Privacy Policy

This Privacy Policy describes how Graphikate Private Limited ("Graphikate", "we", "us") collects, uses, and protects your information when you use Ori — Your AI Pet Companion ("Ori", "the App").

We built Ori to help pet parents care for their pets. Your pet's health data and your conversations with Ori are personal — we treat them that way. This policy explains exactly what we collect, why, and what we do with it. If anything is unclear, email us at support@oripet.co.

1. Who we are

Ori is built and operated by Graphikate Private Limited, a Singapore private limited company. You can reach us at support@oripet.co for any privacy question, complaint, or data request.

2. What we collect

When you create an account

• Email address (required)
• Name (optional)
• Password — we store a bcrypt hash. We never see or store your actual password.
• Profile photo (optional)
• Time zone (defaults to Asia/Singapore, used for reminder timing)
• Voice preference for Ori's spoken responses

When you sign in with Google

If you choose Google sign-in, we receive your Google email, name, and profile picture. We store Google's OAuth tokens (encrypted at rest) so you stay signed in. We do not access your Google contacts, drive, calendar, or any other Google data unless you separately enable Calendar Sync inside the app.

When you add your pet

• Pet name, species, breed, sex, date of birth (optional)
• Microchip number (optional)
• Photos and care notes
• Sizing measurements (collar, harness, weight)

When you log your pet's care

• Weight records, vaccinations, medications, vet visit notes, walks, expenses, daily health pulses (mood, appetite, digestion)
• Vet documents you upload (PDFs, images)
• Reminders (medication schedules, vaccination due dates)
• Triage assessments when you describe symptoms to Ori

When you chat with Ori

• Your messages and Ori's responses
• Voice — when you tap to talk, your speech is transcribed to text. On iOS this runs on your device using Apple's Speech framework (SFSpeechRecognizer) and the audio does not leave your phone. On Android, transcription uses your device's built-in Google speech recognition, which depending on your device and language may process the audio on Google's servers to produce the text. Either way we receive only the resulting text, which we treat the same as any other chat message. Ori's spoken responses are generated via OpenAI TTS.
• Conversation summaries and inferred "pet facts" (e.g. "Has been scratching behind ears for a week") so Ori remembers context across sessions.
• Token counts and cost (so we can manage AI spending)

When you subscribe to Ori+

• Your payment is processed by Apple through the App Store In-App Purchase system. Apple is the merchant of record.
• We never see, store, or process your card number, CVV, or billing address. Those go to Apple, not to us.
• From Apple, via RevenueCat (our subscription-state provider), we receive an opaque subscription identifier and the current subscription state (active / lapsed / in trial / refunded). RevenueCat sees the subscription identifier; it does not receive your Apple ID, email, name, or payment details.
• We do not use any third-party payment processor other than Apple and RevenueCat for Ori+ subscriptions. We do not run our own card-payment surface.

When you use the community

• Posts you publish (photos, videos, captions)
• Comments, hearts, follows
• Pet profile bio and visibility settings
• Reviews you write for vet clinics, pet shops, and other listings

Automatically collected

• Push notification token (only if you enable push reminders)
• Time zone (from your device, used for reminder timing)
• App version (so we know if you're hitting an old bug)
• IP address of your request — logged briefly by Vercel for security and abuse prevention, not retained long-term

What we do not collect

• We do not use any third-party analytics SDK (no Google Analytics, Mixpanel, Amplitude, PostHog, Sentry, or Firebase Analytics)
• We do not use advertising identifiers (no IDFA, no Google Advertising ID)
• We do not track you across other apps or websites
• We do not sell your data to anyone, ever
• We do not train AI models on your data

3. Legal basis for processing

For users in the EU/UK (GDPR) and equivalent regimes, we process your personal data on the following bases:

• Contract: account creation, pet record management, AI chat, walks, reminders. We need to process this data to deliver the service you signed up for.
• Consent: push notifications, location, calendar, microphone, HealthKit. You grant these per-feature and can withdraw at any time.
• Legitimate interest: security logging, fraud prevention, abuse moderation.
• Legal obligation: responding to lawful requests from authorities.

For users in Singapore, processing is performed in accordance with the Personal Data Protection Act 2012 (PDPA) on the basis of your deemed consent when you create an account and your express consent for permission-gated features.

4. How we use what we collect

• To make Ori work — store your pet's data, deliver reminders, generate AI responses, sync to your calendar (if you enable that)
• To answer your questions — when you chat with Ori, your messages go to DeepSeek (routine chat) or Anthropic Claude (emergency triage) so Ori can reason about your pet's situation
• To send notifications you asked for — vaccination reminders, medication reminders, vet appointment reminders
• To bill you — if you subscribe to Ori+, Apple's In-App Purchase system (via RevenueCat) processes your payment. We never see your credit card number.
• To respond to you — if you email us, we use your message to reply
• To prevent abuse — to detect spam, fraud, or attacks against the service

We do not use your data for advertising or to recommend products to you.

5. Who we share it with (and why)

We use a small number of third-party service providers to run Ori. They process data on our behalf and only for the purposes described here.

About the AI providers specifically: Routine chat messages go to DeepSeek via their API. Emergency triage transcripts go to Anthropic Claude. Pet Pantry product photos go to Google Gemini Flash-Lite for OCR. Ori's spoken responses on iOS are generated by OpenAI TTS, and conversation snippets are sent to OpenAI gpt-4o-minito extract pet-care facts so Ori can remember context across sessions. All providers contractually agree under their standard API terms not to use API data for model training. Anthropic retains API data for up to 30 days for trust and safety review; DeepSeek, Google, and OpenAI do not retain API inputs and outputs.

