Who we are
Oro is operated by Dubious Data Technologies Limited, a company registered in England and Wales (company number 17503385) with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. Dubious Data Technologies Limited is the controller of the personal information described in this policy. In this policy, “Oro”, “we”, “us” and “our” refer to Dubious Data Technologies Limited.
Information we collect
- Account information: your name, verified email address, and account identifier.
- Birth and profile information: your date, time, and place of birth, coordinates, timezone, and optional onboarding context.
- Oro content: your calculated chart, readings, forecasts, saved highlights, Letter questions, and Letter responses.
- Device and delivery information: push tokens, notification status, app version, and limited technical information needed to operate and protect Oro.
- Subscription information: product, purchase, and entitlement status. Apple processes payment details; Oro does not receive your full card details.
How we use your information
We use your information to create and secure your account, calculate your chart, generate and deliver readings and forecasts, preserve content you save, manage subscription access, provide support, and maintain the security and reliability of Oro.
Where UK or EU data-protection law applies, we process the information required to provide Oro under our contract with you. We rely on consent for optional product analytics and masked session replay, and may rely on legitimate interests for security, troubleshooting, and service improvement where your rights do not override them.
Optional analytics
Oro asks before enabling PostHog product analytics or masked session recordings. If you allow them, we may collect screens visited, taps, scrolling and navigation, app and operating-system versions, device type, an app-generated device identifier, and your opaque account identifier while signed in.
Text, text inputs, images, and system views are masked from replay capture. Console logs and network request capture are disabled. Analytics is optional, remains off until you allow it, and can be switched off in Profile without reducing access to Oro.
Service providers
We share information as needed with providers of account authentication, cloud hosting and storage, birth-location and timezone lookup, subscription management, push and email delivery, error diagnostics, and optional analytics.
We send your name, birth and chart information, and relevant personal context and Letter questions to Anthropic for language processing to create your personalised readings, forecasts, and Letter responses.
We do not sell your personal information, use it for third-party advertising, or share it with data brokers.
Storage and retention
Core Oro data is stored using Amazon Web Services in the Europe (London) region. Some providers may process limited information in other countries under their contractual and legal safeguards. We use encryption in transit and technical and organisational safeguards designed to protect your information. You can contact us for information about the safeguards used for your data.
We retain account information, birth information, and saved Oro content while your account remains active so you can use the service. We keep limited operational records only as long as needed for legal, security, dispute, or service-reliability purposes. Backup copies may remain for recovery purposes until they are replaced or expire.
Our current retention setting for masked session recordings is 30 days. Analytics events and profiles are retained separately. Switching off analytics stops new collection but does not delete earlier data; you can request its deletion at any time.
Your choices and rights
You can use Delete Account in Profile to request deletion of your Oro account, birth details, readings, forecasts, Letters, and saved app data. Depending on where you live, you may also have rights to access, correct, restrict, object to, or receive a portable copy of your personal information, and to withdraw consent.
Account deletion also requests removal of your associated PostHog analytics events, profile and session recordings. Providers may take additional time to complete removal; acceptance of a request does not mean all copies have already been erased. Limited records and backups may remain as described above.
To make a privacy request, email info@myoro.net. We may ask you to verify your identity before acting on a request.
You have the right to complain to the UK Information Commissioner's Office (ICO) or your local data-protection authority about how we handle your personal information.
Age restriction
Oro is for adults aged 18 and over. If you believe someone under 18 has provided personal information through Oro, contact us so we can investigate and take appropriate steps to remove it.
Changes and contact
We may update this policy as Oro evolves. The date at the top identifies the current version. For questions about this policy or your information, email info@myoro.net, or write to Dubious Data Technologies Limited, 128 City Road, London, EC1V 2NX, United Kingdom.