Ordava — Privacy Policy

Last updated: 24 July 2026

Ordava (“Ordava”, “we”, “us”) is a supplements and skincare routine app. This policy explains what information the app handles, where it lives, and the limited cases where anything leaves your device. Ordava is built to be local-first and private by design: the core app has no user accounts, no analytics, no advertising, and no tracking across apps or websites.

The short version

• Your routine data stays on your device. Products, routines, schedules, completion history, reminders and product photos are stored locally on your iPhone and are not sent to us or anyone else.
• We don’t track you. No analytics SDKs, no advertising identifiers, no cross-app tracking, no crash-reporting that identifies you.
• Two features involve third parties, and only those two: subscriptions (handled by Apple and RevenueCat) and the optional AI product scan (a Pro feature that sends the label photos you choose to our backend for reading). Both are described below.

Information stored on your device (local only)

The following is created and stored only in the app’s local database on your device. It is not transmitted to us, we cannot see it, and it is never sold or shared:

• Products you add (names, brands, categories, types, notes) and their ingredients.
• Container details (quantities, prices, purchase/expiry dates).
• How you use each product (amounts, frequency, timing, with-food flags, and any label directions you enter).
• Your routines, schedules and completion history.
• Your preferred routine times (morning/evening/wake/bedtime/breakfast) and time zone.
• A randomly generated, anonymous installation identifier created on-device — not linked to your name, account, Apple ID, or any other identifier — used only for app function.
• Onboarding-completion and feature-consent timestamps.

You control this data directly: you can edit or delete items in the app, reset all data in Settings, or delete the app to remove it from your device. Because it is stored locally, it is included in your normal encrypted device backups (e.g. iCloud device backup) if you use them, but Ordava itself does not run any cloud sync or account-based storage.

Product photos (local only)

If you add a photo to a product, it is saved as an ordinary image file on your device only. On import, the image is re-encoded, which removes embedded metadata such as GPS location before it is saved. Product photos are not uploaded, synced, or shared, and are not used for any purpose other than showing you your own product. They remain until you delete the photo, the product, or the app. (Note: because photos are stored locally, they are not recoverable by us if you delete the app or lose the device.)

Subscriptions and purchases (Apple + RevenueCat)

Ordava Pro is an auto-renewing subscription sold through Apple’s App Store. When you purchase, start a free trial, or restore a purchase:

• Apple processes the transaction and your payment. Ordava never sees your payment details. See Apple’s Privacy Policy.
• RevenueCat, our subscription-management provider, records your purchase and subscription status linked to an anonymous RevenueCat identifier generated on your device. This is not linked to your name, email, or Apple ID by us, and is used only to determine whether your Pro features are active and to support restores. See RevenueCat’s Privacy Policy.

We use this data solely to unlock and maintain the Pro features you’ve paid for.

AI product scan (Pro, optional, opt-in)

Ordava Pro includes an optional feature that reads a supplement or skincare label from photos you take or choose, to help pre-fill a new product for you. This is the only feature that sends your images off your device, and it is deliberately limited:

• You opt in. A one-time consent screen explains this before your first scan; no scan happens without your consent, and the feature is entirely optional.
• What is sent: only the label photos you select for that scan (resized), sent to Ordava’s backend service, which passes them to our AI provider, Anthropic, to extract the label text. See Anthropic’s Privacy Policy.
• Transient handling: the photos are processed only to read the label. They are not saved as your product’s photo and not stored as a record in Ordava. Any product a scan helps create is shown to you to review and edit before saving — nothing is saved automatically.
• Our backend does not retain your images. Our scan service uses your photos only to fulfil that request and does not store them beyond the processing needed to return the result. We do not use your scan images to train models, and we never sell them.
• Honest limitation: we can’t make that promise on behalf of our AI provider (Anthropic), which processes the images to extract the label and may retain them briefly under its own policy (for example, for operational and trust-and-safety purposes). See Anthropic’s Privacy Policy linked above.
• If you don’t use this feature, no image ever leaves your device through Ordava.

Reminders

If you enable reminders, they are scheduled locally on your device using iOS notifications. They contain only a general summary (for example, “3 things to take or apply today”) and never name a specific product, so a notification on your lock screen doesn’t reveal what you take. No push server or push token is involved.

What we do NOT collect

Ordava has no schema for and does not collect: diagnoses or medical conditions, medical records or test results, prescription data, pregnancy data, children’s data, precise location, your contacts, or any third-party analytics or advertising identifiers.

Health disclaimer

Ordava is an organisational tool, not a medical device or a source of medical advice. It does not diagnose, treat, or make safety judgements about any product or combination. Always follow product labels and consult a qualified professional about your supplements, skincare, or health.

How we share information

We do not sell your information and do not share it for advertising. Information is shared only with the service providers strictly needed to run the features above: Apple (purchases), RevenueCat (subscription status), Anthropic (only the scan images you submit, and only if you use AI scan), and our backend hosting provider that runs the scan service. These providers process data on our behalf to provide their part of the service.

Data security

Your on-device data is protected by iOS’s built-in encryption and app sandboxing. For the limited data that reaches our services — subscription status and, only if you use AI scan, the label images you submit — we use industry-standard protections including encryption in transit (TLS) and access controls, and we review our practices periodically. No method of storage or transmission is completely secure, but we work to protect your information appropriately for its sensitivity.

Data retention and deletion

• On-device data (routines, history, photos, etc.) is retained on your device until you delete it in-app or delete the app. We hold no copy.
• Subscription data is retained by Apple and RevenueCat per their policies for as long as needed to manage subscriptions and comply with law.
• AI scan images are not retained by Ordava as part of your data; see the AI scan section for third-party processing.

Your rights

Because your routine data lives on your device, you can access, correct, or erase it directly in the app at any time. For subscription data held by Apple or RevenueCat, or if you have any privacy request or question, contact us at contact@ordavaapp.com. Depending on where you live (for example, the UK/EEA under UK GDPR/GDPR, or certain US states), you may have additional rights regarding personal data; we will honour applicable requests. We respond to verifiable requests without undue delay, and at no cost in most cases.

Children

Ordava is not directed to children under 13 (or the higher minimum age that applies in your country, such as 16 in parts of the EU/UK), and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will address it.

International users

Ordava is operated from the United Kingdom. If you use the optional AI scan feature, the images you submit may be processed by our providers on infrastructure located in other countries. You provide this consent explicitly through the in-app consent screen shown before your first scan, and you can choose not to use the feature if you’d prefer your images never leave your device.

Changes to this policy

If we change how the app handles data, we will update this policy and its “Last updated” date. Material changes affecting a feature will be reflected before or when that change ships.

Contact

Questions about this policy or your data: contact@ordavaapp.com.