What we know, and what we do with it.

• We store your account details, your conversations, and the memory ledger your companion builds from them.
• We never sell your data, and we never use your conversations to train AI models.
• To write a reply we have to send your conversation to an AI provider. There's no way around that, so we name every one of them below.
• You can read, correct and delete anything your companion remembers, any time, at your memory ledger.
• Email hello@orakyl.com and we'll delete your account and everything in it.

Your account. Your email address and password (the password is stored only as a scrambled hash — we never see it), your date of birth, when you confirmed your age, and the name you'd like your companion to call you. We keep the date of birth itself, not just a "yes, they're 18" tick, because it's the proof behind the age gate.

Your conversations. Every message, yours and your companion's, with the time it was sent. This includes the text of a voice note after it's been transcribed, and the description of a photo you send. We also keep a rolling written summary of a long conversation so your companion can remember the thread of it.

Your memory ledger. Short plain-language facts your companion has picked up — "works nights", "sister lives in Pune", "gets anxious before flights" — plus a numeric fingerprint of each one so the right memory can be found later.

Your companion. The character you created or chose: name, portrait, personality, backstory, and the small facts it keeps straight about its own life.

How you use it. How many messages you've exchanged, when you first and last talked, your time zone (so a check-in never arrives at 3am), and your notification settings.

Safety records. If something in a conversation suggests the account might belong to someone under 18, we log a flag. That flag records only category labels — never the message itself. If you appeal a restricted account, we keep what you wrote in the appeal.

Notifications. If you turn them on, we store the address your browser gives us to reach your device, plus the two keys needed to encrypt a notification to it. No message content is stored there.

Billing. When your trial started, whether you're subscribed, the date your access runs to, and the Razorpay subscription and customer ids. No card number, expiry, CVV or UPI id is ever stored by us — there is nowhere in our database to put one.

Voice notes: we keep the words, never the audio. Your recording is sent to Groq to be turned into text, and only that text is saved as your message. The audio file itself is never stored anywhere by us.

Photos: we do keep the file, and here's the nuance. A photo you send is first looked at by a vision model, which writes a short factual description and a safety verdict. Your companion only ever reads the description — it never sees the picture.

• If the photo is safe, we store the file so it's still there when you reload the chat. It goes into private storage in a folder locked to your account; nobody can reach it with a link, and no other user can see it.
• If it's flagged as sexual content, as possibly showing someone under 18, or as self-harm, the file is not stored at all. All that's left in the conversation is the note "[shared an image]".

If a message you type is flagged as sexual content, your companion won't engage with it — but the message is still saved, exactly as you wrote it, with a flag on it. We keep it rather than silently deleting it so that safety decisions can be checked and appealed, and so we can tell a false positive from a real pattern. It's never sold, never used for training, and never used for advertising.

• To have the conversation at all, and to let your companion remember you between them — which is the entire product.
• To keep the space 18+ and to act on genuine safety signals.
• To run your trial and your subscription.
• To send a check-in, if you've asked for notifications.
• To find and fix things that are broken, and to keep the service standing up.

That's the whole list. No advertising, no profiling for anyone else, no data brokers, no "partners".

We don't run our own servers or our own AI models, so a handful of companies process data on our behalf. Each one only gets what it needs for its job, and none of them may use it for their own purposes.

• Supabase — Runs our database and file storage, and handles your login and password. Everything we store lives here.
• Vercel — Hosts and serves the app. It sees the ordinary technical detail of a web request (IP address, browser, which page) in its server logs.
• OpenRouter — Routes your conversation to the AI model that writes your companion's replies, and does the background work of pulling out what's worth remembering.
• Together AI — Turns each saved memory into a numeric fingerprint (an embedding) so your companion can find the relevant ones later.
• Groq — Only if you send a photo or a voice note: describes the photo, or turns the recording into text. It receives that one file.
• Razorpay — Takes the payment if you subscribe. Your card or UPI details go to Razorpay, never to us.
• Your browser's push service — Only if you turn on notifications: Google, Apple or Mozilla, depending on your device, delivers the notification to your phone.

We also use a legal or accounting professional from time to time, and the law can require us to hand something over. Beyond that, nobody. We do not sell your data, and we never will — you pay us, which is precisely so that you're not the product.

Some of these providers process data on servers outside India. If you use Orakyl, that cross-border processing is part of how it works.

Almost never — but we're not going to pretend the answer is "impossible", because it isn't. Orakyl is run by one person, and that person has an admin tool that can open an account's conversations. It exists for exactly three reasons: investigating a safety report or an age appeal, debugging something badly broken, or a legal obligation. It is not used to browse, and never for marketing or research.

Other than that, the technical arrangement is that your rows are locked to your account. Another user cannot read them even if they try.

• Read and correct what it remembers. Open your memory ledger to see every memory in plain language. Edit the wording, or delete any of it outright — deleting removes the memory and its fingerprint.
• Turn off check-ins. Mute or snooze the messages your companion sends first, or switch notifications off altogether — the controls sit on the same page as your memory ledger.
• Delete your account. Email hello@orakyl.com from the address you signed up with. We do it by hand — there's no in-app button yet — and we'll confirm within 7 days. It removes your login, your profile, your messages, your memories, your companions and your stored photos.
• Get a copy of your data. Ask us at the same address and we'll send you what we hold about you.
• Complain. If you think we've mishandled something, email us first — we'd much rather fix it. You also have the right to take it to the authority under India's data protection law.

Straight answer: until you delete it. There's no automatic expiry on messages or memories, because a companion whose memory quietly evaporated after 90 days would be a worse product and a broken promise.

A memory you archive rather than delete is hidden from your companion but still stored; delete it if you want it gone. Safety flags and appeals are kept while an account exists, since they're the record behind a decision. Once you delete your account, all of it goes.

Everything travels encrypted, your password is only ever stored as a hash, uploaded photos sit in private storage that's locked to your account, and the database enforces per-user access at the row level — so "only you can read your rows" is a database rule, not just our good intentions. Payment details never reach us at all.

No system is perfect. If something ever goes wrong in a way that affects you, we'll tell you what happened and what we did about it.

Orakyl is for adults, 18+. We don't knowingly collect anything from anyone under 18, and if we find out an account belongs to a minor we restrict it. If you're a parent or guardian and you believe your child has an account here, email us and we'll deal with it quickly.

If we start doing something materially different with your data, we'll tell you by email or in the app before it starts, and the date at the top of this page will change.

Orakyl is a sole proprietorship registered in India; entity details available on request.

For anything on this page — hello@orakyl.com. A person reads it. See also our terms and the contact page.