Orchia - Last updated July 2026
This Privacy Policy explains what information Orchia collects, how it is used, how it is stored, and the choices and rights available to you. We aim to collect only what is reasonably necessary to operate the service and to handle personal information responsibly.
Orchia is operated by Cole Buice, an independent software developer based in Nevada, United States. Cole Buice is the controller of personal information processed by Orchia unless otherwise stated in this policy. For privacy questions, rights requests, account inquiries, or data requests, contact bisonlabs.dev@gmail.com.
Account information: When you sign up, we collect your email address, chosen username or display name, and date of birth. Passwords are handled by Supabase Auth and stored only in hashed form. Orchia never stores your password, and it is transmitted only over encrypted connections. At signup, a 4-character alphanumeric public suffix is also automatically assigned and becomes part of your public handle (for example, Cole#A7G8).
Age-related information: We use date of birth and related age information to determine age-appropriate access settings and safety restrictions. We do not make your date of birth visible to other users. Certain features, such as social features, may be restricted based on age. We may also use your age bracket — a general range derived from your date of birth (for example, 16–17 or 21+), not the date itself — in aggregated form to understand how different age groups use Orchia and to improve the app.
App content: Tasks, schedules, recurring schedules, notes, checklist content, counters, timers, and other content you create in the app may be stored on your device and synced to our servers.
Notification content: When reminders are scheduled, notification messages include the name of the relevant task or subtask (for example, "Time to start: Morning Routine"). Notifications are scheduled locally on your device and are not transmitted to our servers.
Device, session, and security information: When you sign in, we may store device and session information such as platform, device name, and session identifiers to help manage active sessions and protect account security. Supabase infrastructure may also log IP addresses and request metadata as part of standard service operation.
Friends, usernames, and sharing: If you use social features, your username and related public handle information may be searchable or visible to other users for friend connections. The app also stores your block list, friend groups and group membership lists, and per-friend nicknames. These are stored on Supabase and are deleted when your account is deleted. If you share a task or schedule, we process the content you choose to share along with sender and recipient handle information needed to deliver that feature. When you share a task and a recipient accepts it, a copy is added to their account. That copy remains in their account independently, and deleting your account does not remove accepted copies from recipients.
Feedback submissions: If you submit feedback in the app, we collect the message content, whether it is a bug report or suggestion, app version, device platform, and, if you choose to include it, your device model and screen size, and submission timestamp. We use this information to fix bugs and improve Orchia.
Subscription and entitlement information: If you use a paid subscription, we may process subscription status, entitlement status, and related account identifiers needed to manage premium access.
Local settings and exports: Notification preferences, display settings, and other app settings may be stored locally on your device. If you use the app's data export feature, it retrieves tasks, schedules, recurring schedules, recurrence presets, task categories, profile information, settings, friend connections, block list, friend groups, friend nicknames, task offers, feedback submissions, and device session records (device name, platform, app version, last activity) from Orchia's servers and provides them to you in an export file. Exported files may remain wherever you save or share them until you delete them.
| Processing activity | Proposed legal basis |
|---|---|
| Account creation and authentication | Contract performance |
| Syncing app content across devices | Contract performance |
| Notification scheduling | Contract performance |
| Session management and security | Legitimate interests |
| Social features (friends, sharing, blocking) | Contract performance |
| Subscription and entitlement management | Contract performance |
| Age-gating to comply with COPPA and applicable child-protection laws | Legal obligation + Legitimate interests |
| Safety moderation and abuse prevention on social features | Legitimate interests |
| Aggregated usage and demographic analytics (planned) | Legitimate interests |
| Service operation and improvement | Legitimate interests |
In the future, we may collect and analyze aggregated usage statistics to improve Orchia and to guide how we develop and market the app. Examples include: how often built-in features (such as checklists, counters, or timers) are enabled and used; structural patterns in how tasks and subtasks are organized (structure only; never task names, notes, or other content you create); and how feature usage differs across general age groups. Any such analysis would use aggregated or de-identified information, such as age ranges rather than exact dates of birth, and would not identify you. We would not use this information to show you advertisements, and we would not sell it or share it with advertisers. If we introduce these analytics, we will update this policy to describe what is collected before collection begins.
We use third-party service providers to operate parts of Orchia. These may include Supabase (US, AWS infrastructure) for backend data storage and account-related services, RevenueCat (US) for subscription and entitlement management, and Apple App Store and Google Play for billing and payment processing. We do not directly process your payment card information.
Your data may be stored locally on your device and may also be processed on servers operated by our service providers. Supabase stores your data, including account and profile information (email address, display name and public handle, date of birth and age bracket, and subscription tier), task and schedule content, app settings, device and session records, social connections, block lists, friend groups, friend nicknames, pending shared-task offers, and feedback submissions. We use reasonable administrative, technical, and organizational measures to protect personal information, but no method of transmission or storage can be guaranteed to be completely secure.
Your information may be transferred to and processed in the United States and other countries where we or our service providers operate. Where required by applicable law, we rely on appropriate safeguards for international transfers.
We retain account and app data for as long as your account remains active or as needed to operate the service. If you delete your account, we aim to remove your personal data from active systems within 30 days. Our backend provider may retain database backups and operational logs for a limited period as part of standard service operation. Retention periods depend on the service plan in use at the time and are managed by the provider. Subscription and payment records may continue to be retained by Google Play and RevenueCat under their own policies after account deletion. Data you export or store locally on your device may remain until you delete it yourself.
When you share a task and a recipient accepts it, that copy remains in their account independently and is not removed when your account is deleted.
Orchia is not intended for children under 13, and we do not knowingly allow children under 13 to create accounts. If we learn that an account belongs to a child under 13, we may suspend or terminate that account and delete associated data as appropriate.
Age requirements may vary by jurisdiction. In some regions, users under a higher age threshold may require parental or guardian consent under local law.
You may request access to, correction of, or deletion of your personal information. Depending on your location and applicable law, you may also have rights relating to data portability, restriction of processing, objection to certain processing, and the right to lodge a complaint with a relevant supervisory authority or regulator.
You can delete your account through the app in Settings > Profile > Delete Account. You can also export a copy of your data through the app in Settings > Data Management > Export My Data. If you cannot access those in-app options or have other privacy or rights questions, you may contact us at bisonlabs.dev@gmail.com.
If you are a California resident, you may have the right to know what categories of personal information we collect and the right to request deletion of personal information, subject to certain exceptions. Orchia does not sell personal information or share it for cross-context behavioral advertising.
We may update this policy from time to time. If we make material changes, we may notify you through the app, through updated legal pages, or by other appropriate means. Your continued use of Orchia after an update takes effect means you accept the revised policy to the extent permitted by law.
For privacy questions, rights requests, or data-related concerns, contact Cole Buice at bisonlabs.dev@gmail.com.