Orilo Privacy Policy

Effective date: September 29, 2026
Last updated: October 28, 2026

Orilo is the voice-first AI companion operated by Echotime Technology.

This Privacy Policy describes how Echotime Technology (a Cayman Islands exempted company) and its affiliates (collectively, "Orilo," "we," "us," or "our") collect, use, and disclose personal information. It applies when you use the Orilo iOS application, our websites, and other services that link to this policy (the "Service").

This policy explains our data practices. Where a feature requires your consent, we request it separately before accessing or sharing the relevant data. You can read this policy and our public homepage without signing in.

1. Personal Information We Collect

1.1 Information you provide to us

Account information. Your first name or nickname, date of birth, and other profile information you enter during onboarding. We use your date of birth to confirm that you meet the Service's minimum age requirement.
Voice input and User Content. Recordings and transcripts of conversations with your AI Agent, together with text, messages, and other information you submit or generate through the Service. This includes content processed by AI Providers as described in Section 1.3.
Communications. Records of support requests, feedback, survey responses, and other correspondence with us.
Third-party sign-in information. Limited identity information received when you choose Google or Apple sign-in, as described in Section 1.4.
Connected information. Information you authorize through optional connectors, as described in Section 1.5.
Health information. Authorized HealthKit information used to answer your requests and provide daily morning audio briefings, as described in Section 1.6.

1.2 Information we collect automatically

Log data. Your IP address, browser or app version, request information, and interactions with the Service.
Usage data. Features used, usage times, session duration, and aggregate patterns of interaction with your AI Agent.
Device information. Device model, operating system, unique device identifiers, mobile network information, language, and time zone.
Location information. Approximate location inferred from your IP address. When you explicitly grant permission for a location-based feature, we may also process precise GPS location for that feature.
Permission information. Whether you have granted or denied permissions, together with information needed to operate the corresponding features. HealthKit read permissions remain subject to Apple's privacy controls.
Microphone data. Audio captured when you grant microphone permission and use voice features.
Notification data. A device push token and notification preferences used to deliver service notices, reminders, and security alerts. Promotional push notifications require your opt-in, which you can withdraw.
Cookies and similar technologies. We and our service providers use cookies, SDKs, and similar technologies to operate the Service, remember preferences, measure performance, prevent fraud, and support analytics. You can control cookies through your browser or device settings.

Background audio playback. When you enable background playback in Lounge, spoken replies and audio briefings can continue playing while the app is in the background or your device is locked.

Background Microphone Access. When you enable background playback in Lounge, Orilo may continue accessing your microphone while the app is running in the background, allowing you to interact with your AI Agent without keeping the app open. Microphone access continues only during an active voice session. You can stop microphone access at any time by ending the voice session or disabling microphone access in your device settings. Voice recordings and transcripts from these sessions are processed as described in Section 1.3.

1.3 AI features and third-party model providers

We process information on Orilo's systems to provide chat, voice interaction, tasks, daily morning audio briefings, and other AI features you use. We may also use third-party AI, cloud, and inference providers ("AI Providers") to process information on our behalf. Depending on product configuration and region, these providers may include Amazon Web Services, OpenAI, and OpenRouter.

Information processed. Depending on the feature and your authorization, the information sent to AI Providers may include:

Messages, prompts, and AI-generated responses.
Voice recordings, transcripts, and relevant conversation context.
Relevant information from connectors you enable.
Authorized HealthKit readings or summaries needed to answer your health questions or prepare daily morning audio briefings, subject to Section 1.6.
Task instructions, tool requests, and execution results.
Account and session metadata reasonably needed to operate the feature, such as identifiers, timestamps, feature flags, and security signals.

We limit the information shared to what the feature requires. We do not include message bodies in routine error logs unless you contact support and the information is needed to investigate a specific issue.

Disclosure and consent. Before sharing your personal information with a third-party AI Provider, we explain the information to be shared, the recipient, and the purpose in the app, and obtain your explicit permission. HealthKit permission does not replace consent to cloud or third-party AI processing. We request any additional consent needed for health information before that processing begins.

Uses and protection. AI Providers process information to provide, operate, secure, and improve the AI features you use, prevent fraud and abuse, and comply with law. We require written confidentiality and data-processing obligations that provide protection no less protective than this policy. The narrower health-data restrictions in Section 1.6 take precedence over these general purposes.

