Privacy Policy

Last updated: 22 September 2026

This policy explains what Orrey collects, why, and what control you have over it. It applies to the Orrey mobile application and to orrey.app.

Orrey is operated by Irakli Lolashvili, an individual developer based in Georgia ("Orrey", "we", "us"). For any privacy question, contact support@orrey.app.


1. The short version


2. Information we collect

2.1 Information you give us

Data Why we need it
Name (or nickname) To address you in your readings
Email address To identify your account and let you sign back in
Date of birth Required to calculate your natal chart and Destiny Matrix
Time of birth (optional) Determines your rising sign and house placements
Place of birth Converted to coordinates to calculate the sky above that location
Areas of focus (optional) To weight the guidance you receive
Questions you type or speak to the guide To generate an answer

Your date, time and place of birth are the core of the product: without them the app cannot produce a chart. In some jurisdictions birth data may be treated as personal data of a sensitive nature, and we handle it accordingly.

2.2 Information created as you use the app

2.3 Information from your device (only with your permission)

2.4 What we do not collect

We do not collect your contacts, browsing history, advertising identifiers (IDFA), or precise location history. We do not run advertising, analytics or attribution SDKs. We do not track you across other companies' apps or websites, and we do not ask for App Tracking Transparency permission because we have nothing to track you with.


3. How your information is used

We use it to:

  1. Calculate your chart, matrix, and daily readings.
  2. Generate the written interpretation around those calculations.
  3. Keep your account working across devices and restore it when you sign in again.
  4. Apply your plan's usage limits and manage your subscription.
  5. Send the notifications you have switched on.
  6. Diagnose faults and keep the service secure.

We do not use your data to build advertising profiles, and we do not sell or rent it.

Legal bases (EEA/UK users). We process your data to perform our contract with you (providing the readings you asked for), on the basis of your consent where you granted a device permission or opted into notifications, and on our legitimate interest in keeping the service secure and functioning. Where birth data is treated as special-category data in your jurisdiction, we rely on your explicit consent, which you may withdraw at any time by deleting your account.


4. Who your information is shared with

We use a small number of processors. Each receives only what it needs.

Provider What it receives Purpose
Supabase Account identity, birth details, plan and usage counters Database, authentication and server functions
Anthropic The chart facts and question needed for a reading, and interface text to translate Generating the written interpretation and translations
Mapbox The coordinates of your birthplace Rendering the globe during chart casting
Apple Sign-in credential, purchase and subscription records Sign in with Apple, App Store payments, notifications
Google Sign-in credential, if you choose Google Authentication only

About the AI. Readings are generated by Anthropic's Claude models. Requests are sent from our server, never directly from your device, and your API traffic is not used to train Anthropic's models. We send the minimum needed: your chart placements, the relevant dates, and your question — never your email or account identifiers.

We also disclose information if we are legally required to, or to protect the rights and safety of our users, and to a successor entity in the event of a merger or acquisition (you will be told before your data becomes subject to a different policy).


5. Where your data is held

Your account data is stored on infrastructure operated by Supabase, hosted in Canada (Montréal, ca-central-1). Our AI provider processes requests in the United States. If you are in the EEA or UK, transfers outside your region rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.


6. How long we keep it


7. Your rights and choices

In the app, at any time:

On request to support@orrey.app: a copy of your data, correction of anything inaccurate, restriction of processing, or a portable export. We respond within 30 days.

Depending on where you live you may also have the right to object to processing, to withdraw consent, and to complain to your data protection authority. California residents: you have the rights to know, delete, correct, and to opt out of "sale" or "sharing" of personal information — we do neither, so there is nothing to opt out of, and we will never discriminate against you for exercising a right.


8. Children

Orrey is not directed to children. You must be at least 13 to use it (16 where local law sets a higher age for consent, including parts of the EEA). We do not knowingly collect data from children below that age; if we learn we have, we delete it. If you believe a child has given us data, contact support@orrey.app.


9. Security

Traffic is encrypted in transit (TLS) and data is encrypted at rest. Our database enforces row-level security, so an account can only ever read its own row, and the columns controlling your plan and usage cannot be written by the app at all. Our AI provider key is held on the server and never shipped inside the app. No system is perfectly secure, and we will notify you and the relevant authority without undue delay if a breach affects your data.


10. Changes to this policy

If we change this policy materially, we will tell you in the app before the change takes effect and update the date at the top. Continuing to use Orrey after that means you accept the revised policy.


11. Contact

Irakli Lolashvili Georgia support@orrey.app