Privacy Policy

What this is

Orynvo is a personal organization app — notes, finances, business records, a unified email inbox, and an AI assistant that can act on your data. This page explains what information the app collects, how it’s stored, and who it’s shared with.

Information we collect

• Account information: your name, email address, and a securely hashed password (never stored in plain text).
• Content you create: notes and pages, finance accounts and subscriptions, business clients/invoices/transactions, and anything else you enter directly into the app.
• Connected email: if you connect an email account (Gmail, Outlook, or any other provider via IMAP), we store an encrypted credential (OAuth refresh token or IMAP password) needed to sync it, and metadata about your messages (sender, subject, a short preview, category) so the inbox feature can show and sort them.
• Assistant activity: your conversations with the AI assistant, and any facts you ask it to remember for future conversations.
• Connected tools: if you connect an external tool via MCP (Model Context Protocol), we store the connection details (URL and, if provided, an authorization token) needed to reach it.
• Security logs: a record of security-relevant events (sign-ins, connections made) used to detect abuse and help you audit activity on your own account.

Learning about you

By default, the assistant only remembers something about you when you explicitly ask it to. Under Settings, you can turn on a separate, off-by-default option that lets it also notice and remember patterns and preferences from ordinary conversation on its own — recurring requests, habits, things you’ve mentioned wanting — and use that more proactively to anticipate what would help.

Turning this on doesn’t create a new category of stored data or a separate log — it uses the exact same remembered-facts mechanism described above, which you can always review and delete under Assistant → Memory, or turn back off at any time. It only changes how actively the assistant looks for things worth remembering, not where or how they’re stored.

How your data is protected

• Passwords are hashed, never stored or logged in plain text.
• OAuth tokens and IMAP passwords are encrypted at rest (AES-256-GCM, a unique initialization vector per record) — even direct database access doesn’t expose them in readable form.
• Every request is checked against who owns the data before anything is read or changed — your data is never accessible from another account.
• This app runs on its own dedicated server, not shared multi-tenant infrastructure.

Who we share data with

We don’t sell your data, and we don’t use it for advertising. Data is shared only with the specific services needed to provide the features you use:

• Anthropic (Claude): when you use the AI assistant, the relevant content of your request — and any of your data the assistant needs to read to answer it — is sent to Anthropic’s API to generate a response. See Anthropic’s privacy policy.
• ElevenLabs: if you use voice features, your recorded audio is sent for transcription and assistant replies are sent for speech synthesis. See ElevenLabs’ privacy policy.
• Resend: your email address is used to send account emails (email verification, password reset).
• Google / Microsoft: used only to authenticate your connection to your own Gmail or Outlook account, through their standard OAuth sign-in — not for any other purpose.

Your control over your data

You can delete individual notes, disconnect an email or tool connection, remove anything the assistant has remembered, or delete your account and all associated data, at any time from within the app.

Contact

Questions about this policy or your data can be sent to [email protected].