Legal
Privacy Policy
1. Who We Are
Oriah is operated by Moradi Labs Inc. and related service providers working on our behalf.
- Privacy contact: [email protected]
- Support contact: [email protected]
2. Scope
This policy explains how we collect, use, disclose, store, and delete personal information when you use the Oriah mobile app, website, support channels, and related services.
3. What Oriah Is Designed To Do
Oriah is a rhythm-based faith companion built around prayer, scripture, service, and trusted circles. Nothing you post in Oriah is public. There are no public profiles, no followers, and no public feed, and every connection is mutual: being findable only lets someone send you a request, and nothing of yours is visible to them unless you accept it.
You are findable by your name or @handle by default, so that people who already know you can reach you. You can stop appearing in search at any time in Settings. Gatherings you create can be kept to your circle or opened to any Oriah member.
4. Information We Collect
- Account and profile information such as email address, display name, profile photo, bio, and account settings.
- Community content you create or submit, including prayer requests, encouragement messages, chat messages, reactions, circle memberships, journal entries, notes, and other user-generated content.
- Location data, only while the app is open and only when you choose to use a location feature: sharing your live location with people in your circle, searching for gatherings near you, or setting the venue of a gathering you are creating. A gathering search converts a single one-time reading into an approximate area. Location is never read in the background.
- Contact matches, if you choose to find people from your address book. Your device sends SHA-256 hashes of phone numbers and email addresses, never the numbers or addresses themselves. Hashes that do not match anyone are never stored and never logged. Stored match entries are keyed by a further hash computed with a server-side secret, so the stored index is useless to anyone who obtains a copy of it without that secret. You can delete your contact data at any time in Settings.
- Device, app, and diagnostic information such as notification tokens, crash reports, service logs, and security events.
- Billing and subscription metadata from Apple App Store, Google Play, RevenueCat, or other payment providers if premium features are offered. We do not receive your full payment card number from app stores.
- Whether you have chosen to hide your supporter badge. If you support Oriah, people in your circle see a small badge beside your name; you can turn it off at any time in Settings, and we store that choice and when you made it.
- Anonymous usage and performance data — which screens are opened, how long actions take, and where the app is slow or failing. It never includes your posts, messages, prayers, journal entries, or anything that identifies you to us. Whether this is collected depends on your device’s region setting: if your device is set to a country in the European Economic Area, the United Kingdom or Switzerland, we ask you first and collect nothing unless you say yes. Everywhere else it is on by default and you can turn it off at any time in Settings under “Help improve Oriah”. We use your device’s own region setting rather than looking up your location from your IP address, because checking your setting is the less intrusive of the two.
- Your confirmation, given when you create your account, that you are 13 or older. We store the date and time of that confirmation.
5. Private Journal and Personal Reflections
Oriah is designed so that journal entries and private reflections are visible only to the account holder unless you explicitly choose to share content elsewhere in the service. We use service providers and infrastructure needed to store, secure, sync, and back up that data.
6. How We Use Information
- Provide core features such as Pray, Word, Serve, circles, chat, journal, gatherings, and notifications.
- Personalize your experience, including scripture presentation, day counters, and service reflections.
- Operate account management, support, moderation, abuse prevention, and fraud detection.
- Maintain security, investigate incidents, and comply with legal obligations.
- Improve product quality, stability, and user experience.
7. Discovery and Privacy Defaults
- You can be found by your name or @handle by default. This is disclosed when you create your account, and there is a single off-switch in Settings that stops you appearing in search. Turning it off does not affect people already in your circle.
- That same setting governs contact matching. While you appear in search, someone whose address book contains your verified email or phone can be shown you, and you can be shown them.
- There are three ways to add someone: searching their name or @handle, opening a share link or QR code they sent you, and matching from your contacts. All three end in a request the other person must accept.
- Being findable is not the same as being visible. Search results show only your name, @handle and profile photo. Your posts, prayers, journal, circle and messages are not shown to anyone who is not already connected to you.
- Gatherings you create are visible either to your circle only, or to any signed-in Oriah member if you choose to open them. You pick this for each gathering.
8. Sharing and Disclosure
We do not sell personal information or run advertising inside Oriah. We share information only as needed to operate the service, including with:
- Hosting, database, analytics, messaging, and security providers
- Customer support and infrastructure vendors
- App stores and subscription providers for billing and entitlement management
- Mapping and geolocation providers, for gathering locations and live location sharing
- People in your circle, if you support Oriah. A small cross appears beside your name to show you help pay for the app, so supporting Oriah tells the people you have accepted into your circle that you do. Nothing about what you paid, when, or how is shared. You can hide the cross at any time in Settings, and hiding it changes nothing about your support or what you can do in Oriah.
- Other members who search for you. Unless you turn this off, people can find you in Oriah by your name or @handle, and match you from their contacts. Search results show only your name, @handle and profile photo. You can stop appearing in search at any time in Settings; it does not affect the people already in your circle.
- Authorities or legal counterparties where required by law, court order, or to protect rights and safety
9. Permissions and Device Controls
- Camera and Photos: for profile images, gathering photos, and other uploads you initiate.
- Notifications: for prayer activity, messages, account events, and reminders if enabled.
- Location: only for features you choose to turn on.
You can revoke device permissions in your operating system settings at any time.
10. Data Retention and Deletion
- Active account data is retained while your account remains active.
- After a verified deletion request, we aim to remove account data from active systems within 30 days.
- Encrypted or protected backup copies may remain for up to 35 days before automatic deletion.
- Security, fraud-prevention, tax, billing, dispute, and legal-hold records may be retained longer where required or reasonably necessary.
- You may request deletion through the app when available or through /delete-account.
11. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or export certain personal information. Contact [email protected] for privacy requests.
If your device’s region is set to a country in the European Economic Area, the United Kingdom or Switzerland, Oriah asks before collecting any usage or performance data and collects none until you agree. Declining changes nothing about how the app works, and we do not ask again. Everywhere else, that collection is on by default.
Either way you can change it at any time in Settings under “Help improve Oriah”, and turning it off stops collection on your device immediately. Crash reports are handled separately and are always sent, because they are how we find out the app has broken; they contain diagnostic information about the failure, not your content.
12. Security
We use authentication controls, infrastructure safeguards, service access controls, and monitoring designed to protect the service and its data. No system is perfectly secure, but we apply reasonable administrative, technical, and operational safeguards.
13. Children
Oriah is not intended for children under 13, and in some regions the minimum age may be higher. When you create an account you confirm that you are 13 or older, and we record that confirmation. If you believe a child submitted personal information without appropriate permission, contact us and we will investigate.
14. International Data Transfers
Your information may be processed and stored in Canada, the United States, and other jurisdictions where our service providers operate. Where required, we use appropriate safeguards for those transfers.
15. Changes to This Policy
We may update this policy from time to time. We will revise the "Last updated" date when changes are posted.
16. Important Service Disclaimer
Oriah is not a church, pastor, counselor, medical provider, or emergency service. If you are in immediate danger or experiencing an emergency, contact local emergency services immediately.