Orilo Privacy Policy
This Privacy Policy describes how Echotime Technology (a Cayman Islands exempted company) and its affiliates (collectively, "Orilo," "we," "us," or "our") collect, use, and disclose personal information when you use Orilo, our voice-first AI Host application (the "Service"), our websites, and other services that link to this policy.
Please read this Privacy Policy carefully. By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Personal Information We Collect
We collect personal information in the following ways.
1.1 Information you provide to us
- Account information. First name or nickname, date of birth, and any other profile information you enter during onboarding. We use your date of birth to confirm that you meet the minimum age requirement for the Service.
- Voice input and User Content. Recordings and transcripts of the voice conversations you have with your AI Host, including any files, images, or text you submit through the Service.
- Memories. Preferences, interests, routines, and other facts you tell your Host, which the Service stores as "Memories" to personalize future sessions. You can review, edit, and delete Memories at any time in Settings.
- Communications. Records of your communications with us, including support requests, feedback, survey responses, and correspondence.
- Third-party sign-in data. If you sign in through Google or Apple, we receive limited profile information from that provider, such as your name, email address, and a unique identifier, in accordance with your authorization.
- Subscription and purchase information. If you purchase a subscription or other paid feature, transactions are processed by the Apple App Store or Google Play. We receive transaction confirmations, purchase history, subscription status, renewal status, and related identifiers, but we do not receive or store your full payment card details.
- Content shared by other users. We may receive information about you when another user shares content with you or submits content that includes information about you.
1.2 Information we collect automatically
- Log data. IP address, browser or app version, and information about your requests and how you interact with the Service.
- Usage data. Features you use, the times you use them, session duration, and aggregate patterns of interaction with your Host.
- Device information. Device model, operating system, unique device identifiers, mobile network information, language, and time zone.
- Location information. Approximate location inferred from your IP address and, when you explicitly grant permission for a feature that requires it, precise GPS location.
- Permission information. Whether you have granted or denied permissions such as microphone access, precise location access, and notifications, together with information needed to operate those features.
- Microphone data. When you grant microphone permission and use voice features, the Service processes audio captured through your device microphone to provide voice interaction.
- Notification data. When you enable notifications, we may process a device push token and notification preferences to deliver service-related notices, reminders, security alerts, and marketing messages where permitted.
- Cookies and similar technologies. We and our service providers use cookies, SDKs, and similar technologies to operate the Service, remember preferences, measure performance, prevent fraud, and support analytics. You can control cookies through your browser or device settings.
1.3 Information from other sources
We may receive information about you from third parties, including analytics providers, advertising and marketing partners, fraud-prevention providers, app stores, sign-in providers, and other users who share content with you. We may combine this information with information we collect directly.
2. How We Use Personal Information
We use personal information for the following purposes.
- Providing, maintaining, and improving the Service, including operating your AI Host, generating personalized morning briefs, and remembering your preferences. We also use account information, including date of birth, to verify eligibility and enforce age restrictions.
- Processing voice input, providing speech recognition and speech synthesis, and enabling microphone-, location-, and notification-based features that you choose to use.
- Managing subscriptions, confirming purchases, providing paid features, and maintaining subscription status.
- Developing and evaluating features, products, and services, including research on voice interaction, natural-language understanding, safety, and personalization.
- Communicating with you, including sending service-related notices, security alerts, reminders, and marketing messages, which you can opt out of at any time where applicable.
- Preventing fraud, abuse, and illegal activity, and enforcing our Terms of Service and other policies.
- Complying with legal obligations, responding to lawful requests from public authorities, and protecting our rights and the rights of others.
- Creating aggregated or de-identified information that cannot reasonably be used to identify you, and using it for any lawful purpose.
Model Training
We do not use your private voice conversations, voice recordings, conversation transcripts, or Memories to train foundation or general-purpose AI models. We may process this information as necessary to provide the Service and may use limited aggregated or de-identified information to evaluate and improve the safety, reliability, and performance of the Service.
3. How We Disclose Personal Information
We do not sell your personal information. We disclose personal information in the following circumstances.
