Ormy · Version 2.7 · Effective 24 September 2026
Changed in 2.7: added the waitlist on Ormy’s website. If you join it, we keep your email address to tell you when Ormy is on the App Store and to send you the odd update, until you unsubscribe.
Changed in 2.6: when a heads-up asks a question, the AI now also writes the reminder that would settle it, so “Add it” opens with it already typed in. It is written from the same reminder title that was already sent, and nothing is saved until you save it. Nothing new about you is sent.
Changed in 2.5: the evening check-in has been removed, so Anthropic no longer receives your first name, your reminder times or how your reminders have been going. It now receives only a reminder’s title, and for a heads-up how many days away it is.
Changed in 2.4: Anthropic’s AI now also asks one question in your heads-ups about getting ready (“got a card sorted?”), and suggests a next step when you tick a reminder off. Both use the reminder’s title, which was already sent. Nothing new about you is sent.
Changed in 2.2: the Anthropic section now describes what Ormy actually sends. Earlier versions described a chat feature that has since been removed and said “your messages” were sent; what is really sent is your first name and your reminder titles, so the AI can word your reminders and check-ins.
The detail below is what we are legally held to. It is written to be read, not to be skimmed past.
Kyle Ormesher, a sole trader established in the Isle of Man, trading as Ormy, is the data controller for the personal data described in this policy.
Data protection contact: kyle.orm@turbolt.co.uk — this is the address for every request in section 9, and it is read by a person.
A postal address is available on request, and is published on the App Store listing where the law requires it.
UK and EU representative (UK GDPR Article 27 / EU GDPR Article 27): [TO BE APPOINTED — see legal/README.md]
"Controller" means we are the ones who decide what data is collected and why, and we are accountable for it. This policy explains what we collect, why we are allowed to, who else touches it, how long we keep it, and what you can make us do about it.
Everything below is collected because a specific part of the app needs it. There is no category here that exists "just in case".
| What | Why we have it | Lawful basis | How long |
|---|---|---|---|
| Name and email address Given at sign-up, or by Apple if you use Sign in with Apple. |
To create your account, to sign you in, to address you by name in the app, and to contact you about your account. | Performance of a contract | Until you delete your account |
| Your reminders Titles, categories, dates, times, repeat patterns, lead times, notification preferences, whether they are done, snoozed or skipped. |
This is the service. Without it Ormy cannot remind you of anything. | Performance of a contract (plus explicit consent for anything health-related — see section 3) |
Until you delete them, or delete your account |
| Your conversations with Ormy No longer collected. Ormy used to have a chat screen; it has been removed, and nothing you do in the app creates a conversation any more. Any conversations stored before it was removed are still deleted when you delete your account. |
They were used to generate replies and to give Ormy context between sessions. Nothing is added to this any more. | Performance of a contract (plus explicit consent for anything health-related — see section 3) |
Until you delete your account |
| Onboarding answers The goals and struggles you select, and your preferred communication style. |
To set the app up for you and to pitch Ormy's tone and timing to suit you. | Consent | Until you delete your account |
| Check-in records No longer collected. Ormy used to send an evening check-in; it was removed in September 2026. Any check-ins stored before then are still deleted when you delete your account. |
They were used to avoid sending you the same thing twice, and to show you what Ormy had done. Nothing is added to this any more. | Performance of a contract | Until you delete your account |
| Activity log A record of each nudge, pre-event alert, completion, snooze and skip. |
To power the in-app summary of what Ormy has done for you, and your monthly recap. | Performance of a contract | 90 days, then deleted. Running totals are kept in non-itemised form until you delete your account. |
| Monthly and trial recaps Counts for the month plus two short lines of AI-written copy about them. |
To show you your recap, and so it still reads correctly after the underlying activity rows have been deleted. | Performance of a contract | Until you delete your account |
| Push notification token and time zone offset A device identifier issued by Apple/Expo, plus your UTC offset. Where you use the lock screen Live Activity, a second Apple-issued token for that. |
To deliver notifications to your device at the right local time. Without it, nothing arrives. | Performance of a contract, and your device-level consent to notifications | Until you sign out, uninstall, or delete your account |
| Places you pin to a reminder For each location reminder: the coordinates of the spot you chose, the size of the circle around it, its address or the name you gave it, and whether it should fire on arrival or on leaving. |
So the reminder can go off when you get there. Without the coordinates there is nothing for your phone to watch for. | Performance of a contract (plus explicit consent for anything health-related — see section 3) |
Until you delete the reminder, or delete your account |
| Your approximate distance from those places Worked out on your phone while the app is open, to sort the list and show how far away each one is. |
To tell you which of your location reminders you could deal with now. | Performance of a contract | Not stored. It is calculated on your device and is gone when you close the screen. |
