Privacy Policy

Oranito is a calendar, task and habit planner with an assistant that can schedule work on your behalf. This policy describes what the app stores, why it needs it, and who else sees it. It covers the Oranito mobile app and the website.

What we store

• Your account. Email address, and the name and avatar you choose. If you sign in with Apple or Google we receive the email address associated with that account and nothing else.
• Your content. Tasks, events, habits, lists, notes, focus sessions and the preferences that go with them — timezone, working hours, reminder times.
• Calendar data. If you connect Google Calendar, the events from the calendars you authorise, so they can appear on your day alongside your tasks.
• Assistant conversations. Messages you send the assistant and the actions it takes on your behalf, so you can see and undo what it did.
• Subscription status. Whether you have an active plan. Card details are handled by Apple, Google or Stripe and never reach us.

Google Calendar

Connecting Google Calendar is optional. When you do, Oranito requests read access to your calendars and permission to manage events, so that events you create in Oranito can be written back to the calendar you chose.

Oranito's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, calendar data is used only to provide the scheduling features you see in the app. It is never sold, never used for advertising, and never used to train generalised machine learning models. No human at Oranito reads it, except where you have explicitly asked us to help with a support issue, or where the law requires it.

Access tokens are encrypted before they are stored. You can disconnect an account at any time from Calendars in the app, which revokes our access with Google and deletes the tokens.

The assistant

When you use the assistant, the message you send and the parts of your schedule needed to answer it are sent to Anthropic, which provides the underlying model. Anthropic processes this data on our behalf and does not use it to train its models. If you never use the assistant, nothing is sent.

Who else sees your data

We do not sell your data and we do not share it with advertisers. It is handled by a small number of providers who run parts of the service for us:

• Supabase — database, authentication and file storage.
• Vercel — hosting for the website and the API.
• Anthropic — the assistant's model, as described above.
• RevenueCat and Stripe — subscription status and payments.
• Expo — delivery of push notifications you have enabled.

Apple Calendar

Apple Calendar is read on your device only, using the permission you grant iOS. Those events are not uploaded to our servers and do not appear on the web.

Keeping and deleting your data

Your content is kept for as long as your account exists. You can delete your account from the app, which permanently removes your tasks, events, habits, calendar connections and assistant history. Backups are overwritten on a rolling basis within 30 days.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to hello@nistemo.com and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

Children

Oranito is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.

Contact

Questions about this policy: hello@nistemo.com.