Privacy policy

About this policy

Ortu ("we", "us") makes a parenting and pregnancy companion for families in Southeast Asia. This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over your information.

We designed Ortu to be a private space for your family. We never sell your data, and we never use your children's personal data to train AI models.

Information we collect

We only collect what's needed to give you the app's features. Specifically:

• Account: your email address, the name you give us, the country you select, and your preferred language.
• Family: your role (parent, grandparent, caregiver), the family members you invite, and your relationship to your children.
• Children & pregnancy: names, dates of birth, growth measurements, feeds, sleep, diapers, milestones, pregnancy weeks, kick counts, weight logs, mood logs, photos you upload, and notes you write.
• Voice: when you use voice input, an audio recording is sent for transcription. We do not keep the raw audio after transcription unless you explicitly opt-in to cloud retention.
• AI features: messages you send to Ortu Chat are processed by our AI sub-processor to generate replies grounded in your family's data. When family members use different app languages, content written by one member (family chat messages, appointment details, photo captions, care notes) is also processed to translate it into the other members' languages, and Thai-script names may be romanized for readability. You can turn translation of your own view off in Settings.
• Usage: which screens you open, which features you use, and crash diagnostics. This helps us improve the app.

How we use your information

We use the information we collect to:

• Provide the core features — tracking, reminders, family sharing, AI chat replies, and pregnancy guidance.
• Personalize the experience based on your child's age, your role, and your language.
• Detect red-flag patterns (e.g., low feeds, missed milestones) and prompt you to consult a clinician — never as a diagnosis.
• Send transactional emails (sign-in codes, family invites, important changes). We don't send marketing emails without your separate consent.
• Comply with our legal obligations and protect the safety of our users.

Who we share data with

We share data only with sub-processors needed to operate the service:

• Supabase — our database and authentication provider. They store your family's data on our behalf with encryption at rest.
• Google (Gemini API) — processes Ortu Chat messages to generate replies, and translates family-written content (chat messages, appointment details, captions, notes) between your family's languages when members use different ones. Per Google's API terms, your content is not used to train Google's models.
• Resend — sends transactional emails (sign-in codes, family invites). Only your email address and the message body pass through Resend.
• Sentry — receives crash reports when something breaks so we can find and fix bugs. Reports are scrubbed on your device before they are sent: account IDs and email addresses are removed.
• RevenueCat — manages your subscription when you buy a paid plan. It sees an anonymous app ID and your App Store or Play Store receipt — never your family's content.
• Apple Push Notification service and Google Firebase Cloud Messaging — deliver notifications to your device. Only a device token and the notification text pass through them.
• Other family members you invite — anyone you add to your family can see the shared child and pregnancy data, per your family's role permissions.

Where your data lives

Your data is stored on infrastructure managed by Supabase. The current deployment region is Sydney, Australia. We may change region for performance or compliance reasons; we'll update this policy if we do.

Your rights

Under PDPA (Thailand), UU PDP (Indonesia), and similar regional laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correct — fix anything that's inaccurate.
• Delete — close your account and remove your data (Settings → Delete account).
• Export — download your family's data in a portable format.
• Withdraw consent — change your mind about optional consents (e.g., cloud voice processing) at any time.

Children's data

Ortu records information about your children for the purpose of helping you care for them. Only family members you explicitly invite can see your child's data. We do not allow children to create their own Ortu accounts, and we do not use children's data to train AI models.

Data retention

We keep your account data while your account is active. If you delete your account, we remove your data within 30 days, except where we are legally required to retain certain records (e.g., transaction logs). Anonymized usage statistics may be kept longer.

Changes to this policy

We may update this policy as the app evolves. When we make material changes, we will notify you in-app and ask you to review the updated policy before continuing.

Contact us

For privacy questions or to exercise your rights, email hello@mail.ortu.ai. We aim to respond within 30 days.