Privacy policyPrivacy policy

This Privacy Policy explains how Orene (“Orene”, “we”, “us” or “our”) handles information when you use the Orene iOS application, visit an Orene website, or contact support. It applies to information handled by Orene and by service providers acting for Orene. Apple separately handles information under Apple’s own privacy terms when you use Sign in with Apple, the App Store, In-App Purchase, or Apple’s refund and subscription services.

Our product is designed around four commitments:

• Your photographs, videos, edits, and saved projects stay on your device. Orene does not upload them to our servers.
• Editing is performed locally. Core Image, Vision, and Orene’s editing models run on your iPhone. Your media is not sent to a third-party image or generative-AI service.
• We do not train AI on your media. We do not use your photographs, videos, projects, edits, or camera roll to train, fine-tune, evaluate, or improve an AI model.
• We do not sell personal information or use it for targeted advertising. Orene does not track you across apps or websites owned by other companies for advertising.

We measure visits to our homepage and, separately, clicks on our download link, which forwards you to the App Store. Download clicks are not confirmed installations. We use this information to understand which countries, campaigns, and creator links bring visitors to Orene.

We record the visited page, time, approximate country, region and city supplied by our hosting provider, coarse device, operating system and browser categories, language, referring website origin, and campaign or creator labels included in the link. Referrer paths and query strings, raw user agents, and raw IP addresses are not stored in our analytics database. Do not put personal or sensitive information in campaign labels.

A random first-party visitor cookie lasts up to one year from your latest visit. A session cookie expires after 30 minutes without another tracked homepage or download-link visit. A signed first-party attribution cookie keeps the marketing source and campaign or creator labels for the same 30-minute window, renewed with tracked activity, so a homepage visit and subsequent download click retain their acquisition source. They contain no name, email, or account information and are not connected to your Orene account or purchases. These identifiers are pseudonymous, not a guarantee of absolute anonymity.

IP addresses are processed transiently to create a secret-keyed hash that rotates daily for abuse prevention. Stored hashes are removed after seven days, request-limit records after one day, and visit records after 365 days through scheduled maintenance. Hosting providers may maintain separate operational logs under their own retention settings.

Website analytics is available only in our private admin dashboard and is processed using Vercel and Supabase. We do not use browser fingerprinting, track people across unrelated websites, or include photographs, edits, or projects in these analytics.

We skip analytics when your browser sends Do Not Track or Global Privacy Control. You can also disable website analytics for this browser. This clears the visitor, session, and attribution cookies and saves your choice for one year. The App Store redirect continues to work.

The table below separates information that remains local from the limited information that is processed online. “Collected” here means transmitted off your device in a way that Orene or a service provider can access for more than the time needed to serve the request.

Orene does not include an advertising SDK and does not ask for contacts, precise location, health data, or access to the contents of your messages. If a future version changes what is collected, we will update this policy and the App Store privacy disclosures before the change applies.

Photos you choose

When you choose an image using Apple’s photo picker, the system gives Orene access to the item you selected so it can be copied into Orene’s private app storage and edited. Orene does not receive general read access to your camera roll and cannot browse unselected items through its add-only Photos permission.

Camera captures

When you use Orene’s camera, frames are graded on your device’s GPU. Captured photographs and videos are written to Orene’s private local directory. Video audio is recorded only after you choose video mode, attempt to record, and grant microphone permission. Camera frames and microphone audio are not transmitted to Orene.

Projects and exports

A saved project contains the original selected photograph and the edit settings needed to resume your work. Projects and Orene camera captures remain in the app’s local storage. When you export, Orene asks iOS for add-only access and writes the finished file to Photos. Once exported, that copy is controlled by you through the Photos app and any sync or backup settings you have chosen with Apple.

Vision and editing models

Features such as face landmarks, person segmentation, retouching masks, backdrop treatment, lighting, filters, and film looks use Apple frameworks and Orene assets locally on your device. Orene does not use a remote generative-AI endpoint for these features. Neither Orene nor its service providers receive your pixels for model training, human review, analytics, or advertising.

Sign in with Apple

Orene uses Sign in with Apple as its account system. Apple provides a unique account identifier and may provide your name and an email address or private relay address, depending on what you choose to share. Apple normally provides a name only on the first authorization. Orene stores the account identifier and the profile details needed to recognize you and preserve the name shown in the app.

Supabase provides Orene’s authentication and account database. It processes the account identifier, session credentials, profile name, and any Apple-provided email or relay address associated with authentication. Passwords for your Apple Account are never provided to Orene or Supabase.

Looks and effect assets

The Looks catalogue and effect assets are public, non-personal content delivered from Orene’s backend and cached on your device. As with any internet request, the infrastructure serving that content may temporarily process technical information such as IP address, request time, app version, and response status to deliver and secure the request. Orene does not combine catalogue requests with your photos or projects.

Membership purchases are made through Apple’s In-App Purchase system. Apple processes your payment method, billing address, tax information, and transaction. Orene does not receive your full payment-card or bank-account details.

RevenueCat helps Orene confirm whether a membership is active and restore purchases across your devices. Depending on the transaction and device, Apple and RevenueCat may process an app user identifier, product selected, purchase and renewal dates, trial status, expiration date, storefront or country, transaction identifiers, refund status, app version, device and operating-system information, IP address, and related entitlement events. Orene uses this information only to provide and support paid access, prevent purchase errors or abuse, and maintain required business records.

