Orliea Privacy Policy
The short version
- Orliea is a record. You log how you feel, and we store it and show it back to you. We never diagnose, never give medical advice, and nobody at Orliea reads your entries.
- Your health data is used for one thing: running Orliea for you. That means storing your record, showing it back to you in your log, charts, cycle view and summaries, keeping it all secure, and answering you when you write to us. It is not sold, not used for advertising, and not used to train AI.
- We do not sell your data. No advertising, no ad tracking, no data brokers, no employers, no insurers.
- No AI is trained on your data. Not ours, not anyone else's.
- Your data is stored in Ireland, in the European Union, under European data protection law, wherever you live. Orliea is a German company; the company that hosts the data for us is named in section 6.
- You are in control. Export a copy or delete everything, at any time. Deleting is immediate and permanent.
- We tell you before anything changes. New provider, new feature that touches your data, new version of this policy: you hear about it first, by email.
The rest of this page explains each of those in detail.
1. Who we are
Orliea is run by:
Orliea UG (haftungsbeschränkt)
Registered at Amtsgericht München, HRB 315939
Managing director: Hanna Metz
Email: [email protected]
In data protection language we are the "controller": the company responsible for your data. We have no data protection officer, because the law does not require one at our size, and no EU representative, because we are in the EU.
This policy covers the Orliea app. If you visited orliea.app or signed up to the launch waitlist there, the website's own privacy notice covers that.
2. What we collect
We collect only what the app needs to work. Nothing on this list is hidden, inferred or bought from anyone else.
2.1 Your account
- Your first name, or whatever you would like to be called. Used to greet you and printed on summaries you create.
- Your email address. It is how you sign in (we email you a one-time code; there is no password) and how we reach you about your account.
- Your date of birth. We check you are 18 or over when you sign up. You can also choose to print it on summaries you create, because clinics identify people by name and date of birth.
- Your consent record: that you agreed to this policy and to Orliea storing your health data, when, and which version of this policy and the Terms of Use you agreed to.
- Settings: your reminder preference.
2.2 Your health record
This is the point of Orliea, and it is the most sensitive data anyone holds about you. In law it is "special category" data, which means it gets the strongest protection and can only be stored with your explicit agreement. You give that agreement when you tick the consent box at sign-up.
Everything below is optional in the sense that you decide what to log. Nothing is required.
- Symptoms: which ones you track, and how you rate them each day, with any notes.
- Mood, energy, sleep and how your day was.
- Your cycle: period dates, flow, spotting, discharge, cramps, your typical cycle and period length, and your contraception if you tell us.
- Period history you import from a file exported by another app, if you choose to. The file is read on your phone and is not uploaded; what we store is the list of days it contains (the date, the flow level, spotting and clots where the file has them) and a note of which app it came from, how many periods and days were imported, and when.
- Conditions: diagnosed or suspected, with dates and notes.
- Medications and supplements: what you take, doses, whether you took them, side effects and how well they work for you.
- Context: sleep, stress, alcohol, caffeine, exercise, water, food, whether you were ill, and the behaviour patterns you choose to track.
- Food reactions and procedures you record.
- Documents you upload: lab reports, scans, letters, as PDFs or photos.
- Lab results you enter.
- Links you make between records (for example, a document attached to a condition).
- Free text wherever the app lets you write: notes, concerns, descriptions. Please remember that free text can contain anything, including information about other people. We never analyse or search it. It is stored and shown back to you as you wrote it.
- Summaries you create from your record (a monthly summary or a summary for an appointment). A summary contains only what you tick, and printing your name and date of birth on it is your choice. Summaries are created on your phone from your record; we do not store them on our servers. Once you download or share a summary, that copy is under your control, not ours.
- Requests you send us through the Requests box: the type, what you wrote, and when. It may contain health details if you choose to write them. When you report a bug, the report also carries your app version and phone model if you leave "Include app version and phone model" ticked; it is ticked by default.
2.3 Your subscription
Subscriptions are bought through the Apple App Store or Google Play. They handle payment. We never see or store your card details. From the store we receive a confirmation that you subscribed, the plan, its status (trial, active, cancelled) and its renewal date, so the app knows to let you in. We use RevenueCat to receive those confirmations from the stores (section 6). RevenueCat knows you by a random id we assign, never by your email.
2.4 Technical data
- Sign-in and session: when you sign in, and a session token stored on your phone so you stay signed in. The token is kept on your phone, in storage that only the Orliea app can read.
