Privacy Policy

1. Controller

Controller

CreaCrate Productions e.U. (registered sole trader)

Address

Lotte-Hass-Weg 2/11, 1220 Vienna, Austria

Email (data protection)

privacy@oryap.app

A data protection officer is not mandatorily appointed (Art. 37 GDPR). For privacy questions, please use the address above.

2. What data we process

Account and profile data

Email address, password (for email sign-up; stored only encrypted/hashed via Supabase Auth), optional display name, your primary-use selection, plan (Free/Plus/Pro), app language and a push token if reminders are enabled. If you sign in with Apple or Google, we process the identifiers you release (e.g. an anonymized Apple relay address, a Google account identifier).

Voice recordings (audio)

When you record, your audio is sent to our transcription service. By default, the original audio is not stored after transcription. Persistent storage only occurs if you explicitly enable it on the Plus/Pro plans (see section 6).

Transcripts

The verbatim raw transcript is not stored on AI-processed entries by default — only the cleaned-up, structured content you see in the app is kept. The raw transcript is retained only if you enable it as a Plus/Pro feature, or temporarily after a failed AI run until reprocessing succeeds.

Content data (your entries)

The entries generated from your speech across the eight categories (to-dos, shopping, reminders, notes, study, ideas, wishlist, journal), including title, content, list items, dates, time zone and detected language. This content may contain personal or sensitive information if you dictate it — which is why it is stored exclusively on EU servers (see section 5).

Usage and billing data

Voice minutes used per month and their reset date (to enforce plan limits) and — on paid plans — customer/subscription identifiers from the payment provider and the subscription status. We do not process payment card data; this is held by Apple, Google or Stripe.

AI feedback

If you rate a classification with 👍/👎 or correct a category, we store this feedback (including a snapshot of the relevant transcript) to improve classification quality. This data is removed once its purpose has been fulfilled, at the latest after 14 days, as well as upon account deletion.

Consent records

The time and version of your acceptance of the Terms/Privacy Policy and of your consents (audio processing, audio/transcript storage, diagnostics). These records are required to meet our accountability obligation (Art. 5(2) GDPR).

Diagnostics and crash data (optional)

Only with your consent do we collect technical error and crash reports (device model, OS version, app version, error messages/stack traces) via Sentry. No content of your entries is transmitted.

Technical data / logs

Accessing our backend and edge functions generates technically necessary connection data (e.g. IP address, timestamp, request) processed for service delivery, security and abuse prevention.

3. Purposes and legal bases

You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR) — directly in the app settings. The lawfulness of processing carried out before withdrawal remains unaffected.

4. Artificial intelligence and automated processing

Speech-to-text is performed by Gladia; classification and language clean-up by Claude (Anthropic). No automated decision producing legal or similarly significant effects within the meaning of Art. 22 GDPR takes place: the AI only structures your own content, and you can change or delete any result at any time.

Your content is not used to train third-party AI models. Our processors are contractually engaged such that your audio and text data are not used to train their models and are processed solely to provide the service.

5. Recipients and processors

We follow an EU-data principle: storage and the database are located in the EU. The only documented exception for storage/processing is AI classification (EU + USA) and the technically unavoidable delivery of push messages via US gateways. The following processors and recipients are involved:

Data processing agreements under Art. 28 GDPR are in place with all processors. Your content is not shared with third parties for advertising purposes.

6. Storage of original audio and transcripts (opt-in)

Persistent storage of original audio and storage of the raw transcript are two separate, voluntary features of the paid plans (Plus/Pro). Both are off by default and enforced server-side.

The periods stated are maximums. In settings you can choose a shorter automatic deletion window (from 1 day). If you shorten the window, already-stored items become due earlier. If you switch a consent off again, the affected files or transcripts can be deleted. Nothing is kept indefinitely.

7. Retention periods

• Account and content data (entries): until you delete them or delete your account.
• Original audio: no retention without opt-in; with opt-in max. 30 days (Plus) or 365 days (Pro), or shorter at your choice. Expired audio files are deleted automatically, usually daily.
• Raw transcripts: no retention on AI entries without opt-in; with opt-in max. 30/365 days. Expired transcripts are deleted automatically, usually daily. After a failed AI run, the transcript is kept until reprocessing succeeds.
• Checked shopping-list items: automatically removed 30 days after being checked.
• AI feedback: once its purpose has been fulfilled, at the latest after 14 days — or earlier upon account deletion.
• Consent records and billing/contract data: archived as evidence even after account deletion; tax and commercial retention obligations in Austria are generally 7 years (§ 132 BAO, § 212 UGB).
• Diagnostics data (Sentry): only for a limited period in line with the diagnostics provider's retention.

8. International data transfers

Where data is transferred to the USA (AI classification by Anthropic sub-processors, push delivery via Expo/Apple/Google, payment and store services), we rely on appropriate safeguards under Art. 46 GDPR (in particular the EU Standard Contractual Clauses) and — where the recipient is certified — on the EU-US Data Privacy Framework. For transferring audio or transcript to the AI classification, we additionally obtain your explicit consent before your first recording (Art. 49(1)(a) GDPR).

9. Push notifications

If you enable reminders, OrYap sends a push message when one is due. It contains the reminder title and the note ID and is delivered via Expo (US) to Apple APNs or Google FCM. As a result, the reminder title you wrote leaves the EU. This is inherent to mobile push (APNs/FCM are the only delivery channels) and is disclosed here. You can disable push messages at any time in your device's system settings.

10. Your rights

Under the GDPR you have the following rights:

• Access to the data processed about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17) — available directly in the app via account deletion
• Restriction of processing (Art. 18)
• Data portability (Art. 20) — on request we provide your data in a structured, commonly used, machine-readable format
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consents with effect for the future (Art. 7(3))

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, email dsb@dsb.gv.at, www.dsb.gv.at.

11. Account and data deletion

You can delete your account at any time directly in the app — no support email required. Deletion irreversibly removes:

• all stored original-audio files of your account,
• all notes and entries (including list items),
• your AI feedback,
• your idea projects and shopping categories,
• your profile and your login account.

For legal reasons we archive or retain: billing/subscription data and consent records (accountability and retention obligations) and a minimal deletion record (e.g. account ID, email, plan, time of deletion) to be able to evidence a deletion.

If you no longer have access to the app, you can also request deletion by email to privacy@oryap.app (subject “Account deletion”). A step-by-step guide that is publicly accessible without login is available at https://oryap.app/en/data-deletion.

12. Data security

Transmission is encrypted (TLS). Data is stored in the EU. Every account is strictly isolated from others via row-level access control (Row Level Security). API keys for AI and transcription services are held server-side only and never in the app. Passwords are stored hashed only.

13. Minors

OrYap is intended exclusively for adults. We do not knowingly collect personal data from persons under 18. If we become aware of such data, we delete it.

14. Cookies and local storage

This website uses no tracking or advertising cookies. The app uses no browser cookies but on-device storage (for your login session and offline features). Details are in the Cookie notice.

15. Changes to this policy

We may adapt this Privacy Policy if the service or the legal situation changes. The version published in the app and on this website is the authoritative one; we will inform you in the app of material changes.