Apple controls billing, cancellation, and refund decisions for App Store purchases. Orene receives status updates needed to grant or remove access, but not the financial credentials used to pay.

Orene asks for access only when the related feature needs it:

• Selected photos: the Apple photo picker provides only an item you actively select for editing.
• Photos add-only: used to save an exported photograph or video to your camera roll; it does not allow Orene to read your library.
• Camera: requested when you first open Orene’s camera.
• Microphone: requested separately when you first try to record video; it is not required for still photography.
• Notifications: optional alert-only reminders about your local work, trial timing, tips, and inactivity. Orene does not ask for notification sounds or badges.

You can change these permissions at any time in iOS Settings. Denying or revoking a permission affects only the features that need it. Turning off notifications does not prevent you from using editing features.

We use the limited online information described above to:

• create, authenticate, secure, and maintain your Orene account;
• show and preserve the profile details you choose to use;
• validate trials and memberships, restore purchases, and provide paid features;
• deliver the public Looks catalogue and effect assets;
• diagnose account, entitlement, download, and service-availability problems;
• answer support, privacy, and refund-related communications;
• protect Orene, its users, and service providers from fraud, abuse, security threats, and unlawful activity; and
• comply with tax, accounting, legal, and App Store obligations.

We do not use account or subscription data to build an advertising profile. We do not use photos, videos, projects, face landmarks, masks, or edit settings for analytics, advertising, or model development.

Orene does not sell or rent personal information. We disclose only the information necessary for the purposes in this policy to the following categories of recipients:

• Apple: Sign in with Apple, App Store distribution, In-App Purchase, subscription management, refunds, Photos, and other iOS platform services.
• Supabase: authentication, account records, and delivery of Orene’s public catalogue and effect assets.
• RevenueCat: subscription entitlement validation, purchase restoration, and related transaction support.
• Support and infrastructure providers: email, hosting, security, and technical systems needed to respond to you and operate the limited online parts of Orene.
• Authorities or transaction parties: when reasonably necessary to comply with law, enforce our terms, protect rights and safety, investigate fraud, or complete a merger, financing, reorganization, or sale. Where permitted, we will require a successor to honor this policy.

We require service providers acting for Orene to use information only to provide their contracted service and to protect it consistently with applicable law and this policy. Their own policies also apply when they act independently, such as Apple processing an App Store purchase.

Local media

You control local projects and captures in Orene and can delete them in the app. Deleting the app removes its local container from that device, subject to any device or computer backups controlled by you or Apple. Removing Orene does not remove copies you exported to Photos. Deleting a local project does not require a request to us because Orene never held a server copy.

Account data

We keep account information while your account is open and for as long as reasonably needed to operate the service, resolve disputes, prevent fraud, and meet legal, tax, and accounting duties. When you make a verified deletion request, we aim to delete or de-identify Orene-controlled account data without undue delay, generally within 30 days. Residual copies may remain in protected backups for up to 90 days before routine overwrite, unless a longer period is required by law or needed to resolve abuse or a security incident.

Subscription records

Apple and RevenueCat may retain transaction records under their own legal obligations and retention schedules. Closing your Orene account does not cancel an Apple subscription. Cancel it separately in iOS Settings or at Apple’s subscription management page.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding personal information we control, and to appeal a decision or complain to a privacy regulator. You may also have the right to withdraw consent where processing relies on consent. We will not discriminate against you for exercising a privacy right.

You can exercise control directly or by contacting us:

• edit your displayed name in Orene’s account settings;
• delete local projects and captures inside the app;
• change camera, microphone, Photos, and notification access in iOS;
• manage or cancel membership through Apple’s subscription settings; and
• request access to, correction of, or deletion of Orene-controlled account data by emailing support@orene.me.

To protect your account, we may ask you to write from the Apple email or relay address associated with your account or to complete another reasonable verification step. Please do not email photographs, payment-card details, passwords, or full Apple receipts unless support specifically asks for a redacted item relevant to your case.

Orene does not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined by California law, so there is no sale or advertising-sharing opt-out required for the current service.

Orene uses administrative, technical, and organizational safeguards appropriate to the information it handles. These include Apple-based authentication, encrypted network connections, limited credentials in the app, restricted service access, and keeping image processing local by design. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security.

Orene and its providers may process limited account, entitlement, and support information in countries other than the one where you live. Where required, we use recognized safeguards for international transfers, such as contractual protections, and require providers to protect information consistently with applicable law.

If you believe your Orene account or information has been compromised, contact us promptly. Never send us your Apple Account password or device passcode; Orene support will not ask for them.

Orene is a general-audience creative tool and is not directed to children under 13. A person must be old enough to consent to use of online services in their country, or use Orene with authorization from a parent or legal guardian. We do not knowingly collect personal information from a child in a way prohibited by applicable law.

If you are a parent or guardian and believe a child provided account information without the required permission, contact us. We will review the request and delete the information when legally required after appropriate verification.

We may update this policy when Orene’s features, providers, or legal obligations change. We will revise the effective date on this page. If a change materially affects how we handle information already collected, we will provide additional notice in the app or by another appropriate method before the change takes effect where required.

Questions, privacy requests, deletion requests, and complaints can be sent to the address below. Include “Privacy” in the subject line and enough information for us to understand the request. Do not include sensitive photographs or financial credentials.