes in this policy and keep them for the periods in Section 9. We do not sell or share personal information as California defines those terms, and we do not use it for cross-context behavioural advertising. You may ask what we hold, correct it, delete it, and you will not be treated differently for asking.

11. UK, EEA, and Swiss residents

Ordara is operated from the United States and your information is transferred there under standard contractual clauses and, where a provider is certified, the EU–US Data Privacy Framework. We process your information to provide the app (contract), for our legitimate interests in keeping it working and secure, and, for usage data, with your consent, which you give and withdraw with the switch in Settings → Privacy. You have rights of access, rectification, erasure, restriction, portability, and objection; we answer within one month. You can complain to your data protection authority.

12. Website and waitlist

ordara.app uses a cookieless form of PostHog that stores nothing in your browser, so it shows no cookie banner. If you join the waitlist we keep your email, the name you optionally give, which phone you use, and how you reached the page, and use them only to email you about the launch; every email has an unsubscribe link. We use Cloudflare Turnstile to protect sign-in and the waitlist form from bots. It processes the security signals needed to distinguish people from automated traffic, but does not access, store, or transmit what you type; details are in Cloudflare's Turnstile Privacy Addendum.

13. Security

Connections are encrypted; each account's data is isolated from every other's; sign-in tokens live in the device keychain; files are stored in private buckets readable only by you. No system is perfectly secure. If a breach affects you we will tell you.

14. Beta builds

If you are using a TestFlight (beta) build, features may change or occasionally break, and we may contact you about the beta at the address you signed up with. Everything in this policy applies to beta builds too.

15. Changes

We update the date above when this policy changes and tell you in the app or by email before significant changes take effect.

16. Contact

9G Labs LLC — support@ordara.app