ORight Privacy Policy

1. Overview

ORight ("we", "our", or "us") is a planning app for teens (13+) that helps you get school tasks, chores, and reminders out of your head and into an organized list. You write a daily "brain dump" about your day, and AI turns it into tasks you confirm and track. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

ORight is a personal organization tool. It is not a medical device, does not diagnose or treat ADHD or any other condition, and does not provide medical or psychological advice. By using ORight you agree to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Profile information you set during onboarding: your first name or nickname, grade level, school subjects, and chosen theme.
• Your date of birth, collected once to confirm you are 13 or older. If the date entered is under 13, signup is refused and the date is not stored.
• Brain dump text: the free-form text you write (or dictate using your keyboard's built-in microphone) describing your day.
• Tasks: the items you confirm, edit, or add, including titles, categories, subjects, due dates, notes, and completion status.
• App activity tied to features: XP earned and spent, streaks, and reward redemptions.
• Optionally, a parent or guardian's email address. This is a single field for a planned summary-email feature (see Section 2.5). It is entirely optional and skippable.
• Reminder preferences (which daily reminders are on and their times), if you enable reminders.

2.2 Information We Collect Automatically

When you create an account or sign in, we receive limited information from the sign-in provider you choose:

• Apple Sign In: your email address (or an Apple-generated relay address if you choose "Hide My Email") and your display name, if you choose to share them.
• Google Sign In: your Google account email address and display name.

We do not receive your Apple or Google password. We do not access your contacts, photos, location, camera, or microphone. Voice dictation, if you use it, is a feature of your device's keyboard provided by Apple under Apple's terms — ORight never receives or records audio; we only receive the resulting text, the same as if you had typed it.

2.3 AI Processing of Brain Dumps

Turning your brain dump into tasks is ORight's core feature, and it uses Anthropic's Claude AI service. Each time you tap Send on a brain dump:

• The text you wrote is sent to Anthropic to extract structured tasks (titles, categories, due dates).
• Your first name and age accompany the request so the AI can interpret your writing appropriately. Your email, account identifiers, and any other profile data are never sent.

Anthropic processes this data solely to generate the response. Per Anthropic's commercial API terms, your data is not used to train Anthropic's models. We keep a technical log of these AI requests and responses (tied to your account, used only for debugging and quality) which is deleted with your account.

If you prefer that a particular thought never be processed by AI, simply don't include it in a brain dump — tasks can also exist without AI by editing what's extracted.

2.4 Information We Do NOT Collect

• We do not use advertising tracking, ad networks, or sell data to anyone.
• We do not use third-party analytics SDKs that track your behaviour across apps.
• We do not collect your precise GPS location.
• We do not access your contacts, photos, camera, or microphone.
• We do not record audio — ever.

2.5 Parent Email (Optional, Not Yet Active)

During onboarding you may optionally provide a parent or guardian's email address for a planned feature: an occasional summary email of school-related obligations. As of this policy's date, no such emails are sent — the address is stored, unused, until the feature ships (this policy will be updated when it does). Important context:

• Providing it does not create an account for the parent.
• The parent gets no login and no ability to view your data inside the app.
• You can have it removed at any time by contacting support (in-app editing is planned).

2.6 Notifications

Reminders are local notifications scheduled on your device. They are not sent through a server, and we operate no push-notification infrastructure.

3. How We Use Your Information

We use the information you provide solely to operate and improve the app:

• To create and maintain your account.
• To turn your brain dumps into tasks and display them in your views (Today, Week, and so on).
• To track XP, levels, streaks, and reward redemptions — visible only to you.
• To schedule the daily reminders you configure.
• To respond to your support requests.

We do not use your data to train machine-learning models, and we do not share it with third parties for research or marketing.

4. How We Store and Protect Your Data

4.1 Storage Location

Your data is stored in a PostgreSQL database hosted by Supabase, Inc., on servers located in the United States. All data is encrypted at rest and in transit (TLS 1.2 or higher). Supabase's privacy and security practices are described at supabase.com/privacy.

4.2 Access Controls

Your data is protected by Row-Level Security policies that prevent any user from accessing another user's records. Our infrastructure is configured so that only your account can read, write, or delete your own data. ORight staff do not routinely access individual user records. Brain dump text is treated as sensitive: it is never logged outside the AI request log described in Section 2.3 and never sent anywhere except Anthropic for task extraction.

4.3 Infrastructure

The following third-party services process your data as part of delivering the app:

5. Data Retention

We retain your data for as long as your account is active. If you delete your account (see Section 6.3), all your personal data — including all brain dumps, tasks, XP history, profile information, and any parent email address — is permanently and irrecoverably deleted from our systems within 30 days.

We do not retain backups of deleted user data beyond 30 days after deletion. Anonymous, aggregated statistics that cannot be linked back to you are not subject to this deletion.

6. Your Rights and Choices

6.1 Access and Correction

Everything ORight stores about you is visible in the app: your profile, tasks, brain dump results, XP history, and reward redemptions. You can edit tasks and your theme at any time; for profile fields without in-app editing yet, contact support and we'll update them.

6.2 Portability

You can request a copy of your data in a machine-readable format by emailing contact@eureast.digital. An in-app export is planned.

6.3 Deletion

You can permanently delete your account and all associated data from inside the app: Settings → Delete my account. Deletion is permanent and cannot be undone. You can also request deletion by email at contact@eureast.digital.

6.4 GDPR Rights (EEA and UK Residents)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restriction of processing, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at contact@eureast.digital.

6.5 California Residents (CCPA)

California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. ORight does not sell personal information. To submit a CCPA request, contact us at contact@eureast.digital.

7. Age Requirement and Children's Privacy

ORight is designed for teens aged 13 and older and is not directed to children under 13. During signup we ask for your date of birth; if it indicates an age under 13, account creation is refused and the date of birth is not stored. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA without appropriate consent where required).

If you believe a child under 13 has created an account, please contact us at contact@eureast.digital and we will delete the account and its data promptly.

8. Sharing of Information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

• Service providers: we share data with the third-party services listed in Section 4.3 solely to operate the app. These providers are contractually prohibited from using your data for any purpose other than providing services to us.
• Legal requirements: we may disclose information if required to do so by law, court order, or governmental authority.
• Business transfers: if ORight is acquired or merged with another entity, your data may be transferred as part of that transaction. We will notify you via email or in-app notice before your data is transferred and becomes subject to a different privacy policy.
• With your consent: we will share information for any other purpose only with your explicit consent.

For clarity: providing an optional parent email (Section 2.5) does not grant that parent access to your data in the app.

9. International Data Transfers

ORight stores data on servers located in the United States. If you are located outside the United States, your data is transferred to and processed in the US. We rely on Standard Contractual Clauses for transfers from the EEA and UK.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this document and notify you via an in-app notice. Your continued use of ORight after the effective date of the updated policy constitutes your acceptance of the changes.

11. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or your data, please contact us:

• Email: contact@eureast.digital
• Website: eureast.digital/oright/privacy
• Mailing address: EurEast Digital LLC, 15333 Culver Dr, Ste 340 #2216, Irvine CA 92604