Model training. We do not permit AI Providers to use your identifiable chat content and related conversation context, voice recordings, transcripts, or connector content to train their public foundation models. HealthKit information and information derived from it are not used for model training. We may use other aggregated or de-identified information to improve reliability and safety where permitted by law and this policy.

Retention and choice. AI-related content may be retained in your conversation or task history under Sections 4 and 6. You can decline AI data sharing or withdraw your consent by contacting support@orilo.live. The affected AI features may become unavailable, while features that do not require that processing remain available. Withdrawal does not affect the lawfulness of processing before withdrawal or processing required by law.

1.4 Third-party sign-in

If you choose Google or Apple sign-in, we receive the identity information that the provider shares under your authorization. This may include your name, email address, profile picture where available, and a unique account identifier. We use this information to authenticate you, associate your sign-in with your Orilo account, and protect account security. We do not ask for your provider password.

We use HTTPS for transmission and restrict access to authorized services and personnel. Identity and authentication records are retained as needed for account operation and security, subject to Sections 4 and 6.

We do not sell Google sign-in information, use it for advertising, or provide it to data brokers, information resellers, or creditworthiness or lending services. We do not use it, including derived or de-identified information, to develop, improve, or train general-purpose or non-personalized AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can manage sign-in authorization through your provider's account settings. Revoking that authorization does not automatically delete your Orilo account or its content. You can request deletion through the controls and contact details in Section 4.

1.5 Optional connectors

You can choose to connect supported device features and third-party services to Orilo. We call these connections "connectors." We request the relevant permission before accessing a source. You can use features that do not depend on a connector without enabling that connector.

Information accessed and purposes. Depending on the connectors you enable and the permissions you grant, Orilo may process:

Device calendar information. Event identifiers, titles, dates, start and end times, all-day status, and locations, to answer schedule questions and help you manage events.
Device reminder information. Reminder identifiers, titles, due dates, and related task details, to answer questions and help you manage reminders. Requested changes may also involve supported notes, completion status, priority, alarms, or recurrence fields.
Microsoft Outlook information. Microsoft OAuth authorizes read-only access to relevant emails, email metadata, and calendar events, to answer your questions and provide briefings. This connection does not allow Orilo to create, modify, or delete emails or calendar events, or to send emails.
Google services information. Information from Gmail, Google Drive, Google Calendar, Google Contacts, Google Tasks, Google Docs, Google Sheets, and Google Slides that you authorize, as described under "Google account connections" below.
Location information. Authorized location context for local weather, news, and nearby places.
Connection records. Account and provider identifiers, enabled sources, permission state, synchronization times, and operation results needed to maintain connections and prevent duplicate actions.

HealthKit information follows the separate authorization and use limits in Section 1.6.

Google account connections

Connecting a Google service is optional and separate from Google sign-in. We request Google permissions through Google's consent screen, which shows the exact permissions requested for your connection. Read permissions are requested when you connect a service. Permissions that allow Orilo to send, change, or organize your Google data are requested separately, only when you choose to enable those actions. Availability may vary by app version and region. Orilo accesses Google user data only within the permissions you grant and only to provide the features you use.

Permissions and purposes. The Google permissions used by these connections are listed below. Scope names use the prefix https://www.googleapis.com/auth/.

Google account identity. openid, email, and profile identify the Google account you connect, so we can associate the connection with your Orilo account and prevent actions on the wrong account.
Gmail. gmail.readonly reads your emails and email metadata, such as senders, recipients, subjects, dates, labels, and message content, to answer your questions, summarize messages, and prepare briefings. gmail.send sends new emails or replies that you ask Orilo to send. gmail.modify applies or removes labels, marks emails as read or unread, archives emails, or moves emails to trash when you ask. Orilo does not permanently delete emails.
Google Drive. drive.metadata.readonly reads file metadata, such as names, types, owners, folders, and modification times, to find files relevant to your request. drive.readonly reads the content of files relevant to your request, to summarize them and answer your questions. drive creates folders, renames files, moves files, or moves files to trash when you ask.
Google Calendar. calendar.readonly reads your calendars and events, such as titles, times, descriptions, locations, and attendees, to answer schedule questions and prepare briefings. calendar.events creates, updates, or deletes events when you ask.
Google Contacts. contacts.readonly reads contact details, such as names, email addresses, phone numbers, and organizations, to identify people relevant to your requests. contacts creates, updates, or deletes contacts when you ask.
Google Tasks. tasks.readonly reads task lists and task details, such as titles, notes, due dates, and completion status, to answer task questions. tasks creates, updates, or deletes tasks when you ask.
Google Docs. documents.readonly reads document content to summarize documents and answer your questions. documents creates documents or adds text when you ask.
Google Sheets. spreadsheets.readonly reads spreadsheet content, including cell values and formulas, to explain information you ask about. spreadsheets creates spreadsheets or adds rows when you ask.
Google Slides. presentations.readonly reads presentation content to summarize presentations and answer your questions. Orilo does not change your presentations.