- Server logs: our database provider keeps standard technical logs (the address your phone connects from, the time, what was requested, errors) for a short period set by our provider's plan, to keep the service running and secure.
- Error records: the app records its own failed saves and loads, and crashes, in an error table in our own database, so we can find faults. A record says which part of the app failed and how, with your account id, the app version and the platform; it is stripped of health content before it is written, and it is deleted after 90 days.
- Export record: when you export your data (section 11), we record that you did and when, nothing about the content.
- App updates: when you open the app it checks Expo's update server for a newer version of the app's code. That check sends your phone's platform (iOS or Android), the app's version, a random identifier the app created on your phone (not a hardware ID), whether the last launch of the app crashed, and, like any internet request, your IP address. It never sends anything from your account or your record. Expo is listed in section 6.
- Store statistics: Apple and Google show us how many people download and subscribe, by country, in aggregate. That comes from the stores, not from anything inside the app.
2.5 What we deliberately do not collect
- No location. Not your GPS, not your IP address stored against your account.
- No contacts, no photos beyond the documents you choose to upload.
- No advertising identifiers.
- No data from any other app or service, with one exception you control: period history you choose to import from a file exported by another app (section 2.2). Everything else in your record was typed, tapped or uploaded by you.
3. We do not track you
No advertising, no ad tracking. There are no advertising, marketing or attribution tools in the app that identify you, and there will not be. Nothing in the app tells an ad network who you are or what you do, we do not retarget you, and we do not upload user lists to advertising platforms. A rule in our automated tests blocks such tools from being added, and we run those tests before every release. If we ever advertise Orliea, the app takes no part in measuring it. We see only numbers that identify nobody: the app stores' own aggregated reports, how many people used a promo code, and how many visits a campaign link brought to our website.
No analytics or crash reporting today. As of this version, the app contains no analytics tool and no crash-reporting service, so nothing inside the app reports what you do or what goes wrong to any other company. (Failed saves, loads and crashes are written to our own error table, section 2.4, and nowhere else.) If we add one later, to find faults or to see which features are used, it will be set up so that nothing you logged can reach it, the company running it will be added to our providers page (section 6) with 30 days' notice, and this policy will say so.
What the app keeps on your phone: the sign-in token that keeps you logged in, your preferences (App Lock, how your symptoms are laid out, your Big Picture and Symptom Circle picks), the summaries you choose to save and any summary you are still putting together, and, if you use the home-screen widgets, what they last showed. None of it is tracking, and none of it leaves your phone except the token, which proves to our servers that it is you. Deleting your account removes all of it from the phone. Signing out keeps your preferences and saved summaries on the phone for when you sign back in.
4. Why we use your data, and the legal basis for it
European law requires us to name a legal reason for each use. Here they are, in plain words.
| What we do | Why | Legal basis |
|---|---|---|
| Store your health record and show it back to you as charts, counts, calendars and summaries | It is the service | Your explicit consent (Article 9(2)(a) and Article 6(1)(a) GDPR). You can withdraw it at any time by deleting your account. |
| Create your account, sign you in, email you one-time codes and service messages | Running the service you asked for | Contract (Article 6(1)(b)) |
| Confirm your subscription with the store | Same | Contract (Article 6(1)(b)) |
| Keep the service secure, fix faults, prevent abuse | Our legitimate interest in running a safe service | Legitimate interests (Article 6(1)(f)) |
| Answer you when you write to us or send a request | Same, and your consent where you include health details | Contract, legitimate interests, and your consent for health details |
| Handle your rights requests, keep records the law requires | Legal duty | Legal obligation (Article 6(1)(c)) |
What we never do with it: sell it, use it for advertising, share it with employers, insurers or data brokers, train AI on it, or use it for any purpose other than running Orliea for you. If we ever want to use your data in a new way, we will ask first.
No automated decisions. Orliea does arithmetic on what you entered: counts, averages, cycle day numbers, an estimate of when your next period might start. It does not decide anything about you, score you, or assess your health. No decision with legal or similar effect is ever made about you by software.
5. Orliea never diagnoses
This belongs in the privacy policy because it is a promise about what we do with your data.
- Orliea is not a medical device and is not certified or registered as one.
- Orliea does not diagnose, treat, or give medical advice. It shows you what you recorded. Every chart, count and date in the app is arithmetic on your own entries.
