Official Privacy Policy

At ORUS, we believe privacy is a fundamental human right. Traditional AI applications require transmitting private thoughts, intimate photos, confidential legal contracts, and voice audio to remote cloud server farms where they may be logged, analyzed, or harvested for model training.

ORUS is fundamentally different. All core artificial intelligence inference, neural text-to-speech, speech-to-text dictation, visual OCR, and image synthesis run strictly on your device hardware without requiring an active internet connection or mandatory account.

Because of our air-gapped architectural design:

• Zero Conversation Data: We cannot read, inspect, store, or transmit your prompts, chats, code snippets, or AI responses.
• Zero Document & File Ingestion: PDFs, text files, and images loaded into chat or knowledge notebooks are processed in local volatile RAM and are never uploaded to any ORUS server.
• Zero Voice Audio Tracking: Real-time voice conversations and dictation are computed on-device. Audio streams never leave your phone.
• Zero Mandatory Account Creation: You can download and use ORUS immediately without providing an email address, phone number, or social login.
• Zero Third-Party Advertising Trackers: ORUS contains no behavioral tracking pixels, third-party analytics SDKs, or data broker integrations.

All your local artifacts remain strictly isolated inside Android's sandboxed application storage:

• Chat History & Messages: Stored in an internal encrypted SQLite / Room database.
• Synthesized Images & 4x HD Upscales: Stored locally in your app storage directory unless explicitly exported to your photo gallery.
• Downloaded Model Weights: GGUF and diffusion weights are stored locally and can be deleted by you at any time in the Model Hub.
• Application Preferences: Custom themes, accent colors, voice configurations, and system prompts are persisted exclusively on your device.

For subscribers who voluntarily opt into multi-device backup and synchronization:

• Super-Optional: If you do not want cloud sync, you never have to sign in or connect anything. The app will continue running 100% locally and offline.
• Chat history and notebook data are encrypted directly on your device using client-side cryptographic keys before being synchronized via Supabase.
• Server databases hold only unreadable encrypted ciphertext. ORUS engineers do not possess the keys to decrypt your synced data.
• You can disable Cloud Sync or purge remote backups at any time directly in Settings > Data Controls.

If you voluntarily choose to use the optional Cloud Models interface by providing your own API key (e.g., OpenAI, Anthropic Claude, Google Gemini, Groq, OpenRouter, or local Ollama):

• Communication occurs strictly and directly between your device and the provider's HTTPS API endpoint.
• Your API keys are encrypted on-device using the hardware-backed Android Keystore.
• No ORUS proxy or server ever intercepts, logs, or stores your API keys or cloud queries.
• Your interaction with external cloud models is governed by the respective provider's privacy policy.

Payments and subscription billing for Pro ($4/mo or $32/yr in USD) and Ultra ($8/mo or $64/yr in USD) tiers are managed by our Merchant of Record, Lemon Squeezy:

• Payment details (credit card numbers, billing addresses) are processed directly by Lemon Squeezy in compliance with PCI-DSS standards.
• ORUS does not receive or store your sensitive payment card details.
• We receive only non-sensitive subscription status tokens to verify your entitlement level (Pro or Ultra).

ORUS requests only the minimum Android permissions strictly necessary to deliver user-requested functionality:

• Microphone: Required solely for offline voice mode and speech dictation. Audio is processed locally in RAM and never recorded or uploaded.
• Storage / Photos: Required to allow you to attach files or photos for local analysis, and to save generated artwork to your gallery upon request.
• Camera (Optional): Used only if you capture a live photo for direct visual AI OCR analysis.

You hold complete sovereignty over your data:

• You can export your complete chat history, notebooks, and prompt library to standard JSON or Markdown files at any moment.
• You can perform a one-tap zero-trace wipe directly in Settings > Data Controls to permanently erase all local databases, cached models, and generated files.
• Uninstalling the application permanently deletes all local data from your Android filesystem.

If you have questions or inquiries regarding this Privacy Policy or our security architecture, please contact: