Privacy Policy

Orim ("we", "us") operates orim.co. The data controller responsible for your personal data is Orim Press LLC. For any privacy question or to exercise your rights, contact us at hello@orim.co.

We collect the following categories of personal data:

• Account data — information from creating or signing in to your account, such as your name, email address, and, depending on your sign-in method, your phone number.
• Reading data — the details you enter to generate charts and readings, and the readings you request. This includes the date, time, and place of birth you provide when you cast an astrological chart, the question you ask, and any note you write or dictate onto a saved reading.
• Order data — information related to purchases, including items ordered, delivery address, and contact details. Payment card details are processed securely by our payment provider and are not stored by us.
• Content, camera & microphone data — content you create or save, such as shared cards and journal notes. If you use a camera feature, such as scanning a printed card, photographing a spread, or the selfie reading, we process the image to provide that feature. A photograph you choose to keep with a saved reading, and photographs of a deck you add yourself, are stored in your account. If you dictate a note, your device's own speech recognition converts the speech to text and we receive only the text.
• Usage & device data — information about how you use Orim and the device and browser you use, collected automatically through cookies and similar technologies (see our Cookie Policy).

• To provide readings, charts, games, and your account.
• To process and ship orders and provide customer support.
• To operate, secure, and improve the service.
• To send service messages and, with your consent, marketing you can opt out of at any time.
• To comply with legal obligations.

We do not sell your personal data, and we do not use your reading or account data to train third-party commercial AI models.

We rely on: contract (to provide what you sign up or pay for), consent (for marketing and non-essential cookies), legitimate interests (to secure and improve the service), and legal obligation (e.g. tax and accounting records).

We share personal data only with service providers who process it on our behalf — including providers that help us with hosting and infrastructure, authentication, analytics, payment processing, email delivery, and order fulfilment — and only as needed to run the service. Each is bound to use your data only as instructed. We may also disclose data where required by law.

Our providers are Google (Firebase hosting, sign-in, database, App Check, AI Logic), Apple and Google sign-in, Open-Meteo (place lookup for charts), and Resend (email). You can delete your account in the app under Settings.

Readings that combine several cards are written by an AI model (Google Gemini, via Firebase AI Logic) from the cards you drew and the question you typed. That text is processed by Google as our service provider.

We host data on Google Cloud, and the hosting region depends on where you are: the United States for users in the Americas, Belgium (within the EU) for users in Europe, and Singapore for users in the Asia-Pacific region. Some service providers may process limited data in other countries; where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We keep personal data only as long as needed for the purposes above — for the life of your account, and afterwards only as required for legal, tax, or dispute-resolution reasons — then delete or anonymise it.

Subject to your location, you may have the right to access, correct, delete, restrict, or port your data, to object to certain processing, and to withdraw consent. If you are in California, you may request access to or deletion of your personal information and are entitled not to be discriminated against for exercising these rights; we do not sell or share your personal information as defined by the CCPA/CPRA.

To exercise any right, email hello@orim.co. You also have the right to complain to your local data protection authority.

Orim is not intended for children under 16. We do not knowingly collect data from anyone under 16; if you believe a child has provided us data, contact us and we will delete it.

We use technical and organisational measures to protect your data, but no method of transmission or storage is completely secure.

The Orim app asks for these permissions only when you use the feature that needs them, and you can withdraw any of them in your device settings.

• Camera — to scan a printed card, photograph a spread, and run the selfie reading. Card recognition happens on your device. An image leaves your device only if you choose to save it with a reading.
• Microphone — to dictate a journal note. Your device's own speech recognition performs the conversion, and we receive only the resulting text, never an audio recording.
• Notifications — to show reminders you turn on, such as your daily card. These are scheduled on your device, and nothing is sent to us or through our servers to deliver them.
• Face tracking (Aura Scan) — on iPhones with Face ID, the Aura Reading uses the TrueDepth camera to track the position of your face and the shape of your mouth so that a card and accessories can sit on your face in real time. This face data is processed only on your device, is never stored, and is never sent to us or to anyone else. It is discarded frame by frame while the feature is open. The only thing that can leave your device is a photo or video of the finished scene, and only if you choose to save or share it.

We may update this policy. Material changes will be posted here with an updated date, and where required we will notify you.