Privacy
The short version
We collect nothing. There is no account, no sign-in, no telemetry, no analytics, no crash reports, and no server of ours that the application talks to. We cannot see your conversations, the local record, or your key.
Where your data lives
On your device, in files you can open. If you turn on iCloud sync in Settings, the record is copied to your own iCloud account, under your Apple ID, where Apple's terms apply and we still have no access.
What leaves your device
Only what is required to get an answer: the text of the conversation (and the standing instructions in the identity file) is sent to the model provider you chose, with your key, so that provider can reply. That provider's privacy terms govern what they do with it. Orrery sends nothing anywhere else. If you enable optional features that use other services — voice, web search, images — the same rule applies to each: your key, their terms, sent only when you use the feature.
What we know about you
Nothing. We do not know that you installed it.
The record
The record Orrery keeps is a first-person account belonging to the person it is about as much as to you. Deleting the application deletes it. Exporting a soul container moves it. Nothing about it is ever transmitted to us.
Questions
Write to kevin@ostanekresearch.com.
Ostanek Research