| Subscription status Whether you are free, on trial or subscribed, and when a trial ends. |
To unlock what you have paid for and to warn you before a trial converts. | Performance of a contract | Until you delete your account |
| AI usage counter A per-day count of AI requests on your account. Not the content — just the number. |
To enforce the fair-use ceiling and stop runaway or automated usage running up costs. | Legitimate interests — protecting the service from abuse and cost overrun | Reset daily |
| Feedback you send us Your message, plus your name and email so we can reply. |
To fix bugs and act on what you tell us. | Legitimate interests — improving the product and responding to you | Your name, email and account link are removed when you delete your account. The message itself may be kept, anonymised. |
| Waitlist sign-ups The email address you type into Ormy’s website, which of its two sign-up boxes you used, and the web address you came from, if your browser shares it. |
To tell you when Ormy is on the App Store, and to send you the odd update about Ormy. | Consent — you chose to join. Every email has an unsubscribe link, and you can withdraw at any time. | Until you unsubscribe or ask us to delete it. |
| Diagnostic and crash data Technical logs, error reports, device model and OS version, collected by Apple and by our infrastructure providers. |
To find out why something broke. | Legitimate interests — keeping the app working and secure | Typically 30–90 days, per the provider |
This is the part of Ormy that has the most to explain, so it gets its own section.
A location reminder is one you attach to a place instead of a time — "get milk when I reach the shop". To make that work, three things happen:
What this means in plain terms. We hold a list of the places you chose to tell us about. We do not hold a record of where you have been, when you were there, or where you are now. Nobody can query our database to find out where you are, because that is not in it.
You can remove a place at any time by editing or deleting the reminder, and you can switch location permission off in your device settings — the rest of the app carries on working, and only location reminders stop firing.
Ormy is designed for people who need reminders for things like medication, therapy sessions, and hospital appointments. If you put those into Ormy, you are giving us information about your health.
Under data protection law that is "special category" data, and it needs a stronger legal basis than the rest. Ours is your explicit consent, which you give by choosing to enter it.
In practice, this covers:
We use that information for one purpose only: running Ormy for you. We do not profile you on the basis of it, we do not share it with anyone beyond the providers listed in section 5, and we never use it for marketing.
You can withdraw that consent at any time by deleting the reminder or message concerned, or by deleting your account. Withdrawing consent does not affect anything we lawfully did before you withdrew it. If you would rather not give us health information at all, you can keep the wording of your reminders vague — Ormy will remind you about "appointment, 3pm" just as reliably as it will remind you about anything more specific.
Please also avoid putting other people's sensitive information into Ormy. A birthday reminder for a friend is fine. Details of someone else's medical treatment are not yours to share with us.
This is the one processing activity worth spelling out, because it runs while you are not using the app.
There are two of these. The first is geofencing, described in section 2.2: your phone, not our server, watches for the places you pinned, and does so while the app is closed. When it wakes Ormy, the alert is prepared on your device.
The second is scheduling. Our servers check, on a schedule, which reminders are due and which devices are at the local time you asked to be checked in at. When one matches, a notification is sent to your device through Apple's Push Notification service, by way of Expo's push service. The notification contains the reminder text you wrote, which means it may appear on your lock screen. If you would rather that text were not visible to anyone who picks up your phone, you can hide notification previews in your device settings.
None of this involves a decision about you that produces legal effects or anything similarly significant. Ormy has no automated decision-making of that kind, and does not profile you for advertising or credit purposes.
We use a small number of service providers to run Ormy. They act on our instructions, under contract, and only for the purposes below. None of them is permitted to use your data for their own purposes.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Clerk | Sign-in and account security | Name, email, authentication data | United States |
| Convex | Database and server functions | Everything in section 2 that we store | United States |
| Anthropic | The AI that asks one question in your heads-ups and suggests a next step when you tick a reminder off (never the reminders themselves) | The title of the reminder involved, and for a heads-up how many days away it is. Never your name or your location. | United States |
| Expo | Push notification delivery and app updates | Push token and notification content | United States |
| Apple | App distribution, push delivery, payments | Push token, notification content, purchase records | United States / global |
| RevenueCat | Subscription management | An anonymous purchase identifier and subscription status | United States |
The current list, with links to each provider's own privacy terms, is maintained at our sub-processor page. We will update it whenever a provider is added or replaced.
