Last updated October 7, 2026

Privacy policy

Orita is operated by Blue Shed Digital LLC. For privacy questions, contact contact@blueshed.digital.

Your notes and workspace

Orita uses the information you enter to provide its note-taking and organization features. This may include notes, tags, workspace and project names, tasks, meeting details, planning content, preferences, dates, and internal identifiers.

The local mobile library is stored in the app’s database. Choosing device storage does not require an Orita account or send that library to Orita Cloud. Account identity and library choice are separate: signing in does not migrate or sync a device library. Choosing a cloud library uses the account storage described below. Switching libraries does not move, merge or delete their content. The signed-in web workspace uses a cloud library. Web and compatible mobile apps support meeting recording and eligible AI processing. Features vary by platform, version, permissions and access.

Uninstalling an app, removing app storage, clearing website data, or using private browsing can remove local content. Your operating system may make backups according to your settings. Those backups are separate from note expiry.

Web accounts and cloud storage

When you create a web account, Supabase processes your email address, password authentication, confirmation status, account identifier, and security/session information. We use Resend to deliver confirmation and password-reset messages to your email address. Authentication messages contain one-time links; their delivery information may be recorded by these providers. Never share those links. See Supabase’s privacy policy and Resend’s privacy policy.

Your signed-in web library is stored in our Supabase project in the United States. It includes the notes, workspaces, projects, tasks, meetings, spaces, settings, and deletion markers you save. It is associated with your account so you can retrieve it on other browsers. The web app stores session tokens in browser storage to keep you signed in. Meeting AI sends recording audio and transcripts to an AI provider when you start a recording with Cloud AI access, as described below. Internet access is required to save.

Cloud notes expire by default after 24 hours unless kept. They become unavailable at expiry and a server cleanup scheduled every minute removes expired content from the active library. Content-free deletion markers remain to prevent stale copies from restoring deleted notes. Provider backups and security logs may retain earlier data under the provider’s backup and retention practices; deletion does not promise immediate erasure from every backup.

You may export your library and permanently delete your account and its active cloud library in the web app’s Settings. Local device libraries and previously exported copies are separate. For account access or deletion assistance, contact contact@blueshed.digital. Account deletion does not automatically cancel an unrelated App Store subscription; manage store subscriptions through the store.

Cloud attachments

When an eligible cloud plan is enabled and you choose to attach a file, Orita sends the file, its name and size, and its note association to private Supabase storage in the United States. Access is checked against your signed-in account and the note’s availability. Files are not made public and are not automatically sent to an AI provider. Attachments are limited to 20 MB per file and count toward your plan’s storage allowance.

Deleting an attachment, its note, or your account queues the hosted file for removal. Expired notes become inaccessible and their attachments are also queued for removal by scheduled cleanup. Physical removal may be delayed by processing failures or provider outages; provider backups may retain earlier copies. Original files on your device and files you download or share remain separate copies.

Recordings and optional AI

In the web and mobile apps, microphone access is used only when you start recording. Obtain permission from participants before recording. The original audio is stored in your browser or on your device, with a recovery record for interruptions. Starting a recording immediately Keeps its associated note so the recording and processing are not lost to a note deadline. Deleting that note also removes its associated local recording when the app can run. Browser recording uses saved checkpoints; keep the browser open while recording and download a WAV copy if you need an independent backup. An interruption, full device, or system failure can prevent usable audio from being captured; play the recording to verify it.

When you start recording with eligible Orita Cloud access, you choose automatic AI transcription and meeting notes. After you stop and save, Orita sends audio segments through its Supabase processing service to OpenAI. Orita manages the provider credentials and pays for AI processing within your plan’s included allowance; you do not need an OpenAI account or API key. Transcripts are stored with your account to support retries. Once transcription completes, the transcript is automatically sent to OpenAI to create meeting notes. Failed or interrupted processing preserves your original audio and completed progress for a deliberate retry. Without eligible AI access, the recording is saved without cloud processing. Orita does not use these features to train an AI model, and OpenAI states that API data is not used to train its models by default. Provider security and abuse-monitoring retention may still apply. See OpenAI’s API data controls.

Transcription processing does not itself back up original audio in Orita’s file storage. Compatible mobile apps offer a separate cloud recording backup and restore flow. When you choose it, recording audio and metadata are uploaded to private account storage and count toward the cloud allowance. Browser recordings remain in their capturing browser; they do not automatically sync to other browsers or native apps. Transcripts and summaries follow the source note’s expiry and deletion; a scheduled cleanup removes their active server copies. Device copies are removed when the app can run. Technical processing records include recording identifiers, segment hashes, durations, attempt counts, and usage totals so retries can recover and monthly limits can be enforced. Content-free billing and usage records may be retained for service administration and legal obligations. Transcription and summary generation can fail independently; a generated result is not proof of accuracy.

On-device Apple AI and calendars

Supported paid Apple builds can transcribe locally, with 300 minutes per installation per UTC month. Local summaries require iOS 26 or later, a compatible device, available Apple Intelligence models and a supported language. This local flow does not send audio or transcripts to Orita’s AI provider. Android does not provide this local AI path. Private iCloud sync covers the text library; audio stays on the device unless you choose the separate Orita cloud backup.

With eligible Cloud access, compatible mobile apps request device calendar access when you choose calendars and import individual events. Imported meeting information is saved to your selected cloud workspace. Later calendar changes and cancellations do not continuously sync. Browser Apple/Google OAuth calendar connections are not part of the current release.

