Skip to content
Back to Orrum
Your informationLast updated October 5, 2026

Privacy Policy

Your records deserve clear choices. Here is how the app, optional connected features and this website handle information.

1. Introduction

Folio AI, Inc. (“we,” “our,” or “us”) operates Orrum, a pelvic-health wellness application and website. This policy explains what information is used, where it goes, and the choices available to you. Features and privacy controls depend on the app version and services you use; a description here does not mean a planned feature is already available in your installed version.

2. Data Controller

The data controller responsible for your personal data is Folio AI, Inc.

For privacy inquiries, access requests, corrections, or deletion requests, contact privacy@orrum.dev.

3. Information We Collect

Information depends on the features you choose:

  • Practice and wellness records: session history, exercise timings, program progress, preferences, feedback, and any symptoms, confidence, cycle or postpartum details you record. These records are stored primarily in the app on your device.
  • Apple Health information: data types you authorize through HealthKit, described in Section 6.
  • Account information: your account identifier and email, name or sign-in information supplied through email, Apple or Google sign-in.
  • Membership and referrals: purchase verification information, subscription or trial status, referral codes and reward records. Apple processes the payment; Orrum does not receive your payment-card details.
  • AI requests and usage: questions, recent conversation, requested plan details and any context included in the request; usage counters and service limits are also recorded.
  • App crash diagnostics: Firebase Crashlytics collects crash reports, app-installation identifiers and device, operating-system and app-version information to help investigate failures. Collection is enabled by default unless you opt out.
  • Website and technical data: aggregate website traffic statistics and technical request or error information used to operate and maintain the service, described in Section 7.
  • Support correspondence: information you choose to send when contacting us. Avoid including identifying or sensitive health details that are unnecessary for your request.

4. How We Use Your Information

We use information to provide guided practice and education, display your records and reported trends, support optional backup and device continuity, authenticate accounts, verify memberships, administer referrals, enforce AI allowances, respond to support requests, and maintain service reliability and security. Optional AI processing is described separately below. We do not sell your personal information.

5. Sensitive Wellness Information & Medical Advice

Symptom, cycle, pregnancy and postpartum information can be sensitive health-related information even when recorded in a wellness app. Orrum provides general wellness guidance, not medical advice, diagnosis or treatment. A session count, score or wearable reading does not establish pelvic-floor strength, medical clearance or recovery. Speak with a qualified healthcare provider about your symptoms or individual care.

6. Apple Health (HealthKit)

With your permission, available HealthKit features may read workout and exercise activity, menstrual-cycle information, sleep, heart-rate variability, resting heart rate, weight, active energy and steps. Depending on the feature and permissions, Orrum may write completed workouts, estimated active energy, mindful minutes and bladder-incontinence entries to Apple Health. Apple shows the data types requested in its permission screen.

Health readings support local displays and practice suggestions. If you use KAI or AI plan features, a request can also include summaries such as sleep, heart-rate variability or cycle context. Where your app provides a context-sharing control, these summaries are included only when you enable that control. Health summaries sent with an AI request leave your device and are processed by the Orrum service and its AI provider; they should not be confused with a guarantee that all Health-derived information remains on-device. HealthKit information is not used for advertising.

You can manage permissions in your iPhone's Settings → Privacy & Security → Health → Orrum, or in Apple Health. An in-app preference controls Orrum's use of a data type; it does not itself revoke Apple's permission or delete existing Health records. Clearing local Orrum data does not automatically remove records already saved in Apple Health.

7. Data Storage, AI Processing & Security

  • On-device records: wellness records, preferences and locally stored AI conversation history reside in the app's local storage. Their protection also depends on your device security and Apple backup settings.
  • Optional iCloud backup or sync: supported versions can transfer app records through your Apple iCloud account. Capacity and transfer availability depend on Apple's service. An exported backup is a file under your control; where you save or share it determines who can access it.
  • Firebase and Google Cloud: account authentication, membership or trial verification, referrals, usage allowances, spending controls and operational service records are handled server-side. These services are not used solely for an AI question counter.
  • Native app diagnostics: Firebase Crashlytics processes crash and diagnostic reports. Where your app version provides a Crash Reporting setting, you can turn collection off; the stored preference is applied when the app next launches. Opting out does not erase reports already sent to the provider.
  • AI requests: KAI and AI plan requests go through Orrum's server to Google's Gemini API. They contain the question or requested goal and schedule, recent chat when relevant, and any included training or health context. Where available, context sharing can be switched off; text you type may still contain health information. Google's processing and retention depend on its applicable API terms and service configuration. We do not promise that sending a request creates a confidential clinician relationship or that clearing local chat erases provider-side records.
  • Website analytics and hosting: the website uses Vercel Web Analytics for aggregate page visits and statistics such as browser/device type, referring site and coarse location. Vercel describes this analytics product as using no third-party cookies and not storing an analytics visitor's IP address. Hosting and security systems can separately process technical request information, including IP addresses and error logs, to deliver and protect the website. This website analytics integration does not read the wellness records stored in your mobile app.
  • Free website tools: check-in selections, technique-reflection answers and support-email drafts are held in the page while you use it. The tools do not send those entries to Orrum or an AI service. Reflection answers and email drafts are not saved to browser storage; use their Reset or Clear draft controls to clear the page. You can explicitly choose to save a check-in plan or completed-guide identifiers in this browser. Use Forget saved plan or Clear reading history to remove those saved copies, or clear the website's data in browser settings. Browser saves do not sync to the mobile app. Downloaded files, calendar imports, clipboard copies and email drafts you open create separate copies under your control; calendar and email providers process information according to their own policies.

Network requests use encrypted connections. Access controls and provider security measures protect service records. We retain information for the purposes above, including operating accounts, verifying purchases, handling support, preventing abuse and meeting applicable obligations. Provider retention is governed by the relevant service terms; no single deletion control removes every copy across all systems.

8. Data Sharing

We do not sell your personal information. Information is shared with the providers needed for the features you use: Apple for purchases, Health and iCloud; Google/Firebase for accounts, cloud service records and app crash diagnostics; Google Gemini for AI requests; and Vercel for website delivery and aggregate analytics. An AI request may contain sensitive information you type or choose to include. Provider references are listed in Section 11.

9. Your Rights

You have rights to access, correct or request deletion of your personal data under applicable law. Use the data-management controls available in your app version, or contact privacy@orrum.dev. Depending on your location, additional rights may apply.

Right to erasure (GDPR Article 17): you may request deletion of your personal data by contacting us. Deletion rights may be subject to applicable legal requirements.

Local record deletion, iCloud backup removal, account deletion and subscription cancellation are separate actions. Other devices, exports, Apple Health records and provider-side service records may remain after clearing local data. Server usage and purchase-verification records are not replenished by reinstalling or clearing the app. Contact us for help with account or service-side deletion; manage a subscription through Apple's subscription settings.

10. Children's Privacy

Orrum does not address anyone under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal information, contact privacy@orrum.dev.

11. Third-Party Processors

These provider references explain their own processing and services:

12. California Privacy Rights (CCPA)

California residents may have additional rights under applicable law. We do not sell your personal information. Contact privacy@orrum.dev to exercise your rights.

13. Contact Us

For questions about this policy or how Orrum handles your information, contact privacy@orrum.dev.