Privacy at Orlo
How Orlo handles your data, in plain language.
What Orlo collects
- Your email address, for signing in and for resetting the sign-in password
- The records you add, with some parts encrypted on your device before they're sent (listed below)
- When the account was created, and its trial or subscription status
- Error reports, logs and performance timings, sent to Sentry with an account identifier. Record content is kept out of the report's data, but the text of an error message is not filtered
- Page views and loading times, through Vercel Analytics and Speed Insights, with record identifiers removed from the address
What is encrypted and what is not
Encrypted on your device, with a key only the vault password, the recovery phrase or a remembered device opens: the titles and descriptions of tasks, projects and events; the names, types and sizes of files attached to tasks; a project's readme, column names, milestones, notes and file names; an event's location, and calendar category names; notes, and their folder names; the body of journal entries; goal titles and the reason given for a goal; habit and routine names, and routine step labels; weekly review answers; inbox items; the title, issuer, number and notes of life admin documents, and the names and types of their files; amounts, names and notes in money records, with income sources, net-worth balances and totals, and a subscription's website, icon and price history; the weight in each weigh-in; meal descriptions, in logged meals and meal templates; workout and exercise names and notes, and a workout still in progress; medication names; the notes on books, courses, skills and learning sessions; and the files attached to tasks, notes, inbox items and life admin documents. The service that stores Orlo's data holds these only in encrypted form.
Not encrypted, and readable on Orlo's servers: dates, statuses and categories, other than the names given to expense and calendar categories; task tags; journal entry titles, moods and tags, and the prompt an entry was started from; energy and sleep ratings; medication doses and instructions; meal calories and macros, and water; meal template names; goal and habit descriptions, and the units they're counted in; goal milestone titles, and the notes on goal progress, milestones and habit check-ins, with skip reasons; medication schedule labels and skip reasons; meal-plan entries; grocery and pantry lists; recipe names, ingredients and steps; journal templates; weigh-in notes, body fat and other body measurements, and their notes; book, course and skill names, and details such as a book's author and genre or a course's platform, instructor and links; the library exercise an exercise was picked from; payment methods; receipt photos; files attached to projects, with their type and size; the display name; the profile picture, which anyone with its link can open; support messages; and the email address, settings and billing history.
Orlo can't reset the vault password or recover the vault. If both the vault password and the recovery phrase are lost, and no device still has the vault open or remembered, the encrypted parts can't be read again, and the account can be reset to start over.
This list was checked against Orlo's code on 19 September 2026.
Services that receive data
Orlo runs on other companies' services, and each receives the following:
- Cloudflare — every request to orlo.center, as it passes through
- Vercel — runs Orlo's servers, and keeps request logs
- Supabase — stores Orlo's data, with the encrypted parts in encrypted form
- Upstash — short-lived sign-in and rate-limit data, and food searches for 30 days
- Sentry — error reports, logs and performance timings
- Vercel Analytics and Speed Insights — page views and loading times
- OpenRouter — the text sent when an AI feature is used, such as a meal description, with no account identifier or email address
- Resend — sends Orlo's emails, including a support message's subject and support's replies in full
- Polar — the email address and an account identifier at checkout on the website; card details go to Polar only
- Open Food Facts and USDA FoodData Central — food searches, sent from Orlo's server with nothing identifying you
- Google and Apple push services — a device token, and each notification's title, text and the page it opens
- Browser push services — notifications, encrypted so the service can't read them
- Google — signing in with Google
- Apple and Google Play — a subscription bought in their stores
What Orlo doesn't do
- No advertising in Orlo, ever
- No sale of user data
Export and deletion
- Download your data — by area as JSON or CSV, or every area at once as one ZIP, with the stored files, decrypted on the device doing the export
- Delete your account — removes the account and its records, and cancels a subscription bought on the website
Questions?
Questions about how Orlo handles data go to support@orlo.center.