- Service providers. Third-party vendors and service providers that perform services on our behalf, including cloud hosting, AI processing, speech-to-text and text-to-speech, analytics, customer support, communications, app-store billing support, fraud prevention, and security. These providers are permitted to process information only for the services they provide to us, subject to applicable contractual and legal restrictions.
- Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
- Legal requirements. We may disclose personal information to government or law-enforcement authorities, or to private parties, if we believe in good faith that disclosure is necessary to comply with applicable law, respond to legal process, protect the rights or safety of any person, or investigate suspected fraud or misuse of the Service.
- Affiliates. We may disclose personal information to our subsidiaries and affiliates for the purposes described in this policy.
- With your consent. We may disclose information with your consent, or at your direction.
4. Your Rights and Choices
Depending on where you live, you may have the following rights regarding your personal information.
- Access a copy of the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your personal information, subject to certain exceptions.
- Object to or restrict certain processing of your personal information.
- Withdraw consent where we rely on consent as our legal basis for processing.
- Port your personal information to another controller in a machine-readable format.
- Lodge a complaint with a data-protection authority in your country.
To exercise these rights, contact us at the address in Section 10. You may also manage your account, review and delete Memories, and delete your entire account directly from the Service's Settings menu. Deletion of your account will delete your Memories and content, except where we are required to retain records to comply with legal obligations, resolve disputes, prevent fraud, protect security, or enforce agreements.
You can manage microphone, precise location, and notification permissions through your device settings. You can opt out of marketing messages by using the unsubscribe method provided in the message or by contacting us.
5. Age Restrictions and Children's Privacy
The Service is intended only for individuals who are 18 years of age or older. Individuals under 18 may not create an account, access, or use the Service, even with the consent of a parent or legal guardian. We do not knowingly collect personal information from anyone under 18. If you believe that an individual under 18 has provided personal information to us or is using the Service, please contact us at support@orilo.live. If we learn that we have collected personal information from an individual under 18, we will take reasonable steps to suspend or close the account and delete the personal information, except where retention is required by law or necessary for security, fraud prevention, or legal compliance.
6. Security and Retention
We implement commercially reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, prevent fraud, protect security, and enforce our agreements. When we no longer need to retain personal information, we will delete or de-identify it.
7. International Data Transfers
Orilo is provided by a Cayman Islands entity and processes information globally. When we transfer personal information across borders, we take steps to ensure the information receives an adequate level of protection, including through contractual safeguards such as the European Commission's Standard Contractual Clauses where applicable.
8. Links to Other Websites
The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you use.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other means before the changes take effect. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Echotime Technology
Registered office:
Grand Pavilion, Hibiscus Way
802 West Bay Road
P.O. Box 31119
Grand Cayman KY1-1205
Cayman Islands
Email: support@orilo.live
Appendix A — Additional Disclosures for Residents of the European Economic Area, United Kingdom, and Switzerland
Controller
The controller of your personal information is Echotime Technology, the Cayman Islands entity identified above.
Legal bases for processing
We rely on the following legal bases under the EU/UK General Data Protection Regulation:
- Performance of a contract with you, to provide the Service and honor the Terms of Service.
- Our legitimate interests, including operating and improving the Service, preventing fraud, protecting security, and communicating with you, where these interests are not overridden by your rights.
- Compliance with legal obligations.
- Your consent, where required for specific processing such as marketing communications or optional device permissions.
Data-protection authority
You have the right to lodge a complaint with your local data-protection authority. We will always be happy to hear from you first, and encourage you to contact us before filing a complaint.
Appendix B — Additional Disclosures for United States Residents
This appendix supplements the Privacy Policy for residents of U.S. states with applicable comprehensive privacy laws.
Categories of information collected
In the past 12 months, we have collected the categories of personal information described in Section 1, including identifiers, account information, voice recordings and transcripts, subscription and purchase information, usage data, device and permission information, approximate and precise location where authorized, notification data, and inferences drawn from that information.
Sale or sharing of personal information
We do not sell personal information in exchange for money. We do not share personal information for cross-context behavioral advertising.
Your rights
Depending on your state of residence and subject to applicable legal thresholds and exceptions, you may have rights to access, correct, delete, or obtain a copy of personal information, and to opt out of certain uses of personal information.
You may exercise applicable rights by contacting us at support@orilo.live. We will not discriminate against you for exercising your privacy rights.