Orilem Privacy Policy

Information and purposes

• Content you choose to share with the coach: messages, recognized speech, conversation history and selected relevant observations are processed for coaching replies, summaries, weekly reflections, automated safety checks and spoken playback.
• Saved records and preferences: conversations, reflections, mood check-ins, gratitude entries, practice activity, chosen steps, feedback, reminders and profile preferences support your history, progress and personalization.
• Service and subscription information: installation and request identifiers, app version, language, usage-limit information, app-verification information and signed Apple subscription information support secure access, abuse prevention and Pro access. Network addresses are processed when requests reach our infrastructure. Apple handles payments; Orilem does not receive your payment-card details.
• Optional analytics and acquisition measurement: limited interaction events and Apple Ads campaign information help us understand app use and acquisition when you enable the relevant analytics choice.

AI processing and coach context

When you allow AI processing and use an AI feature, Orilem sends the necessary text and chosen preferences through our server to OpenAI. A reply uses the current conversation. A session summary uses the conversation being summarized, and a weekly reflection uses selected saved conversation records. Limited message text may also be sent to OpenAI’s moderation service for automated safety checks. Spoken playback sends the text to OpenAI’s voice service.

Coach context can include a small relevant selection of previous conversation summaries, saved reflections, check-ins, practice results, feedback and chosen steps, according to your memory settings. Response ratings and any reason you select can help the coach take your feedback into account in future requests. This is context-based personalization, not a claim that a separate AI model is trained for you.

You can disable past observations, choose source categories, exclude an observation or forget past observations for future requests. These choices do not delete the original saved records or undo information already processed. The current conversation remains available while you use the coach.

Personal journal notes are separate from messages to the coach. They are held in a separate local store, are not automatically included in coach context or weekly reflections, and are not placed in the app’s CloudKit store. If you explicitly share a note with the coach or paste it into a conversation, the text you share is processed as conversation content.

A session’s follow-up invitation may be generated as part of its AI summary. To refresh other reminder wording, Orilem sends limited language, activity-category, recency and lock-screen privacy choices. That additional request does not include your conversation transcript or private journal text.

Dictation and spoken playback

Voice input requires microphone and speech-recognition permissions. Dictation uses Apple Speech. Depending on the device, language and service availability, recognition may take place on the device or through Apple. When you send a voice message, our coaching server receives the recognized text rather than a recording from your microphone.

Spoken coach replies are audio generated from text. Orilem can cache this generated audio on your device and temporarily on our server for playback. It is not a stored microphone recording. Device-cache cleanup is age-based and also limits the number of cached files; it runs when the audio feature is used, rather than guaranteeing removal at a particular time while the app is inactive.

Storage and retention

Saved conversations, gratitude entries and mood records can synchronize through Apple CloudKit when your iCloud setup supports synchronization. Other local records and preferences remain on the device. The app applies file protection and backup exclusion to its separate private journal storage and protected recovery drafts. Other app data may remain in backups according to your device and iCloud settings.

Our coaching server processes requests to generate responses; it does not operate a separate database of your conversation history. This does not mean that providers have no retention. OpenAI, Apple and infrastructure providers have their own processing, security and retention arrangements.

Expiry does not guarantee immediate physical removal: cleanup or storage maintenance can be delayed by outages. Successful privacy-deletion requests remove the addressed server records separately from scheduled expiry. These criteria describe our application service, not the separate retention arrangements of OpenAI, Apple or infrastructure providers. For information about the currently applicable service retention periods, contact info@barneum.com.

App-verification public keys, counters and related operational records support secure access. The current app-verification registration store does not apply a fixed automatic expiry to every registration. These registrations, service-provider logs and Apple Ads attribution are outside the in-app remote deletion scope described below. Contact info@barneum.com for a request concerning information outside that scope.

Apple Health is optional

With your Health permission and the in-app Health-insights choice, Orilem can read sleep, resting heart rate, heart-rate variability, steps and, on supported systems, State of Mind. These values support in-app observations and suggestions. The current app does not automatically send HealthKit records to the AI provider or product analytics.

A separate optional setting allows supported mood or session check-ins to be written to Apple Health as State of Mind. You control read and write permissions in Apple’s Health and iOS settings. Deleting Orilem’s data does not revoke Health permissions or erase records in Apple Health.

Optional analytics and Apple Ads attribution

Product analytics is optional and is off by default. When enabled, a limited allowlist of events can include screens or features opened, completed actions, subscription interactions, notification routes and reliability outcomes. Bounded properties can include app version, language, source, destination or selected plan.

Product analytics does not include message or journal text, conversation summaries, recognized speech, gratitude text, profile names or HealthKit records. Installation and event identifiers are transformed into keyed pseudonymous identifiers before analytics storage. Records can still be linked to the same installation, so they are not described as anonymous.

The same optional analytics choice governs acquisition measurement. When enabled, a short-lived Apple AdServices token may be exchanged with Apple to identify an Apple Ads campaign. Allowlisted campaign fields, country or region, placement and subscription-conversion information may be retained. The raw attribution token is not persisted by our backend. Subscription verification needed for Pro access remains separate from optional acquisition measurement.

Turning analytics off stops future optional collection and clears unsent events. It does not by itself erase records already retained by the service.

Your choices

• Allow or withdraw AI processing in Privacy & Security. Withdrawal stops new AI requests; local notes and practices remain available.
• Adjust coach-memory categories and exclude observations from future requests.
• Turn optional product analytics and acquisition measurement off in Settings.
• Adjust reminders, lock-screen privacy and notification permission. Notification content can be visible on the lock screen according to your settings.
• Control microphone, speech-recognition and Health permissions in iOS settings.
• Choose whether to export or share content. Files and images shared with another app are then handled by that destination.

Deletion and privacy requests

You can delete saved records in the app or use Settings → Delete all data. The reset removes local app content and settings and requests deletion of server-cached audio and installation-scoped product analytics. Eligible record deletions synchronize through iCloud according to connectivity and the state of other devices.

A server deletion is not complete merely because the local reset finished. If remote deletion cannot finish, the app retains a protected deletion receipt and retries; incomplete operations can be shown for further action. Receipts contain the identifiers and authorization needed for deletion, not journal or conversation text.

The in-app remote deletion covers the addressed audio and analytics records. It does not delete every app-verification registration, Apple Ads attribution record or service-provider log. Contact support for a request concerning information outside that scope.

Deleting Orilem’s data does not cancel an App Store subscription, erase information held separately by Apple or OpenAI, delete copies you exported, or erase device/iCloud backups maintained separately from the active app stores. Manage subscriptions through Apple. For access, correction, deletion, withdrawal or other privacy questions, contact info@barneum.com or visit BARNEUM Support. Please describe your request without sending private journal content.

Providers, security and updates

Providers used by these features include OpenAI for AI replies, automated moderation and generated speech; Apple for Speech, CloudKit, Health, StoreKit purchases and AdServices attribution; and Render and configured storage infrastructure for backend operations. Providers may process information outside your country, according to their applicable service terms and arrangements.

Network requests use encrypted HTTPS. Application diagnostics are designed to use operational metadata rather than raw messages, private journal text or full AI responses. These protections are not a guarantee against every security incident.

Provider information: OpenAI API data controls, OpenAI Privacy Policy, Apple Privacy and Render Privacy Policy. The OpenAI API data-controls information is the relevant starting point for processing done through the API; consumer ChatGPT settings are not Orilem’s settings.

We may update this policy when features or processing change. The date above identifies this version. The table explains how retention is determined for records handled by our application service. Related terms are available at BARNEUM Terms of Use.