Actions in your Google account. Orilo sends, changes, organizes, or moves Google data to trash only at your instruction and within the permissions you granted. Where an additional authorization or confirmation is required, we obtain it before proceeding. Completed actions take effect in your Google account and are not reversed by disconnecting Orilo.

Use and AI processing. We use Google user data only to provide and improve the user-facing features you request, such as answers, summaries, briefings, Memories, and requested actions, and to maintain and secure those features. Relevant excerpts may be processed by the AI Providers described in Section 1.3 to generate your response or carry out your request. Google user data, including derived, aggregated, or de-identified data, is not used to develop, improve, or train general-purpose or non-personalized AI or machine-learning models. We do not use Google user data for advertising, including personalized, retargeted, or interest-based advertising. We do not sell it, and we do not provide it to data brokers, information resellers, or creditworthiness or lending services.

Sharing and human access. We transfer Google user data to others only as necessary to provide or improve the features you request, subject to confidentiality and restricted processing obligations; for security purposes, such as investigating abuse; to comply with applicable law; or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent. People at Orilo do not read Google user data unless you give affirmative agreement for specific data, access is necessary for security purposes or to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable law and Google's Limited Use requirements.

Storage and protection. We store connection identifiers, granted permissions, and OAuth tokens to maintain your authorized connection. OAuth tokens are encrypted at rest and used only to access Google services within your authorization. Relevant Google content, snapshots, and derived summaries may be stored on Orilo's servers when needed for the features you use, such as conversation history, briefings, and Memories. We use HTTPS for transmission and restrict access to authorized services and personnel. We never request your Google password.

Retention, deletion, and revocation. Connection credentials are retained while your connection is active. Disconnecting a Google service in Orilo removes its stored credentials from our active connection store and stops future access. You can also remove Orilo's access in your Google Account third-party connections settings. Revoking access does not by itself delete Google user data already stored by Orilo. You can request deletion of stored Google user data and derived content by emailing support@orilo.live, or delete your Orilo account as described in Section 4. Retained data and backups are handled as described in Section 6.

Limited Use. Orilo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google APIs or Google user data to create or facilitate AI-generated non-consensual intimate imagery (AI NCII).

Retrieval and storage. Calendar, reminder, Outlook, Google, and location features may retrieve relevant information for your questions and tasks. Enabled features may also refresh their information when you connect, open or return to the app, or when a supported source changes. Relevant information may be sent to Orilo's servers and retained with the connected feature, conversation history, or task history. AI processing follows Section 1.3.

Actions. For supported device calendar and reminder actions, and for Google actions described above, we process the instructions and fields needed to carry out your request. These actions may create, update, or delete records, which may synchronize through accounts linked to your device. Actions require your instruction and the relevant permissions. Where an additional authorization or confirmation is required, we obtain it before proceeding.

Information sent to a connected service is governed by that service's terms and privacy policy. Orilo remains responsible for its own handling of the information under this policy. Connected records may contain information about other people, such as meeting attendees or email participants. Please connect only accounts and provide only information that you are authorized to use.

Disconnecting. You can disable a source or disconnect a connection using the available connector controls. You can also revoke access in the provider's settings or your device's privacy settings. Once the change takes effect, Orilo stops future access through that source. Disabling a device connector does not itself revoke the operating system permission.

Disconnecting does not automatically delete information already stored by Orilo. It also does not reverse completed actions in the connected service. You can request deletion of stored information and related derived content as described in Section 4.

1.6 Health and fitness information — Apple HealthKit

1.6.1 Authorized access and information read

Orilo reads health information only after you explicitly authorize the relevant HealthKit categories. We access only the authorized information needed to answer your health questions and prepare daily morning audio briefings. After authorization, Orilo may retrieve this information for those briefings without a separate health question from you. You may choose which categories to allow and revoke access at any time.

