Privacy Policy

This describes the Ori Notebook desktop app as of October 2026 (version 0.2.2). It is not legal advice.

Your notebook stays on your device

Ori reads and writes only the folders you choose. Your notes are plain files on your disk. Ori does not read them on a server, index them remotely, sell them, show ads against them, or use them to train anything. There are no analytics and no crash or usage telemetry. The one way your notebook leaves your device is Ori Sync, and only if you turn it on.

Ori Sync is optional and end-to-end encrypted

Ori Sync keeps your notebooks the same on every device you sign in on. It is off until you sign in. Once you sign in, every notebook in your list syncs, and you can stop any one of them.

Your device encrypts everything before it is sent: the contents of your pages and files, their names and folders, and your notebook names. The keys that unlock them stay on your devices and in the recovery file you can save. Our server only ever holds them locked, so it cannot read your notes. This also means we cannot recover your notebooks for you if you lose every signed-in device and your recovery file.

To run the service, Ori Sync stores:

• the email address your account is created with;
• your encrypted notebooks, with every earlier version kept during the beta so a change can be undone;
• random identifiers for your notebooks, files and versions, their sizes as stored, and when they changed;
• a row for each device you sign in on: its computer name, whether it runs Windows, macOS or Linux, and when it was added and last seen.

Sign-in codes are emailed through Resend. We keep only a scrambled copy of each code, and it expires after ten minutes. If you choose to sign in with Google or Microsoft where it is offered, that provider confirms your email address to Ori Sync, and the email address is all Ori Sync keeps. Your IP address is used briefly to limit repeated sign-in attempts and is not stored with your account.

You can delete a notebook's cloud copy at any time from Settings, and Start over removes every notebook and key from your account. To delete the account itself, including its email address and device list, email support@orinotebook.com.

The microphone, only while you use it

Ori listens only while you dictate or record, and it turns speech into text on your computer. No audio is sent anywhere. A recording you make into a page is saved as an audio file in your notebook. Dictation audio is deleted once it has been turned into text. The speech models come from Hugging Face, and only when you choose to download one.

Web pages you open

When you open a web page inside Ori, your computer fetches it directly, the way a browser would. No Ori server sits in between, and the page's own scripts do not run.

AI is your choice, and it goes where you send it

When you ask Ori to do something with AI, the note context you selected is sent to the provider you set up, and only then:

• Anthropic, if you use your own Anthropic API key;
• an OpenAI-compatible endpoint you choose, which can be a cloud service or a model running on your own machine;
• an AI program already installed on your computer, such as Claude Code or Codex, running under your own account and terms.

Ori is the pipe, not the destination. That provider, not Ori, receives the content, and it handles it under its own policy, for example Anthropic and OpenAI. Ori has no AI service of its own, ships no API key, and always shows which provider is active. Agents you connect to your notebook from Settings talk to Ori on your own computer.

Licenses from the earlier beta

Ori, its AI panel included, needs no activation, and a new copy never contacts a license service. A copy activated with an invite code during the earlier beta still renews that license from time to time: when it does, the app sends the code, a random device key, your computer's name, and the app version to Ori's license service. No email address is asked for or sent. That service stores this only to keep the license working across renewals. It is never used to look at your notes, profile you, or watch what you do.

The app checks for updates, which sends only the app version, the operating system and the processor type. The Microsoft Store version leaves updates to the Store. If you use Claude Code or Codex, Ori may ask the public npm registry which version of them is current, which sends nothing about you.

Optional output reports

Every AI response has a "Report output" button. Only if you press it, Ori sends that single response, a category, your optional note, the provider label, and the app version so a bad result can be reviewed. It does not attach your notebook, note sources, or device. Reports are kept privately for up to 90 days. Nothing is sent unless you choose to report.

What Ori never does

• No selling or sharing of your personal information.
• No advertising and no ad tracking.
• No behavioral profiling and no monitoring of what you write.
• No reading of, or training on, your notebook.
• No account required to use the notebook.

Your control

• Use the whole notebook without an account and without activating the AI panel.
• Choose the AI provider and the exact note context for each request.
• Keep API keys session-only, or clear any keys you saved.
• Stop syncing any notebook, or delete its cloud copy, from Settings.
• Export, edit, or delete your local files directly, any time.
• Uninstall Ori without touching your notebook folders.
• Email support@orinotebook.com to access or delete your Ori Sync account, license or report data. We check that the request comes from you and aim to respond within 30 days.

Where the little data there is lives

License, report and Ori Sync data sit on Cloudflare's network. Sign-in emails go through Resend. AI content goes to whichever provider you selected. These services may run in the United States or elsewhere, so that data may be processed outside your own country, under each provider's terms.

Changes

This policy will be updated if Ori's data practices change, and the current effective date will appear at the top of this page.

Contact

Reach us at support@orinotebook.com. Harmful AI output can be reported privately from the "Report output" button under any response, so you never have to post your notes in a public tracker.