Anthropic and AI training. When a heads-up goes out before something coming up, Ormy asks Anthropic’s AI for one question about getting ready for it (“got a card sorted?”). When you tick a reminder off, it suggests a next step — “hang the washing out” after “put the washing on” — which you can accept or ignore. Where a heads-up offers to make you a reminder, the AI writes the wording of what it is offering (“buy Dad a card and present”) — nothing is saved until you save it, and you can change it first. Reminders you write yourself are never sent to be reworded; they say what you typed. For either, Anthropic receives only the reminder’s title, plus how many days away it is for a heads-up. It never receives your name, your location or the places you pin. This only happens if you said yes on Ormy’s AI screen; switch it off any time in Settings → AI wording and Ormy uses plain wording instead. Under Anthropic’s commercial terms, inputs and outputs submitted through the API are not used to train their models. Anthropic retains data only as long as needed to provide the service and to meet its own trust and safety obligations.
We will also disclose personal data where we are legally required to — for example in response to a valid court order or lawful request from a public authority. Where we are permitted to tell you about such a request, we will.
If Ormy is ever sold, merged or transferred, your data may transfer with it. Any buyer would be bound by this policy, or by one no less protective, and we would tell you before it happened.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We never have and we have no plans to.
Our providers are based in the United States, so your data is transferred there.
Where data leaves the UK or the European Economic Area, we rely on the safeguards the law provides for that: the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum (or the UK IDTA), incorporated into our agreements with each provider, plus the additional technical measures described in section 8. Some of our providers are also certified under the EU–US Data Privacy Framework and its UK extension.
You can ask us for details of the safeguards in place for any specific provider by emailing us.
The retention period for each category is in the table in section 2. In general:
No system is perfectly secure, and we will not pretend otherwise. If a breach happens that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will tell you directly and without undue delay where the risk to you is high.
If you are in the UK, the EEA, or another region with comparable law, you have the following rights over your personal data. They are free to exercise.
To delete everything, use Settings → Delete account in the app. It is immediate and needs nothing from us.
For anything else, email kyle.orm@turbolt.co.uk from the address on your account, telling us which right you are exercising. We will respond within one month. If your request is genuinely complex we may extend that by up to two further months, and we will tell you why within the first month. We may ask you to confirm your identity before acting — only to make sure we are not handing your data to somebody else.
California residents have rights under the CCPA/CPRA to know what personal information is collected, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use or disclose sensitive personal information for purposes beyond those permitted without a right to limit. You will never be discriminated against for exercising a right. Use the same contact address above.
If you think we have handled your data badly, please tell us first — we would like the chance to fix it. You can also complain directly to a supervisory authority.
United Kingdom — Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint
European Economic Area — the data protection authority for the country where you live, work, or where the issue arose. The list is at edpb.europa.eu.
Isle of Man — the Information Commissioner, inforights.im.
Ormy is not intended for children under 13, and accounts are for users aged 16 and over, or 13 and over with a parent or guardian's consent. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us personal data, email us and we will delete it promptly.
These legal pages are static and set no cookies, use no analytics and run no tracking scripts. They are hosted by GitHub Pages, which records standard server logs including IP addresses for security and abuse prevention, under GitHub's own privacy statement.
Ormy’s own website, ormy.turbolt.co.uk, is hosted the same way. It sets no cookies, uses no analytics and runs no tracking scripts, and its fonts and code are served from the site itself. The only thing it sends anywhere is a waitlist sign-up, if you choose to join, which goes to our database (Convex, section 5).
We will update this policy when what we do changes. The version in force is the one published here, with its effective date at the top.
If a change materially affects how we use your data, we will tell you in the app or by email at least 14 days before it takes effect, and where the law requires it we will ask for your consent again rather than assume it.
Kyle Ormesher, trading as Ormy
Data protection contact: kyle.orm@turbolt.co.uk
We are a very small team and we read every message ourselves.