The supported categories are:

Steps. Step counts used to report daily totals.
Sleep. Sleep records and their start and end times, used to report sleep duration.
Heart rate. Heart-rate readings used to report average heart rate.
Workouts. Workout type, start time, and duration.

Dates and times are used to organize results for your requests and daily morning audio briefings. Orilo reads this information and does not write, modify, or delete records in Apple Health.

1.6.2 Purpose and medical limitations

HealthKit information is used only to retrieve, summarize, and explain your authorized health data in response to your questions and as part of proactive daily morning audio briefings. Orilo does not use it to personalize unrelated conversations.

Orilo is not a medical device and does not provide medical advice, diagnosis, treatment, or emergency monitoring. Health-related responses are for personal information and general wellness only. They do not replace advice from a qualified healthcare professional and should not be used to make medical decisions. Consult a qualified healthcare professional about medical concerns.

1.6.3 Cloud processing, AI, and storage

To answer your health questions or prepare daily morning audio briefings, authorized readings or summaries may be sent over an encrypted connection to Orilo's servers. With your explicit permission, the AI Providers described in Section 1.3 may process the necessary information on our behalf to generate the reply or briefing. We explain this processing before sharing the information.

Relevant readings, summaries, replies, and briefings may be retained as part of your Orilo account history. They remain subject to the health-data restrictions in this section and the deletion rules in Sections 4 and 6. We do not store personal health information in iCloud.

Service providers may process health information only to support your health-related responses and daily morning audio briefings, subject to written confidentiality and processing restrictions. They must provide protection at least equivalent to this policy. Any retention required by law or for necessary security purposes is restricted to that purpose.

1.6.4 Restricted uses

We do not use HealthKit information or information derived from it for:

Advertising, marketing, remarketing, or cross-context behavioral advertising.
Sale, data brokerage, or disclosure to advertising networks.
Credit, insurance, employment, or similar eligibility decisions.
AI or machine-learning model training.
Unrelated profiling, product research, or data mining.

These restrictions also apply to aggregated or de-identified health information. General references elsewhere in this policy to analytics, research, personalization, or service improvement do not expand the permitted uses of health information. We do not knowingly collect health information from anyone under 18.

1.6.5 Your controls and deletion

You can change or revoke Orilo's HealthKit access through the Health app's profile and app-access controls or your device's Health privacy settings. Revoking a category stops future access to that category. Declining health access does not prevent you from using unrelated Orilo features.

Revoking access does not automatically delete health information previously collected with your authorization. You can request deletion of that information, related replies, briefings, and derived summaries by emailing support@orilo.live. You can also delete your Orilo account as described in Section 4.

Deleting information from Orilo does not delete the original records in Apple Health. Backups and legally required retention are handled as described in Section 6.

1.7 Usage analytics and attribution

Orilo uses its own analytics service and AppsFlyer to analyze app usage, installation sources, registration conversions, and returns through Orilo links. We use these insights to measure channel effectiveness and improve the experience.

This processing involves installation identifiers, IP addresses, device and app information, usage events, and attribution-link parameters. The app also sends the AppsFlyer installation identifier to Orilo's servers during registration or third-party sign-in and includes it in our analytics records. These records can be associated with your account and are not anonymous.

When advertising integrations are enabled, AppsFlyer may share the data described above with advertising and measurement partners to measure and optimize Orilo campaigns. Sharing follows your permissions and applicable requirements, including ATT permission for cross-company tracking.

With your permission through the iOS App Tracking Transparency (ATT) prompt, we use your device's advertising identifier (IDFA) to associate activity in other companies' apps and websites with your Orilo installation and registration. If you decline or revoke permission, we disable IDFA. We do not use other identifiers to bypass your tracking choice. Declining tracking does not affect core features.

Usage analytics is enabled by default, without a separate in-app participation switch. You can manage ATT permission in iOS Settings under Privacy & Security > Tracking. Revoking ATT does not stop all non-tracking analytics or automatically delete previous records. Where additional consent is legally required, ATT does not replace it. You can exercise applicable privacy rights through support@orilo.live, as described in Section 4.

This AppsFlyer integration does not send passwords, sign-in tokens, email addresses, conversation content, recordings, health information, or connector content to AppsFlyer. The restrictions in Sections 1.3, 1.4, and 1.6 remain applicable. Service-provider protections, retention and deletion, and international transfers follow Sections 3, 6, and 7. See also AppsFlyer's customer-data processing notice.

