Privacy Policy

The short version

Oris records meetings on your Mac, transcribes them on-device, and writes the result into your own notes. Your audio is never sent anywhere by Oris, your transcripts and notes are never sent to us, and the finished note lands only at the destination you picked.

The parts that do touch a server are small and separate from your content: if you sign up for product updates we store your email; the website uses privacy-friendly, cookie-free analytics; using this website's Search + Ask sends what you type to a separate search service; and when the app checks for updates it sends anonymous, non-reversible usage counts. Each of those is spelled out below.

What Oris does not collect or see

Your recordings, transcripts, and notes

Recording happens on your Mac. The audio file is written to a local recordings folder; when your notes are files, that folder sits with them by default, so a note can link to its own recording. Transcription runs on-device with WhisperKit, so there is no network call in the transcription path. The finished transcript and summary are written into the destination you chose: plain Markdown in your Obsidian vault or local folder, or a note in Apple Notes. None of it is uploaded to us, stored by us, proxied through us, or read by us. There is no Oris account, and there is no Oris server that holds your content, because your content is never sent to us.

Your destination is your own app and your own storage, and it keeps its own sync. If your vault sits in a folder that iCloud Drive or Dropbox syncs, or your Apple Notes folder belongs to an iCloud account, that service will sync the finished note the same way it syncs everything else you keep there: to your other devices, and to anyone you share that folder with. When your notes are files, the default recordings folder sits inside that same folder, so the audio syncs right along with them. That syncing runs under your account and your provider's policy; Oris is not part of it. If you want recordings out of that sync, keep your notes in a folder your sync service doesn't watch. Oris's audio retention setting also clears recordings past your chosen age out of that folder as you keep recording; what a sync service keeps after a deletion, such as a trash bin or version history, is governed by that service.

Summarization is bring-your-own-key

By default, summaries are generated by a model running locally on your Mac, so that path is fully on-device too.

If you choose to configure a cloud model instead (for example OpenAI, Anthropic, Azure, or a self-hosted Ollama endpoint), then your transcript text is sent to your chosen provider, under your API key and account. That is a direct relationship between you and that provider. Oris does not proxy that request, does not see the text, and does not store it. When you turn on a cloud provider, that provider's privacy policy governs what happens to the text you send it, so please read theirs.

What Oris does collect, and why

These are the server-side things. None of them include your recordings, transcripts, or notes.

Newsletter and product-update signups

If you sign up for updates on the website, we store your email address and a few fields that tell us how to serve and understand the signup:

• Your email address.
• Signup type (waitlist or newsletter).
• Whether you told us you're on an Apple silicon Mac.
• Whether you told us you're comfortable with a developer-style install.
• The time you signed up.
• Basic attribution: the marketing parameters on the link you arrived from (UTM values), the referring site, the landing page, and a coarse country, so we know which channel a signup came from.

We use this to email you product updates. You can unsubscribe at any time from the link in any email, and we'll stop. Email delivery and the contact list are handled by Resend (see subprocessors below).

Website analytics

The website uses GoatCounter, a privacy-friendly analytics tool. It sets no cookies, collects no personal data, and is hosted in the EU. It records aggregate page views only, enough to know which pages people read, nothing that identifies you.

Anonymous install and update telemetry

When the app checks for updates, it sends a small, anonymous measurement so we can count active installs and know which operating systems and hardware to support. It contains:

• A non-reversible, salted hash that acts as an install identifier. It can't be tied back to you or reversed into anything personal; it only lets us avoid counting the same install twice.
• The app version.
• Your macOS version.
• Your Mac model, CPU architecture, and core count.
• How much RAM the Mac has.
• Your language and country.

There is no account, no name, and none of your content in this. It exists to answer one question: how many people are running Oris, and on what?

Download counts

When you download the app, our host records anonymous request metadata. It lets us count downloads and understand which channel they came from:

• The date (the calendar day, never a finer timestamp).
• The request method, so we can filter out automated probes.
• A coarse country.
• The campaign labels on the link you arrived from (UTM values) and the site that referred you, by name only — never the address of the page you came from. These are short labels we write into our own links, such as blog or engine-rewrite. We only keep values matching that simple format — short, plain lowercase labels — and discard anything else, so a crafted link can't smuggle an email address, a web address, or free text into our records. It is a bound on what can be stored, not a guarantee that a determined person couldn't put some short label of their own choosing against their own visit.
• A salted hash that changes every day, used only so that downloading twice isn't counted as two people. It isn't stored with your address and can't follow you from one day to the next. We keep the secret that produces it private, because that secret is what stands between the hash and the address behind it.

We don't store your IP address or your browser's user agent, and the website sets no cookies to do any of this.

Who else is involved (subprocessors)

A few third parties help run the parts above. We keep the list short and name them plainly:

• Resend — sends our emails and holds the newsletter contact list.
• Cloudflare — hosts the website, stores the app downloads, serves the update feed, and provides the supporting analytics and delivery infrastructure.
• GoatCounter — provides the cookie-free website analytics.
• Your chosen LLM provider — only if you opt into cloud summarization. This is a direct relationship between you and that provider under your own key; Oris isn't in the middle.
• askdocs — powers the ⌘K Search + Ask command bar on this website, for finding and asking about the Oris docs. What you type there (search terms and questions) is sent to the askdocs service, which we also run, to return results and generate answers. This is a website-only feature and has nothing to do with your recordings, transcripts, or notes.

How long we keep things

We keep your email on the newsletter list until you unsubscribe, at which point you're removed. The install, update, and download telemetry is anonymous and aggregate; it isn't tied to you and isn't something we can look up by person.

Your rights

You can ask what we hold about you (in practice, your newsletter email), and you can ask us to delete it. Email [email protected] and we'll take care of it. Your recordings and notes live on your own Mac or in the notes app and account you chose, so deleting them happens there, in your own apps and accounts; Oris never had a copy, so there is nothing on our side to delete.

Children

Oris isn't directed at children, and it isn't intended for use by anyone under 13 (or the minimum age required in your country, such as 16 in parts of the EU). We don't knowingly collect data from children.

Changes to this policy

As Oris grows, this policy may change. When it does, we'll update the date at the top of this page. Significant changes will be reflected here rather than buried.

Contact

Questions about privacy, or a request about your data? Email [email protected].