TJB Ventures FZE, a company registered in Ajman Free Zone, United Arab Emirates (“Orla”, “we”, “us”), publishes the Orla app. This policy explains what happens to your information.
Orla runs no server that holds your health information. There is no Orla account, no login, and no database of ours containing what you log.
1. What you log in Orla
Symptoms, severity, cycle dates, hormone therapy (type, dose, route, start and stop dates), supplements, and any notes or questions you write.
Where it is stored. On your device, in the app’s own encrypted storage, protected by iOS Data Protection and your device passcode or biometric lock.
Who can see it. You. We cannot. It is not sent to any server we operate, because we do not operate one.
iCloud sync. If you turn on iCloud sync, a copy of this information is stored in your own private iCloud database so it is available across your devices and survives losing a phone. Apple encrypts it and holds it under your Apple ID. We have no access to it and no way to read it. Sync is off unless you turn it on. Apple’s handling of iCloud data is described at apple.com/legal/privacy.
2. The questions asked before you subscribe
During onboarding, before any payment or consent screen, Orla may ask a short set of questions about symptoms you experience. These answers:
- are held in the app’s memory only, for the length of that onboarding session
- are never written to the app’s storage, never synced, and never transmitted anywhere
- are discarded when onboarding ends
They are used only to tailor what the following screen shows you. They do not become part of your health record in the app. If you want any of that information in your record, you log it yourself after subscribing.
3. Apple Health
If you grant Health permission, Orla reads wrist temperature, heart rate variability, sleep, and heart rate so they can be displayed alongside what you have logged.
- Orla reads this data live, at the moment a screen displays it.
- Orla never copies it into its own storage, never includes it in iCloud sync, and never puts it in a PDF export.
- Orla never writes anything back to Apple Health.
- You can change or withdraw Health permission at any time in iOS Settings, under Privacy & Security, then Health, then Orla.
4. Subscription information
Orla uses RevenueCat to manage App Store subscriptions. RevenueCat is the only third-party software component in the app. It receives:
- an anonymous identifier generated for your installation, not your name or email address
- your subscription status and purchase history (plan, price, renewal, cancellation)
- basic technical information such as device model, operating system version, app version, and country
RevenueCat receives no symptom, cycle, hormone therapy, note, or Apple Health information. It has no technical route to that data. RevenueCat acts as our processor for subscription information. Its privacy policy is at revenuecat.com/privacy.
Payment itself is handled entirely by Apple. We never see your card details.
5. Diagnostic events
Orla records a small number of event names on your device (for example, that an export was generated) so that faults can be diagnosed. These records:
- contain the name of the event and nothing else, by design; they cannot carry your data
- are written to the device’s system log and stay on the device
- are not connected to any analytics, attribution, crash-reporting, or advertising service, because the app contains none
6. PDF exports
When you generate a summary for a medical appointment, the PDF is created on your device. Where it goes next is entirely your choice, through the standard iOS share options (Mail, Messages, Files, AirDrop, printing). Once you share a file, this policy no longer governs it, and the app has no visibility into or control over it.
7. What Orla does not do
- No advertising, no ad networks, no ad identifiers.
- No third-party analytics or crash-reporting software of any kind.
- No sale or rental of personal information to anyone, for any purpose.
- No tracking of you across other companies’ apps or websites.
- No sharing of your health information with data brokers, advertisers, employers, or insurers.
8. Deleting your information
In Settings, “Delete all my data” permanently removes everything the app holds: your logged symptoms, cycle, therapy and supplement records, notes, your consent record, and, where iCloud sync has been used, the corresponding records in your private iCloud database.
Deleting the app from your device removes its local storage. If you used iCloud sync, use the in-app deletion first, or remove Orla’s data separately in iOS Settings under your Apple ID, iCloud, then Manage Account Storage.
Deletion is not reversible and we cannot restore data for you, because we never held it.
Your subscription is separate. Deleting your data does not cancel a subscription. Manage or cancel it in the App Store under Subscriptions.
9. How long information is kept
On-device and iCloud information is kept until you delete it. Subscription records held by RevenueCat are kept for the life of the subscription and for the period afterwards required for financial and tax record-keeping.
10. Your rights
United Kingdom and European Economic Area (UK GDPR / GDPR). Health information is a special category of personal data and receives additional protection. Our lawful basis for handling what you log is your explicit consent, given on the consent screen in the app and withdrawable at any time by deleting your data or by declining to continue. Our lawful basis for subscription information is performance of our contract with you.
You have the right to access, correct, delete, restrict, and object to processing, and to data portability. Because what you log stays on your device and in your own iCloud, you exercise most of these directly: your records are visible and editable in the app, exportable as a PDF, and deletable in Settings. For subscription information, contact us using the details below. You may also complain to your national supervisory authority, or to the Information Commissioner’s Office in the UK.
California (CCPA/CPRA). We do not sell or share personal information as those terms are defined, and we do not use sensitive personal information for purposes requiring an opt-out. You may request to know, delete, or correct, and you will not be treated differently for asking.
United Arab Emirates (PDPL). We handle personal data under Federal Decree-Law No. 45 of 2021. You may contact us to exercise the rights that law provides.
Everywhere. Regardless of where you live, the deletion control in Settings is available to you.
11. Children
Orla is intended for adults and is not directed at anyone under 18. We do not knowingly handle information from children.
12. International transfers
We hold no health data, so there is no international transfer of it by us. Subscription information is processed by RevenueCat, which operates in the United States, under contractual safeguards including the applicable standard contractual clauses.
13. Security
Your records rely on Apple’s device encryption and, where sync is enabled, on Apple’s iCloud encryption. No system is absolutely secure, but Orla is built so that the smallest possible amount of information ever leaves your device.
14. Changes
We will update the date at the top when this policy changes, and will tell you in the app if the change is significant.
15. Contact
TJB Ventures FZE
Building C1, Ajman Free Zone, United Arab Emirates
info@tjbventures.ai
Privacy queries: info@tjbventures.ai