- No doctor, nurse or other clinician reviews your data. Nobody at Orliea reads your entries.
- We will never contact you about your health, however your entries look. Orliea does not watch for problems and will not warn you.
Always talk to a qualified healthcare professional about your health. If you need help urgently, contact your doctor or your local emergency services.
6. Who we work with
We use a small number of companies to run Orliea. Each one is bound by a data processing agreement, either signed with us or built into the terms it works under, meaning it may only handle your data on our instructions and for our purposes. We keep the current list on a separate page, orliea.app/providers, and we give at least 30 days' notice on that page and by email before adding anyone new.
As of 16 October 2026:
| Company | What it does for us | What it can see | Where |
|---|---|---|---|
| Supabase (Supabase Pte. Ltd, Singapore; hosting through Amazon Web Services) | Database, sign-in, file storage | Your account and your whole health record, encrypted at rest | Stored and processed in Ireland (Amazon Web Services' Dublin region, eu-west-1). The contract is with Supabase's Singapore company, covered by the EU Standard Contractual Clauses (Module Two). Supabase uses its own sub-contractors, such as Amazon Web Services for hosting, under our agreement with it. |
| Resend (Plus Five Five, Inc., United States) | Sends our emails: sign-in codes, service messages, and a short notice to us when a Requests box message arrives | Your email address. The notice about a Requests box message carries only its type and an id, never what you wrote, your name or your email | Resend is a US company, and the mail path we use runs through a data centre in Ireland. The transfer is covered by the EU Standard Contractual Clauses in Resend's data processing addendum; Resend states it is certified under the EU-US Data Privacy Framework |
| Apple (Apple Distribution International Ltd, Ireland) and Google (Google Commerce Ltd, Ireland) | Sell the subscription and process payment | Your purchase and payment details. They are the seller of the subscription and act as independent controllers for payment data, under their own terms and privacy policies. We only get the confirmation described in 2.3. | Their own systems |
| Expo (650 Industries, Inc., United States) | Delivers app updates | Your platform, the app version, a random per-install identifier, whether the last launch crashed, and your IP address. Never your account or your record | United States, under the EU Standard Contractual Clauses in Expo's terms; Expo states it participates in the EU-US Data Privacy Framework |
| Google Workspace (Google Cloud EMEA Limited, Ireland) | Hosts our mailbox, [email protected] | Anything you email us, including health details you choose to include, and the notices that a Requests box message arrived (type and id only) until we delete them | Google's data centres in the EU and the United States, under Google's Cloud Data Processing Addendum with the EU Standard Contractual Clauses |
| RevenueCat, Inc. (United States) | Receives subscription confirmations from Apple and Google and tells the app whether you are subscribed | A random id we assign, which store, which plan, purchase and renewal dates. Never your email, card details or health data | United States, under the EU Standard Contractual Clauses in RevenueCat's data processing addendum |
Nobody else receives your data, with three exceptions, all explained below: if the law requires it (section 14), if Orliea is sold (section 12), or if Orliea closes (section 13).
7. AI
Orliea does not use AI on your data. If we ever add a feature that does, we will update this policy and tell you before it is switched on.
8. Where your data is stored, and transfers
Your record is stored in Ireland, in the European Union, wherever you live. We are a German company, so European data protection law (the GDPR) applies to everything we do with your data, whether you are in Berlin, Dublin or Denver.
Some of the companies we work with are outside the EU (section 6). Where data leaves the EU, it is covered by the EU Standard Contractual Clauses, a contract approved by the European Commission that binds the recipient to European standards. Where a US provider is also certified under the EU-US Data Privacy Framework, section 6 says so.
Requests from authorities. Because we are a German company holding data inside the European Union, requests for your data from any authority are handled under EU law: German law for us, Irish law for the company that hosts the data. We would only hand over data where the law clearly requires it, we would challenge requests we believe are unlawful, and we would tell you unless the law forbids it. We hold as little as possible about you beyond your record itself, which is by design.
9. How we protect it
Honest description, no marketing words.
- Encrypted in transit and at rest. Everything between your phone and our servers travels over TLS. The database and the file storage are encrypted at rest on the server.
- Row-level isolation. Every row in the database is tied to your account, and the database itself refuses to show it to anyone else. This is enforced at the database layer, not just in the app.
- No passwords. Sign-in is by a one-time code to your email, so there is no password to leak. This also means your email account is the key to your Orliea account. Please keep it secure, and tell us if you think someone else has accessed it.