Billing and subscription verification

Apple or Google processes mobile payments. When web checkout is available, Stripe processes payment and billing details through RevenueCat’s web purchase flow. Orita receives customer and subscription status needed to provide service, not your full card number. See Stripe’s privacy policy. RevenueCat processes purchase receipts or tokens, product and transaction identifiers, renewal and refund status, and an app customer identifier to determine access. For cloud purchases, that identifier is associated with your Orita account so the entitlement can be used across supported signed-in platforms. Local-only use may use an anonymous app identifier. We do not receive your full payment-card number from the mobile stores. See RevenueCat’s privacy policy.

We use subscription status, monthly transcription usage, and account identifiers to provide paid services and prevent use beyond the purchased allowance. We do not use your notes or recordings for advertising. Deleting an Orita account does not cancel a subscription billed by Apple or Google. Cancel through the original store, or the web billing management link for a web purchase, before deleting your account if you wish to stop renewal.

Features in existing iOS versions

Features depend on your app version, device, permissions, and purchase status. The current iOS release may use these services when you use the corresponding feature:

• iCloud. Versions that support synchronization use Apple’s iCloud and CloudKit to sync supported content across devices associated with your Apple account. Manage iCloud through Apple account and device settings. Removing a local app does not necessarily remove cloud data or backups.
• Speech and summaries. When you start transcription, Orita uses microphone and speech-recognition access. Apple speech processing can depend on your device, language, and recognition support; it may use Apple’s speech service when on-device recognition is unavailable. Transcripts and generated summaries can contain mistakes. Manage permissions in device settings.
• Calendar and photos. Where supported, Orita uses permission you grant for the calendar or photo actions you choose. You can change those permissions in device settings.
• Link previews. Fetching a preview sends a request to the linked website and may load its images. That website receives ordinary connection information, including an IP address and requested address, and handles it under its own policy.
• Device search and notifications. Existing iOS versions may make note titles, text previews, and tags searchable through Apple’s on-device Spotlight and use local notifications to remind you about expiry. Device search indexes and notification behavior are separate from the redesigned app’s local database.
• Purchases. Apple processes App Store purchases. Orita uses transaction or entitlement status to enable purchased features. Payment-card details you provide to Apple are handled by Apple.

Apple explains its handling of information in its privacy information. The controls and disclosures in your installed version identify the services used by that version.

Expiry, keeping, and deletion

In the local redesign, the first saved title or body of a new note starts a 24-hour expiry period by default. Empty drafts have no timer. Editing does not extend the deadline. Use Keep before expiry to remove it, or disable default expiry in Settings for future notes. Changing that default does not change existing deadlines.

Expired notes are excluded from the active library. Stored content is removed when the app can run and successfully save the change; a closed or suspended app cannot guarantee removal at the exact deadline. A content-free record of the note’s identifier, deletion time, and reason remains.

Tasks, spaces, cards, and meeting records are separate objects and do not expire with a note. Use the deletion controls available in your version. Removing the browser’s site data or mobile app’s stored data removes the local library more broadly. Export first if you need a copy.

Expiry and deletion do not recall exports, shared copies, operating-system backups, or copies held by services you choose. They do not guarantee secure erasure from every storage layer. Earlier iOS versions may have different expiry settings; use the controls in your installed version.

Exports and sharing

A destination you choose when exporting or sharing receives that content. The local redesign’s JSON backup is readable content, not an encrypted vault. Store it appropriately. Import replaces the local library after confirmation, excluding notes whose deadlines have already passed.

We cannot retrieve a local-only library that you have not sent us. Any attachment or backup you send to support becomes a separate copy.

This website

This marketing website is delivered through OpenAI Sites and Cloudflare infrastructure. Visiting it sends the connection information needed to deliver and secure pages, such as IP address, requested URL, browser request information, and time of access, to that infrastructure. This does not upload your notes.

We have not added advertising trackers, analytics scripts, or a mailing-list form. The web app provides account forms. Hosting providers may process operational and security logs and use necessary security cookies under their own service practices and retention rules. See OpenAI’s privacy policy and Cloudflare’s privacy policy. Links to the App Store and other external websites are governed by those services when you visit them.

Contacting support

If you email us, we receive your address, message, and any attachments you choose to send. Email delivery providers also process that correspondence. We use it to answer your request, diagnose the issue, and keep relevant support records. Correspondence is retained as needed to resolve and follow up on the request and meet applicable legal obligations. You can ask us to delete information you provided, subject to those obligations.

Send only information needed to explain the issue. Please do not send passwords, payment details, or your full note library unless specific content is needed and you choose to share it.

Security and your choices

Protect your device, browser profile, and exported backups. The local redesign does not add a separate password or end-to-end encryption layer to its database; platform protections depend on your device and settings. No storage or transmission method eliminates every risk.

You can manage permissions and backups through your operating system and use the deletion controls available in your installed app. Depending on applicable law, you may have rights to access, correct, delete, or restrict information we hold, object to processing, or complain to your local privacy authority. Contact us to exercise applicable rights. We cannot inspect or remotely delete a local-only library on your device.

Orita is not directed to children under 13. If you believe a child has sent us personal information through support, contact us so we can address it. An app-store content age rating does not change this policy.

Hosting, email, and platform providers may process information in countries other than your own under their service arrangements. The local library is not sent to us simply because you use the local redesign.

Updates and contact

We will publish the current policy and its revision date here. If a new service changes how your information is handled, its data practices will be explained before use.

Blue Shed Digital LLC
contact@blueshed.digital