Privacy

Ostanek Research · 2026-09-04

The short version

We collect nothing. There is no account, no sign-in, no telemetry, no analytics, no crash reports, and no server of ours that the application talks to. We cannot see your conversations, the local record, or your key.

Where your data lives

On your device, in files you can open. If you turn on iCloud sync in Settings, the record is copied to your own iCloud account, under your Apple ID, where Apple's terms apply and we still have no access.

What leaves your device

Only what is required to get an answer: the text of the conversation (and the standing instructions in the identity file) is sent to the model provider you chose, with your key, so that provider can reply. That provider's privacy terms govern what they do with it. Orrery sends nothing anywhere else. If you enable optional features that use other services — voice, web search, images — the same rule applies to each: your key, their terms, sent only when you use the feature.

What we know about you

Nothing. We do not know that you installed it.

The record

The record Orrery keeps is a first-person account belonging to the person it is about as much as to you. Deleting the application deletes it. Exporting a soul container moves it. Nothing about it is ever transmitted to us.

Questions

Write to kevin@ostanekresearch.com.

Ostanek Research