- Private documents. Uploaded documents live in a private storage area that only your account can reach, opened through links that expire within a minute.
- No tracking surface. No third-party tools inside the app means fewer places for data to leak.
- Access. Only the managing director has access to production systems. No contractor or investor has access to real records.
- What we do not claim. We do not offer end-to-end encryption, and we do not claim that only you can read your data. Our systems can read it in order to show it to you. We say this plainly because some apps in this space have implied otherwise.
If something goes wrong. If we ever have a data breach that puts you at risk, we will tell you without undue delay, and we will notify the Bavarian data protection authority within 72 hours as the law requires.
10. How long we keep it, and deleting
- While your account exists: your record is kept so you can use it.
- When you delete your account: everything is deleted immediately and permanently: your account, your whole record, your uploaded documents, your consent record. The deletion runs as one operation across the whole database. We cannot recover it, so get a copy first if you want one. Copies in our provider's routine backups are deleted on a short rolling schedule.
- If you stop using Orliea: an account that has not been opened for three years is deleted, with everything in it, in the same way as when you delete it yourself. We email you 60, 30 and 7 days before, with how to download a copy first. Opening Orliea once is enough to keep your account. An account with a running subscription, or a free account we have given you, is never deleted this way.
- Requests box messages: deleted automatically 12 months after you sent them. The notice emailed to us (its type and an id only) is deleted once we have dealt with it.
- Emails you send us: kept 12 months after the matter is closed, then deleted.
- Sign-in codes: valid for one hour, then useless.
- Subscription confirmations: deleted with your account. Apple and Google keep their own purchase records under their own rules.
Deleting is in the app: Settings, Data & Privacy, Delete my account and all data. Two taps and a confirmation. You can also request deletion as described on orliea.app/support or by email, and we will do it for you.
11. Your rights, and how to use them
Under the GDPR, and we apply the same rights to everyone wherever you live:
- Access: a copy of everything we hold about you.
- Export (portability): your data in a machine-readable format. Settings, Data & Privacy, Export my data gives you a complete copy of your record at any time. It does not include the summaries saved on your phone (they are already yours) or our short technical records (the error records and the export record in section 2.4); email us if you want those too, and we send them within a month.
- Correction: everything in your record can be edited in the app. Your name and settings too. Email us for anything you cannot change yourself.
- Deletion: section 10.
- Withdraw consent: Orliea cannot work without storing your health data, so withdrawing that consent means deleting your account, which you can do at any time.
- Restriction and objection: you can ask us to pause or stop a particular use of your data.
- Complain: you can complain to a data protection authority. Ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. You can also complain to the authority in your own country.
To use any right, email [email protected]. We answer within one month. We may ask you to confirm it is really you, usually by replying from your account email.
If you live in the United States: you have the same rights as everyone else above. We never sell your data and never share it for advertising, so there is nothing to opt out of. If you live in Washington or Nevada, our consumer health data privacy policy restates this policy in the order those states' laws ask for.
12. If Orliea is sold
If Orliea is ever sold or merged into another company, your data would go with it, under this policy and no weaker one. Before that happens you would get an email with notice and the chance to export and delete your data first.
13. If Orliea closes
If we ever stop running Orliea, we will give you at least 60 days' notice by email, keep export working throughout, and then delete all user data.
14. If the law requires it
We will disclose data where a law, a court or an authority requires it, in the way described in section 8. We will not disclose anything to anyone on a voluntary basis.
15. Age
Orliea is for people aged 18 and over. We check your date of birth at sign-up. Orliea is not directed at children and we do not knowingly hold data about anyone under 18. If you believe we do, email us and we will delete it.
16. Changes to this policy
When we change this policy in a way that matters to you, we email you at least 30 days before it takes effect, and the version number and date at the top change. Previous versions stay available at orliea.app/privacy-archive. If you do not agree with a change, you can export your data and delete your account before it takes effect.
Small changes (a typo, a new address) may be made without notice, and the date at the top still changes.
17. Contact
Orliea UG (haftungsbeschränkt)
[email protected]
Orliea is a record of what you tell it. It is not a doctor, and it never will be.
Version 2.5, 18 October 2026 · Previous versions · Who we work with
Orliea UG (haftungsbeschränkt), Ammerlander Hauptstr. 5, 82541 Münsing, Germany