Privacy

Privacy policy

Last updated 12 August 2026 · Applies to the Oryva app and oryva.chat

The short version.

We collect what the app needs to work and nothing else. Your conversations are private to your account. We do not sell them, share them with advertisers, or use them to train models. You can export everything or delete everything, permanently, from inside the app.

1. Who we are

Oryva is built and operated by a team in India, and serves users worldwide. For any privacy question, or to exercise any right below, write to hello@oryva.chat and we will reply within 30 days.

2. What we collect

Account information

Your email address, and — if you sign in with Google — the name and profile image Google returns. A hashed password if you use email signin. Your confirmation that you are 18 or over.

What you create

The companions you design (name, appearance, temperament, voice, language and other traits), any reference photo you upload, and the media generated from it.

Your conversations

Messages you send and receive, voice notes, images shared in chat, and the memory derived from them — the facts your companion learns about you, and the record of moments that carried weight. This is the most sensitive data we hold and it is treated as such.

Technical data

Device push token (only if you enable notifications), app version, and error diagnostics.

On this website we use first-party analytics to see which parts of the page people read and where they drop off — page views, scroll depth, which buttons get clicked, and which link brought you here. To tell a returning visitor from a new one, this stores an identifier on your device that persists between visits.

If you are in the UK, EEA, Switzerland or India we ask first, and store nothing until you agree. Decline and we keep the identifier in memory for that visit only, then forget it. Elsewhere it runs by default and you can opt out below at any time.

This is measurement, not advertising. It is never used to target ads, never shared with ad networks, never sold, and never linked to your conversations in the app. If you join the waitlist we additionally store the email address, the phone platform you picked, and the country your request came from.

Your choice, any time.

What we never collect

Contacts, precise location, photo library beyond what you explicitly upload, microphone access outside a voice note you initiate, or anything from other apps.

3. Why we collect it

  • To run the service — a companion who cannot remember you is not the product.
  • To keep you safe — crisis detection and content safety, described in Safety.
  • To enforce limits — daily counters on the free tier.
  • To fix problems — aggregate error diagnostics.

We do not profile you for advertising, because we do not run advertising.

4. Who processes your data

We use a small number of processors, each bound to use the data only to provide their service:

  • Anthropic and Google — the language models that generate replies. Conversation context is sent to produce each response.
  • ElevenLabs and Sarvam AI — speech-to-text and text-to-speech for voice notes.
  • fal.ai — image generation for portraits and chat photos.
  • Amazon Web Services — media storage.
  • Cloudflare — this website and the waitlist.
  • PostHog (EU) — first-party website analytics, hosted in the EU.
  • Expo / Apple / Google — push notification delivery.
  • Firebase — Google sign-in.

Some of these are outside India, so your data may be processed abroad under appropriate contractual protections. We do not sell data to anyone, and we do not share it with advertisers or data brokers.

5. Training

We do not use your conversations to train models — not ours, not anyone else's. We do not sell them as a dataset.

6. How long we keep it

  • Conversations and memory — until you delete them or close your account. The point of the product is that they persist.
  • Account record — until you close your account.
  • Deleted account — removed from live systems immediately and purged from backups within 30 days.
  • Error logs — 30 days.
  • Waitlist email — until launch plus 12 months, or until you ask us to remove it.

7. Your rights

Wherever you live, you can do all of the following. Depending on where you are, some of these are also legal rights — under the UK and EU GDPR, the Australian Privacy Act, the California Consumer Privacy Act, Canada's PIPEDA, and India's Digital Personal Data Protection Act.

  • Access and export everything we hold — from Settings, or by asking us.
  • Correct anything inaccurate.
  • Delete individual memories, a whole companion, or your entire account and all of its memory. This is permanent and we cannot undo it.
  • Withdraw consent for notifications or optional processing at any time.
  • Object to or restrict processing, and ask for your data in a portable format.
  • Complain to your local data protection authority — the ICO in the UK, your DPA in the EU, the OAIC in Australia, or the Data Protection Board of India.

8. Security

Data is encrypted in transit. Every route and the chat connection require authentication, and every record is scoped to your account — there is no path by which one user reads another's conversations. Access to production data is limited to the people who need it to operate the service. No system is perfect; if there is ever a breach affecting your data we will tell you and the regulator, promptly.

9. Children

Oryva is 18+. We do not knowingly collect data from anyone under 18, and we close accounts we find. See Safety.

10. Changes

If we change this policy in a way that materially affects you, we will tell you in the app before it takes effect — not by quietly editing this page.

← Back to Oryva