Privacy Policy

Last updated: April 2026

Introduction

Orris ("we," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we handle information across two products: the Orris iOS application and the Orris New Tab Chrome extension. The two products operate independently and do not share data.

The Chrome extension is covered in the next section. All remaining sections (Information We Collect, Data Storage and Security, Third-Party Services, etc.) apply to the iOS application unless noted otherwise.

Chrome Extension: Orris New Tab

The Orris New Tab Chrome extension runs entirely in your browser. It makes no network requests, uses no third-party services, and collects no information about you.

What the extension accesses

The extension requests three Chrome permissions, each used for a specific purpose:

  • storage — saves your preferences locally via chrome.storage.local. Preferences stored:
    • Default breathing pattern (Auto, or one of eight named presets)
    • Time format (12-hour or 24-hour)
    • Cycles per session (4, 6, 8, or 12)
    • Show quote (on or off)
    • Your name (optional, for the greeting)
    • Tile mode selection (Top Sites / Quick Links / None)
    • Quick Links you add (URLs and labels you explicitly save)
  • topSites — reads Chrome's most-visited sites list (the browser's own data, only URLs and titles) to render the default tile row. We never see which specific pages you visit, how often, or for how long.
  • favicon — renders site favicons from Chrome's local cache via the internal _favicon/ URL. No external requests.

None of this data leaves your browser. It is not accessible to us or to any third party.

What the extension does not access

  • No personal information, identity, name, or email
  • No browsing history, tabs, URLs, or web page content
  • No location, camera, microphone, or device sensors
  • No analytics, telemetry, or crash reports
  • No cookies or fingerprinting

What the extension does not do

  • Makes no network requests to any server
  • Bundles no third-party SDKs or tracking libraries
  • Shows no advertising
  • Has no account, login, or sign-up system
  • Does not sync with the Orris iOS application

Data retention

If you uninstall the extension, Chrome automatically deletes all preferences stored under the chrome.storage.local namespace. No residual data persists on your device or with us.

Information We Collect

Data You Provide

  • Account information (if applicable)
  • Breathing session preferences and custom presets
  • Feedback and communications you send to us

Data Collected Automatically

  • Breathing session data (duration, frequency, patterns)
  • App usage statistics
  • Device information (device type, iOS version)
  • Crash reports and performance data

Health Data

If you choose to enable HealthKit integration, the App may read and write mindfulness minutes to Apple Health. This data remains on your device and under your control through Apple Health settings.

How We Use Your Information

We use collected information to:

  • Provide and improve the App's functionality
  • Track your breathing practice progress
  • Customize your experience with saved presets
  • Analyze usage patterns to improve features
  • Respond to your support requests
  • Send important updates about the App

Data Storage and Security

Your data is stored locally on your device using Core Data and, if enabled, synced across your devices using iCloud. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share anonymized, aggregated data for analytical purposes that cannot be used to identify you personally.

We may disclose your information only in the following circumstances:

  • With your explicit consent
  • To comply with legal obligations
  • To protect our rights, privacy, safety, or property

Third-Party Services

The App may use the following third-party services:

  • Apple HealthKit: For tracking mindfulness minutes (optional)
  • StoreKit: For processing subscriptions through Apple
  • Analytics (if applicable): Anonymized usage data for app improvement

These services have their own privacy policies, and we encourage you to review them.

Your Rights and Choices

You have the right to:

  • Access your personal data stored in the App
  • Export your breathing session history
  • Delete your data by uninstalling the App
  • Opt-out of HealthKit integration at any time
  • Disable analytics collection in iOS Settings

Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Data Retention

Your breathing session data is retained on your device for as long as you use the App. If you delete the App, all locally stored data will be removed from your device. iCloud data may persist according to your iCloud settings.

International Users

All data is processed and stored locally on your device or in your iCloud account. No data is transferred internationally by the App itself.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Last updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us through the App Store support page or at [email protected].

California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). Please contact us to exercise these rights.

European Privacy Rights

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Please contact us to exercise these rights.