Oraya LLC ("Oraya," "Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you visit our website at orayaus.com (the "Website"), use the Oraya application (the "App"), or interact with any of our services, features, or communications (collectively, the "Services").
We understand that you are trusting us with sensitive information about your emotional wellbeing. We take this responsibility seriously. This Privacy Policy is designed to be transparent about our practices so you can make informed decisions about sharing your information with us.
By accessing or using any of the Services, you acknowledge that you have read and understood this Privacy Policy. Your use of the Services is also governed by our Terms of Service. If you do not agree with our practices as described herein, please do not use the Services.
We collect information that you voluntarily provide to us, including:
When you access the Services, certain information may be collected automatically, including:
The Oraya App may store certain wellness data — including mood entries, stress logs, micro wins, reflections, and preferences — locally on your device using browser localStorage or similar client-side storage technologies. This data is stored on your device and is not automatically transmitted to Oraya's servers. You can delete locally stored data at any time through the App's settings or by clearing your browser data. Please note that locally stored data is only as secure as your device; if others have access to your device or browser, they may be able to view this data.
We may receive limited information from third-party services that you use in connection with the Services, such as Google Forms (for waitlist submissions), analytics providers, and hosting and infrastructure providers. This information is used solely for operating and improving the Services.
We use the information we collect for the following purposes:
We do not sell your personal information. We do not sell, rent, lease, or trade your personal information — including your wellness data — to any third party for their marketing or advertising purposes. We have not sold personal information in the preceding twelve (12) months.
We may share your information only in the following limited circumstances:
We implement commercially reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee absolute security. You acknowledge and accept this inherent risk when providing information through the Services.
We retain your personal information for as long as your account is active, as needed to provide you with the Services, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When your data is no longer needed for these purposes, we will securely delete or anonymize it.
If you request deletion of your account and data, we will process your request within thirty (30) days, subject to any legal obligations that may require us to retain certain information.
Depending on your location, you may have certain rights regarding your personal information:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
To exercise any of these rights, please contact us at [email protected]. We will respond to verifiable requests within forty-five (45) days.
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. Our legal bases for processing your information include your consent, performance of our contract with you (the Terms of Service), our legitimate interests in operating and improving the Services, and compliance with legal obligations.
To exercise any GDPR rights, please contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority. If required under applicable law, Oraya will designate a representative in the European Union to serve as a point of contact for data protection inquiries.
If you are a Washington state resident, you may have rights under the Washington My Health My Data Act regarding your consumer health data. Wellness data such as mood scores, stress levels, and mental health reflections may qualify as consumer health data under this law. You have the right to access, delete, and withdraw consent for the collection and sharing of your consumer health data. Oraya will not sell or offer to sell consumer health data without your prior written consent. To exercise these rights, please contact us at [email protected].
Residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have additional rights to access, correct, delete, and opt out of the processing of personal information. To exercise rights under your state's privacy law, please contact us at [email protected]. We will respond within the timeframe required by applicable law.
Oraya does not sell your personal information, and we do not share your personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding twelve (12) months. If you wish to exercise your right under applicable law to opt out of any future sale or sharing, you may do so by contacting us at [email protected].
We use cookies and similar technologies to operate and improve the Services. The types of cookies we use include:
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Services.
We do not use cookies for advertising purposes and do not allow third-party advertisers to set cookies through our Services. For users in jurisdictions that require affirmative cookie consent (such as the European Economic Area), we will implement a cookie consent mechanism allowing you to accept or reject non-essential cookies.
Some browsers transmit "Do Not Track" (DNT) signals. Because there is no common standard for interpreting DNT signals, the Services do not currently respond to DNT signals. We will update this policy if a standard for DNT signals is established.
The Services are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected] and we will take immediate steps to remove such information.
We recognize that the wellness data you share with Oraya — including mood scores, stress levels, emotional reflections, and personal journal entries — is deeply personal and sensitive. We are committed to treating this data with the highest level of care and respect.
Our commitments regarding your wellness data:
In the event of a data breach that affects your personal information, we will notify affected individuals and applicable regulatory authorities in accordance with applicable state, federal, and international law. We will endeavor to provide such notification as promptly as reasonably practicable, and in no event later than the deadlines required by applicable law.
Notification will include, to the extent known, a description of the nature of the breach, the types of information involved, the steps we are taking to address the breach, and recommendations for steps you can take to protect yourself.
Oraya is based in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from those of your country.
By using the Services, you consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy. Where required, we will implement appropriate safeguards to protect your information in accordance with applicable data protection laws.
The Services may contain links to third-party websites, services, or applications (including Google Forms used for waitlist registration). This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Services.
If you use the Clarity task management app, you have the following additional rights:
We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable laws. When we make material changes, we will update the "Effective Date" at the top of this Privacy Policy and may notify you through the Services, via email, or through other reasonable means.
Your continued use of the Services after the posting of a revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data pract