Voice transcription. On iOS, when you talk to Ori, transcription uses Apple's Speech framework (SFSpeechRecognizer) on your iPhone and your voice audio does not leave your phone. On Android, transcription uses your device's built-in Google speech recognition; depending on your device and language, Google may process the audio on its servers to produce the text, acting as the processor for that transcription. In both cases we receive only the resulting text, which we treat the same as any other chat message.

We do not share your data with: advertisers, data brokers, marketing companies, social networks (other than Google for OAuth), or any party for commercial use.

6. Where your data is stored

• Database: Turso, Japan (aws-ap-northeast-1) — your account, pets, conversations, logs
• Files: Cloudflare R2 (multi-region, EU/US)
• Compute: Vercel (US and global edge)
• Routine AI chat: DeepSeek (China)
• Emergency AI triage: Anthropic Claude (United States)
• Voice transcription: on-device on iOS (Apple Speech framework). No server involved.
• Spoken responses (TTS) on iOS: OpenAI (United States)
• Pet-fact memory extraction: OpenAI (United States)
• Email: Resend (United States and EU)
• Backups: nightly SQL dump to Cloudflare R2 with 30-day rolling retention, plus Turso's own point-in-time restore (24h on the current plan)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data transfer rules: your account and pet data are processed in Japan, with onward transfers to the United States, China, and the EU as listed above. We rely on each processor's standard contractual clauses or equivalent safeguards. By creating an account and using the chat feature, you consent to these transfers. Voice transcription on iOS runs on your device and does not involve a cross-border transfer.

7. How long we keep it

• Active account data: as long as your account is active
• After account deletion: deletion is initiated from Settings → Account → Delete Account, requires a confirmation link sent to your registered email, and then enters a 7-day grace period during which you can cancel from the in-app banner or the cancel link in the email. After 7 days a scheduled job hard-deletes your account, all pet records, photos, documents, posts, journal entries, chat history, and any other data identifiable to you, and purges files from Cloudflare R2, videos from Cloudflare Stream, and your contact from Resend. Nightly backups age out on the 30-day rolling retention schedule, so the last copy of your data leaves our backup store within 30 days of the final snapshot date. We retain a minimal audit log entry (user ID, deletion timestamp, IP) for 12 months for fraud and abuse investigation.
• Voice audio: on iOS, transcription runs on your device using Apple's Speech framework, so no audio is sent to a server and there's nothing for us to retain. On Android, your device's Google speech recognition may process the audio on Google's servers under Google's privacy policy. Ori does not store the audio; we keep only the transcribed text as part of your chat.
• AI cost logs: retained for 12 months for abuse prevention
• Email correspondence: retained 24 months unless you ask us to delete sooner

8. Your rights

You can:

• Access your data — most of your data is visible inside the app. For a JSON archive of your data, email privacy@oripet.co and we will respond within 30 days.
• Delete your account — Settings → Account → Delete Account. Deletion requires you to confirm a link we email to your registered address; the account then enters a 7-day grace period during which you can cancel. After grace, we hard-delete all data we hold about you (account, pets, posts, photos, journals, scans) and purge files from Cloudflare R2, videos from Cloudflare Stream, and your contact from Resend. We retain a minimal audit log (user ID, deletion timestamp, IP) for 12 months for fraud and abuse investigation. Your sign-in connection with Apple or Google can be revoked from your Apple ID settings or Google Account permissions.
• Withdraw consent — turn off any optional permission (calendar, location, photos, microphone, notifications) in your device settings at any time.
• Object or restrict processing — email us and we'll discuss
• Lodge a complaint — Singapore residents can complain to the Personal Data Protection Commission (PDPC). EU residents can complain to their local data protection authority.

We respond to all data requests within 30 days.

9. Children

Ori is not directed at anyone under 13. You must be at least 13 to create an account. We do not knowingly collect personal information from anyone under 13. If you are under 13, please do not create an account. If we learn that we have collected information from a user under 13, we will delete it promptly.

In jurisdictions where the digital age of consent is higher than 13 (for example, parts of the EU), the local minimum age applies.

10. Security

We protect your data with:

• HTTPS for all connections, no exceptions
• Bcrypt password hashing
• Encrypted OAuth tokens at rest
• Time-limited session tokens (JWT)
• Row-level access control in our database
• Limited authorised personnel access to production systems

Database storage (Turso/AWS S3) and object storage (Cloudflare R2) are encrypted at rest by our infrastructure providers.

No system is perfectly secure. If we suffer a data breach affecting your personal data, we will notify you and any required authority within the timelines required by law: 72 hours under GDPR, and without undue delay under the Singapore Personal Data Protection Act.

11. AI and your pet's health

Ori is not a veterinarian. Ori provides general information and guidance based on what you tell it. Always consult a licensed vet for any medical concern. Ori's responses are not medical advice and should not be relied on for diagnosis or treatment decisions.

We send your routine chat messages to DeepSeek and your emergency triage transcripts to Anthropic Claude to generate responses. Pet Pantry product photos go to Google Gemini Flash-Lite for ingredient OCR. Ori's spoken responses on iOS are generated by OpenAI TTS, and conversation snippets are sent to OpenAI gpt-4o-mini to extract pet-care facts so Ori can remember context. Voice transcription on iOS runs on your device using Apple's Speech framework — your voice audio does not leave your phone. None of these providers retain or train on your data under their standard API terms of service. We do not use your conversations to train any AI model.

12. Changes to this policy

We may update this policy. When we do, we'll change the "Last updated" date at the top and, if the changes are significant, we'll notify you in the app before they take effect.