Ory

Privacy policy

In effect from 29 September 2026

The short version

  • Ory stores what you enter so it can plan your meals and track your progress.
  • There is no advertising, no analytics, no tracking, and your data is never sold.
  • The AI services that write your plans never receive your name, email or account number.
  • You can delete your account and everything in it from inside the app, at any time.

1. Who is responsible

Ory: Calorie & Recipe Coach ("Ory", "the app") is provided by Hakob Muradyan ("we"). We decide how your personal data is used, which makes us the data controller under European law.

For any question about your data, write to support@oryapps.com. We reply within two working days and complete data requests within 30 days.

This policy covers the Ory app for iPhone and Android and the website oryapps.com.

2. What we collect

Data you give us

Kind What exactly
Account Your email address and a password, or sign-in with Apple or Google. Apple and Google pass on your email address, and Apple may pass on your name. Passwords are stored only in a scrambled form that we cannot read.
Body and goals Sex, birth year, height, weight, goal weight, activity level and the pace you choose.
Food preferences Cuisines, allergies, diet rules and a free-text note.
Logs Meals and drinks with their calories, weight entries, and restaurant names you type in.
Progress photos Photos of yourself that you take or choose, if you use this feature.
Coaching chat The messages you write to the coach and the replies.
Scans Photos of meals and barcode numbers that you scan to log food.
Messages to us Your email address and what you write when you contact support.

Data created automatically

Health-related data

Your body measurements, weight history, allergies, progress photos and coaching chat say something about your health. The law treats this as a special kind of data. You give it voluntarily, and by entering it in the app you agree that we use it to provide the service described here. You can withdraw that agreement at any time by deleting the data or your account. Ory cannot work without your body data, because every target is calculated from it.

What we do not collect

3. How we use your data, and on what legal basis

Purpose Legal basis
Create your account and keep you signed in Carrying out our contract with you
Calculate targets, write meal plans, estimate calories, show your progress, write coaching messages Carrying out our contract with you, and your explicit consent for health-related data
Send notifications you have switched on Your consent, which you can withdraw in the app or in your phone's settings
Manage your subscription Carrying out our contract with you, and legal duties about bookkeeping
Limit abuse, keep the service secure, control AI costs Our legitimate interest in a safe and working service
Answer your support messages Our legitimate interest in helping you

We do not use your data for advertising, for profiling for other companies, or for training AI models.

4. How the AI is used

Meal plans, recipes, calorie estimates, restaurant suggestions and coaching messages are written by AI models. To do that, our server sends the model only what the task needs: food descriptions, restaurant names, your cuisines, the names of your allergies and diet rules and your note about foods to avoid, numbers such as your calorie target and your weight change, the text of your coaching chat, or the meal photo you scanned. Free text is sent as you wrote it, so do not put names or contact details in it.

The coaching chat is not a crisis service. If a message suggests that you may be in danger, the app shows a fixed message that points to professional help instead of an AI reply.

5. Who receives your data

We work with the companies below. Each one receives only what it needs for its task and acts on our instructions or as required for its own service.

Company What it receives Why
Supabase All account data and photos Database, file storage and sign-in
OpenRouter and the AI model providers it routes to The task content described in section 4, without anything that identifies you Meal plans, estimates and coaching
RevenueCat Your account number (a random id, not your email), purchase details and technical data about your device Subscription management
Apple and Google Payment details and, if you choose their sign-in, the sign-in itself Billing and sign-in
Expo Your phone's notification address and the text of the notification Delivering push notifications
Open Food Facts The barcode number only, sent from our server Looking up packaged products
Resend Your email address and the six-digit code Sign-in and password emails
Cloudflare A check that you are a person and not a program at sign-up, sign-in and password reset; emails you send to our support address; visits to this website Abuse protection, email forwarding, website hosting

We do not sell your data and do not share it for advertising. We disclose data to authorities only when the law requires it. If Ory is ever transferred to another owner, your data moves with the service under this policy, and you will be told beforehand.

6. Where your data is stored

The database and your photos are stored by Supabase in the United States (Ohio). The other companies in section 5 also process data in the United States and other countries.

If you live in the European Economic Area, the United Kingdom or Switzerland, this means your data is transferred outside your country. These transfers rely on the standard contractual clauses approved by the European Commission, or on the provider's certification under the EU–U.S. Data Privacy Framework. You can ask us for details.

7. How we protect it

No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.

8. How long we keep it

Deleting your account does not cancel a subscription. You cancel it in your phone's subscription settings.

9. Your rights

Wherever you live, you can:

If you live in the European Economic Area, the United Kingdom or Switzerland

You also have the right to restrict or object to the use of your data, to withdraw consent at any time without affecting what was done before, and to complain to the data protection authority of your country.

If you live in California or another U.S. state with a privacy law

You have the right to know what personal information we collect, to correct it, to delete it, and to limit the use of sensitive personal information. We use sensitive information only to provide the service. We do not sell personal information and do not share it for cross-context behavioural advertising, and we have not done so in the past 12 months. We will not treat you differently for using your rights.

To use any of these rights, write to support@oryapps.com from the email address of your account, so we can be sure the request is yours.

10. Permissions the app asks for

Each one is optional. Without it, only the related feature is unavailable.

11. Children

Ory is for adults. The app asks for your age and does not accept people under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, write to us and we will delete it.

12. This website

oryapps.com uses no cookies, no analytics and no content from other companies. Our hosting provider sees the technical data of each visit, such as the IP address, and keeps it for a short time.

13. Not medical advice

Ory gives estimates for weight management. It does not diagnose, treat or prevent any condition. Talk to a doctor before changing your diet if you are pregnant, have a medical condition, or have or had an eating disorder.

14. Changes to this policy

When we change this policy, we publish the new version here with a new date. If a change is important, we also tell you in the app or by email before it takes effect.

15. Contact

Hakob Muradyan
support@oryapps.com