Privacy Policy
Last updated: May 13, 2026
Who We Are
Orison is operated by Graybridge Labs Ltd. We build tools for students who learn differently. This policy explains what data we collect, how we use it, who helps us process it, and how we protect it.
What We Collect
Account information. When you sign in with Google, we receive your name, email address, and profile picture. We do not receive or store your Google password. We also store profile details you provide, such as Spanish level, grade, age band, school name if supplied, goals, test dates, reading-font preference, and parent, guardian, or payer email if supplied.
Billing information. If paid plans are enabled, checkout and billing address details are handled by our payment provider. Orison does not store full card details or home billing addresses.
Practice data. Text you type, passages you submit, class material you paste or upload, uploaded images of handwritten work, microphone audio you choose to dictate, drill responses, corrections, AP-style scores, generated drills, and progress metrics.
Personalization and sharing settings. Personalized facts are stored only after you turn personalization on; new facts wait for review before reuse. If you create a progress share link for a parent, guardian, tutor, or payer, we store link metadata such as creation, expiry, revocation, and last-used time. Progress share links show limited progress information, not prompts, answers, approved personal facts, email, or account settings.
Usage data. Basic operational data such as sign-in events, request timing, and error logs, collected to keep the product reliable. We do not use third-party advertising trackers.
How We Use Your Data
- To provide the Service and, if enabled, personalize drills with facts you have approved
- To generate AI-powered corrections and drill content
- To track your progress over time (activity, accuracy, vocabulary health)
- To provide account export, account deletion, and optional parent summary links
- To keep the Service secure, prevent abuse, and manage provider usage limits
- To communicate with you about your account or changes to the Service
AI Processing
Your written responses, submitted passages, class material, uploaded images, and related practice context may be sent to AI language models (currently Anthropic's Claude) for correction, scoring, handwriting review, and drill generation. These inputs are processed to provide the Service and are not used to train third-party AI models. We select AI providers whose data policies prohibit using API inputs for model training.
If you use dictation, your microphone audio is streamed to Deepgram to turn speech into text. Dictation is optional, and the app asks before starting it the first time.
Orison uses AI to support practice and feedback, but it does not make decisions with legal or similarly significant effects. Schools and teachers remain responsible for any academic decisions.
Data Storage & Security
Your data is stored in a secure database hosted on Turso (libSQL). The app is hosted on Vercel. Authentication is handled by Auth.js with Google OAuth. All connections use HTTPS. We use access controls, same-origin protections, request limits, and logging safeguards to protect the Service. We do not sell, rent, or share your personal data with third parties for marketing purposes.
Service Providers & International Processing
We use trusted service providers to run Orison, including Google for sign-in, Vercel for hosting, Turso for database storage, Anthropic for AI feedback, Deepgram for optional dictation, and our checkout provider if you purchase a paid plan. These providers may process data in the UK, the United States, or other locations where they operate. Where required, we rely on contractual safeguards and provider data-processing terms.
Children's Privacy
Orison is designed for high-school students, many of whom are under 18. We collect only the data necessary to provide the Service, keep privacy settings high by default, and avoid nudges that ask students for unnecessary personal information. Orison is for high-school students, freshman year and above, and is not directed to children under 13. We ask students to confirm whether they are 13-15, 16-17, or 18 or older, and we do not knowingly collect data from children under 13. If you are a parent and believe your child under 13 has created an account, please contact us and we will delete the account.
Your Rights
Access. You can view all your practice data and progress within the app.
Deletion. You can delete your account data from Settings. This removes profile, facts, passages, drills, mistakes, sessions, and usage rows linked to your account.
Portability. You can export your data from Settings in a machine-readable JSON format.
Correction, objection, and consent withdrawal. You can ask us to correct inaccurate account data, object to certain processing, or withdraw consent for optional features such as dictation and personalization.
Complaints. If you are in the UK, you can complain to the Information Commissioner's Office. We would appreciate the chance to address your concern first at hello@getorison.co.
Retention
We keep account and practice data while the account is active so Orison can show progress, repair recurring mistakes, and generate useful practice. You can delete your account data from Settings. We may keep limited operational records for security, abuse prevention, legal compliance, and service reliability.
Cookies
We use a single authentication cookie to keep you signed in. We do not use advertising cookies or third-party tracking cookies.
Changes
We may update this policy. Material changes will be communicated via the email associated with your account. Continued use after changes constitutes acceptance.
Contact
Privacy questions? Reach us at hello@getorison.co.