2. How We Use Personal Information

We use personal information for the following purposes.

Providing, maintaining, and improving the Service, including operating your AI Agent, generating personalized morning briefs, and remembering your preferences. We also use account information, including date of birth, to verify eligibility and enforce age restrictions.
Processing voice input, providing speech recognition and speech synthesis, and enabling microphone-, location-, and notification-based features that you choose to use.
Developing and evaluating features, products, and services, including research on voice interaction, natural-language understanding, safety, and personalization.
Communicating with you, including sending service-related notices, security alerts, reminders, and marketing messages, which you can opt out of at any time where applicable.
Preventing fraud, abuse, and illegal activity, and enforcing our Terms of Service and other policies.
Complying with legal obligations, responding to lawful requests from public authorities, and protecting our rights and the rights of others.
Creating aggregated or de-identified information that cannot reasonably be used to identify you, and using it for any lawful purpose.

The restrictions in Sections 1.3, 1.4, and 1.6 limit all of the purposes above. In particular, the general references to research, product improvement, and any lawful use of aggregated or de-identified information do not permit prohibited uses of Google sign-in information, other Google user data described in Section 1.5, or health information.

3. How We Disclose Personal Information

We do not sell your personal information. We disclose personal information in the following circumstances.

Service providers. Third-party vendors and service providers that perform services on our behalf, including cloud hosting, AI processing, speech-to-text and text-to-speech, analytics, customer support, communications, app-store billing support, fraud prevention, and security. These providers are permitted to process information only for the services they provide to us, subject to applicable contractual and legal restrictions.
Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
Legal requirements. We may disclose personal information to government or law-enforcement authorities, or to private parties, if we believe in good faith that disclosure is necessary to comply with applicable law, respond to legal process, protect the rights or safety of any person, or investigate suspected fraud or misuse of the Service.
Affiliates. We may disclose personal information to our subsidiaries and affiliates for the purposes described in this policy.
With your consent. We may disclose information with your consent, or at your direction.

Additional connector disclosures. At your direction, we may transmit the information needed to execute supported device calendar or reminder actions, or supported Google actions, to the relevant connected service. This can include calendar, reminder, email, file, or task fields and operation results. Outlook access is read-only. Google sign-in information remains subject to Section 1.4, and other Google user data remains subject to the Google account connections terms in Section 1.5. Health information remains subject to Section 1.6. The general business-transfer and affiliate provisions do not override those restrictions.

Third parties processing personal information on our behalf, including service providers and affiliates, must provide protection no less protective than this policy. Health information remains limited to the purposes and permissions in Section 1.6.

4. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information.

Access a copy of the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Delete your personal information, subject to certain exceptions.
Object to or restrict certain processing of your personal information.
Withdraw consent where we rely on consent as our legal basis for processing.
Port your personal information to another controller in a machine-readable format.
Lodge a complaint with a data-protection authority in your country.

To exercise these rights, contact us at the address in Section 10. You may also manage or delete your account directly from the Service's Settings menu, or follow the instructions on our Delete Your Account page.

Deletion of your account will delete your content, except where we are required to retain records to comply with legal obligations, resolve disputes, prevent fraud, protect security, or enforce agreements.

You can manage microphone, precise location, notification, calendar, and reminder permissions through your device settings. HealthKit controls are described in Section 1.6.5. You can opt out of marketing messages by using the unsubscribe method provided in the message or by contacting us.

4.1 Account deletion

You can delete your account through the app's account settings or follow the Delete Your Account instructions. If you need assistance, email support@orilo.live.

An account-deletion request covers your account and associated data, including chat history, Memories, tasks, and information synced from connected services, including authorized health information. We delete or anonymize the associated information within a reasonable time, subject to Section 6 and applicable retention obligations.

Deleting your Orilo account does not delete your third-party accounts or original information held by those services, such as calendar events, reminders, emails, files, or health records. It does not reverse an action that Orilo already completed at your request.

5. Age Restrictions and Children's Privacy

The Service is intended only for individuals who are 18 years of age or older. Individuals under 18 may not create an account, access, or use the Service, even with the consent of a parent or legal guardian. We do not knowingly collect personal information from anyone under 18. If you believe that an individual under 18 has provided personal information to us or is using the Service, please contact us at support@orilo.live.

