Orvillo Privacy Policy
Last updated: 4 November 2026. Applies to the Orvillo app for iOS and Android.
1. Who we are
The data controller is Olimstad Apps, Flåtestadveien 137, 1415 Oppegård, Norway, organisation number 938 810 885. Contact: privacy@orvillo.app.
2. Summary
- Your recordings, transcripts and summaries are stored only on your phone. Orvillo has no accounts and no cloud copy.
- Audio leaves your phone only if you turn on AI transcription, and only to create a transcript. It goes through Orvillo's server to OpenAI, which writes the text, and, when speakers are separated, to Microsoft Azure in the EU.
- When you ask for a summary, the transcript text goes through Orvillo's server to OpenAI, which writes it. This never happens on its own unless you turn on automatic summaries.
- Orvillo's server stores neither your audio nor your transcripts or summaries. OpenAI doesn't use your audio to train its models. Microsoft doesn't store it.
- We use a random device ID and usage counters to keep the free service fair and to stop abuse.
- Orvillo has no ads, no analytics and no tracking, and we never sell your data.
3. Data stored on your device
Recordings, transcripts, summaries, titles and settings are stored in the app's private storage on your device. We have no access to them. They may be part of your device's encrypted backups (iCloud or Google), which you control. When you delete the app, or use Settings → Privacy & data → Delete all recordings, they are removed from the device. Items in Recently Deleted are removed permanently after 30 days.
4. AI transcription (only with your consent)
Before anything is sent, the app asks for your explicit consent. You can withdraw it at any time in Settings → Privacy & data.
What is sent:
- the audio of the recording: in parts of up to about 10 minutes for the text, and up to about 33 minutes for speaker separation
- a few 20-second samples of the audio, to recognise the language
- any language hints you chose, and the words in your Vocabulary (Settings → Vocabulary), as spelling hints
- for continuity, a few sentences of transcript text from earlier in the recording
- to recognise the language, the text of those samples and parts; and the transcript text when you translate it
- when you ask for a summary (or have turned on Create summaries automatically), the transcript text with the speaker names as shown, and the language you chose for the summary. The app tells you this once before your first summary.
- technical data: app version, platform and your device token
Where it goes:
- Data is sent encrypted (HTTPS) to Orvillo's server, which runs on Cloudflare.
- The server passes it straight on:
- to OpenAI (OpenAI, L.L.C., USA), which writes the transcript, recognises the language, translates and writes summaries;
- with Separate speakers on, the audio also goes to Microsoft Azure AI Speech (Microsoft Ireland Operations Ltd., data processed in the EU, Ireland), which tells the voices apart.
- The server keeps the audio and text only in memory while the request is being processed. They are never written to storage or logs.
Summaries are written by AI from the transcript. They can leave things out or get details wrong, so check important details against the transcript. The summary is saved only on your phone.
OpenAI processes the data as our data processor. It does not use API data to train models. It may keep data for up to 30 days to detect abuse, unless longer retention is required by law.
Microsoft processes the audio as our data processor. It does not store the audio or the result. The voice characteristics it uses to tell speakers apart are discarded when the request is done, and it cannot recognise a person across recordings.
Legal basis: your consent (GDPR Art. 6(1)(a)). Conversations can contain sensitive information, such as about health. When you transcribe such content you give explicit consent under Art. 9(2)(a).
Other people: if you record other people, you are responsible for telling them and, where the law requires it, getting their agreement.
5. Device and usage data
To provide a free service with fair limits and to prevent abuse, we process:
- A random device ID created by our server. It is not linked to your name, email, phone number or advertising ID.
- Device attestation results: Apple App Attest on iOS, Google Play Integrity on Android. These confirm that requests come from the genuine Orvillo app on a genuine device. On iOS we store a public key created by your device. On Android, Google processes the integrity check under its own terms.
- Usage counters: seconds transcribed per day and per month, and the number of summaries per day.
- Technical logs: time, endpoint, status code, file size, duration and a hashed device ID. Your IP address is processed briefly by Cloudflare to limit how many requests a device can send. It is not stored in our logs.
Legal basis: our legitimate interests in preventing abuse, controlling costs and keeping the service secure (Art. 6(1)(f)).
Retention:
- Usage counters are kept for the current and previous month.
- Device records are deleted after 12 months of inactivity.
- Logs are kept for at most 30 days.
6. Processors and international transfers
| Processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting of Orvillo's server, rate limiting | Global edge network |
| OpenAI, L.L.C. | Speech-to-text, language recognition, translation, summaries | USA |
| Microsoft Ireland Operations Ltd. (Azure AI Speech) | Speaker separation | EU (Ireland) |
| Apple / Google | Device attestation (App Attest, Play Integrity) | USA / global |
Transfers outside the EEA rely on the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as provided in each processor's data processing agreement.
7. Your rights
Under the GDPR you have the right to:
- access, rectification and erasure of your personal data
- restriction of processing, and objection to processing
- data portability
- withdraw consent at any time, without affecting earlier processing
The data on your phone is fully under your control. For data on our server, email privacy@orvillo.app with the Device ID shown under Settings → Privacy & data.
You can complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or to your local supervisory authority.
8. Children
Orvillo is not directed at children under 13.
9. Security
All network traffic is encrypted. There are no accounts or passwords to leak, and the server never stores audio or text. Your recordings are protected by your device's encryption and screen lock.
10. Changes
If we change this policy in a way that matters, we will tell you in the app. If the change affects AI transcription, we will ask for your consent again.