Privacy Policy

1. Overview

This policy explains what information Orlo (the "App") collects when you use it, how that information is used, who it's shared with, and the choices you have. It's meant to be read alongside our Terms & Conditions, which covers the broader rules of using the App. If anything here is unclear, treat this document as the more detailed explanation of the data practices summarized in the Terms.

This Privacy Policy is governed by the laws of Queensland, in the same way as our Terms & Conditions.

2. Information we collect

Account information. When you create an account, we collect your name and email address — either typed directly, or provided by Google or Facebook if you choose to sign in that way.

Information about your child. Anything you choose to enter about your baby: their name, date of birth, sex, and growth measurements (weight, length, head circumference).

Activity logs. Sleep sessions, feeds, diaper changes, pumping sessions, and other activities (medicine, vaccines, milestones, tummy time, notes) that you or another caregiver in your household choose to log, along with the time they were logged and any notes attached.

Household information. Your household's unique sharing code, and which caregivers have joined it.

Payment information. If you make the one-time purchase to continue using Orlo after the free trial, payment is handled entirely by Stripe, our payment processor. We never see or store your full card details — Stripe shares with us only that a payment succeeded, and a reference id for it.

Technical information. Basic technical data needed to operate the App and keep it secure, such as authentication tokens and session information.

3. How we use your information

Your information is used only to provide the App's features to you and the caregivers you choose to share it with: displaying your logs, computing sleep/feed predictions and growth charts, syncing changes between household members in real time, and processing your purchase if you choose to buy. We don't use your data for advertising, we don't sell it, and we don't use it to train any AI model.

4. Who your information is shared with

Other members of your household. Anyone who joins your household using its sharing code can see and edit all of that household's data — your baby's profile, growth records, and every log entry. This is core to how Orlo works, and is covered in more detail in section 8 of our Terms & Conditions.

Service providers who help us run the App. We use a small number of third parties strictly to operate Orlo, not to reuse your data for their own purposes:

• Supabase — hosts our database and handles authentication. Your account and logged data are stored on Supabase's infrastructure.
• Stripe — processes the one-time purchase payment. Stripe collects your payment details directly; we don't.
• Google and/or Facebook — only if you choose to sign in using one of these, in which case that provider authenticates you and shares your basic profile (name and email) with us.

We don't sell your information to anyone, and we don't share it with advertisers or data brokers.

5. Household sharing — please read this one carefully

Sharing your household code with someone gives them full access to view and edit everything in that household — not a limited or view-only version. There's no approval step; whoever has the code is in. Only share it with people you'd trust with a house key, and treat it with the same care.

6. Children's privacy

Orlo is a tool for adult parents and caregivers to track information about their child — it is not directed at children, and it is not intended to be used directly by anyone under 18. Accounts are created and controlled by an adult caregiver, who decides what information about their child is entered into the App.

7. Data retention and deletion

You can permanently delete all logged sleep, feed, diaper, activity, growth, and pumping records for your baby at any time from Settings ("Clear all data"). This doesn't delete your account itself. You can permanently delete your whole account from Settings ("Delete account"), or from app.orlobaby.com/delete-account.html. If you'd rather we handle it, or have any trouble, email orlobaby@iamrusso.com.

8. Security

Access to your household's data is restricted at the database level so that only members of your household can read or write it — this is enforced by the database itself (via row-level security), not just by the App's interface. No system is perfectly secure, and we can't guarantee absolute security, but this access control is a real, structural protection rather than just a setting in the App.

9. Data stored on your device

So the App can open quickly instead of reloading everything from scratch each time, it keeps a copy of your household's recent data — your baby's profile and their logged sleep, feed, diaper, activity, growth, and pumping entries — in your browser's local storage on the device you're using. This copy exists purely to make the App faster; it isn't transmitted anywhere, and it isn't accessible to other websites.

This local copy is tied to the signed-in account, is automatically discarded if it's more than a week old, and is deleted when you sign out. If you're using a shared or family device, signing out is what removes it.

10. Cookies and tracking

Orlo doesn't run advertising trackers or analytics cookies on this website or in the App. The one minor exception: this website loads fonts from Google Fonts, which involves a request to Google's servers and exposes your IP address to Google in the same way loading any web font does — nothing beyond that is tracked here.

11. Your choices

You can review and correct your baby's information at any time in the App. You can remove a caregiver from your household from Settings. You can clear all logged data at any time. You can stop using the App and request account deletion whenever you'd like.

12. Changes to this policy

This policy may be updated from time to time as the App changes. If we make a material change, we'll make a reasonable effort to let you know — for example, the same way we notify you about material changes to the Terms & Conditions.

13. Contact

For any questions about this policy, to request access to or deletion of your data, or to raise a privacy concern, contact us at orlobaby@iamrusso.com.