If we learn that we have collected personal information from an individual under 18, we will take reasonable steps to suspend or close the account and delete the personal information, except where retention is required by law or necessary for security, fraud prevention, or legal compliance.

6. Security and Retention

We implement commercially reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, prevent fraud, protect security, and enforce our agreements. When we no longer need to retain personal information, we will delete or de-identify it.

6.1 Retention by data type and deletion handling

Content processed for AI features follows the same retention rules as your account and chat history, subject to your deletion requests and applicable obligations.
Imported connector information, health information collected with your authorization, and derived summaries follow the retention rules for the relevant feature and account. Disconnecting alone does not erase them.
Connection credentials and authorization records are retained as needed to operate your connection. Google sign-in records follow Section 1.4. Google service connections follow Section 1.5. Other provider connections are handled according to the disconnect or revocation action and the provider's requirements.
Operational records may include request identifiers, connection state, synchronization times, action results, and records needed to avoid duplicate execution. We retain them only as needed for operation, security, dispute resolution, and legal compliance.
Information retained after a deletion request is restricted to the legal, security, fraud-prevention, dispute-resolution, or agreement-enforcement purpose that requires retention. Backup copies are removed through the applicable backup retention cycle.

Our service-provider arrangements require providers to follow applicable processing and deletion obligations. Where relevant, we take steps to pass deletion requests to providers processing the information on our behalf.

We respond to privacy-rights requests within the period required by applicable law.

7. International Data Transfers

Orilo is provided by a Cayman Islands entity and processes information globally. When we transfer personal information across borders, we take steps to ensure the information receives an adequate level of protection, including through contractual safeguards such as the European Commission's Standard Contractual Clauses where applicable.

8. Links to Other Websites

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other means before the changes take effect. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy. If a change requires new consent for access, use, or sharing of personal information, we obtain that consent before the new processing begins. Continued use does not replace that consent.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Echotime Technology

Registered office:

Grand Pavilion, Hibiscus Way

802 West Bay Road

P.O. Box 31119

Grand Cayman KY1-1205

Cayman Islands

Email: support@orilo.live

Appendix A — Additional Disclosures for Residents of the European Economic Area, United Kingdom, and Switzerland

Controller

The controller of your personal information is Echotime Technology, the Cayman Islands entity identified above.

Legal bases for processing

We rely on the following legal bases under the EU/UK General Data Protection Regulation:

Performance of a contract with you, to provide the Service and honor the Terms of Service.
Our legitimate interests, including operating and improving the Service, preventing fraud, protecting security, and communicating with you, where these interests are not overridden by your rights.
Compliance with legal obligations.
Your consent, where required for specific processing such as marketing communications or optional device permissions.

Health and other sensitive information

Where applicable law requires explicit consent to process health information or another special category of personal information, we obtain that consent for the relevant feature. A device permission is not a substitute for any additional consent required by law. You may withdraw consent by revoking the relevant access and contacting support@orilo.live. Withdrawal does not affect the lawfulness of processing before withdrawal.

Data-protection authority

You have the right to lodge a complaint with your local data-protection authority. We will always be happy to hear from you first, and encourage you to contact us before filing a complaint.

Appendix B — Additional Disclosures for United States Residents

This appendix supplements the Privacy Policy for residents of U.S. states with applicable comprehensive privacy laws.

Categories of information collected

In the past 12 months, we have collected the categories of personal information described in Section 1, including identifiers, account information, voice recordings and transcripts and usage data, device and permission information, approximate and precise location where authorized, notification data, and inferences drawn from that information.

Sale or sharing of personal information

We do not sell personal information in exchange for money. We do not share personal information for cross-context behavioral advertising.

Your rights

Depending on your state of residence and subject to applicable legal thresholds and exceptions, you may have rights to access, correct, delete, or obtain a copy of personal information, and to opt out of certain uses of personal information.

You may exercise applicable rights by contacting us at support@orilo.live. We will not discriminate against you for exercising your privacy rights.

Additional categories and sensitive information

Where you enable the relevant features, the categories in Section 1 also include connected emails and other provider content, calendar and reminder information, health information, task records, and inferences from those sources. We use sensitive information only for the applicable purposes described in this policy and subject to its additional restrictions. Where state law provides rights to limit sensitive-information use or appeal a privacy-rights decision, you may submit the request or appeal to support@orilo.live. We verify requests as appropriate and respond as required by applicable law.