Privacy Policy

Orlea is a shared organiser for families. Using it means telling us a lot about your household - where your children are on a Tuesday afternoon, who is collecting them, what you're eating this week. We treat that as information you have trusted us with, not as an asset.

This policy applies to the Orlea website at orlea.co and the app at app.orlea.co. It is written to meet the New Zealand Privacy Act 2020 and, for families in Australia, the Australian Privacy Principles under the Privacy Act 1988 (Cth).

Orlea is operated by Orlea Limited (NZ company number 9452889), of 298 Cashel Street, Christchurch Central, Christchurch 8011, New Zealand. You can reach us any time at hello@orlea.co.

The short version

• We collect what the app needs to work, plus what's needed to bill you.
• We don't sell your information.
• Each family's data is kept in its own workspace and can't be reached by another family.
• When you assign an event to someone, we email them a calendar invite on your behalf - so we hold email addresses for people who may never use Orlea themselves.
• Some of what you type is sent to an AI provider to be made sense of - seeAI processing for exactly what, and what never is.
• You can ask for a copy of your information, or ask us to correct or delete it.

What we collect

Information you give us

Account details

Your name, email address and a securely hashed password. We never store your password in a form we can read.

Family content

Everything you put into Orlea: the names you give your children, events and their times and places, who is covering each one, packing lists, meals, recipes and shopping lists. Some of this is inherently sensitive - a dentist appointment says something about health, and a recurring drop-off says where a child reliably is at a given time.

People you invite

The email addresses of other caregivers you invite, and of anyone you assign an event to.

Correspondence

Anything you send us by email when you ask for help.

Information we collect automatically

Technical and usage data

IP address, browser and device type, pages visited, and timestamps. We use this to keep the service running, investigate faults and detect abuse.

Cookies and local storage

In the app, we use what's needed to keep you signed in and to remember your preferences. There are no advertising cookies anywhere.

The marketing site at orlea.co also uses two analytics tools, which the app itself does not: Google Analytics, which counts page views, and Microsoft Clarity, which records how people move through the page - mouse movement, clicks and scrolling - so we can see where the site is confusing. Both set cookies. Neither runs inside the app, so neither ever sees your family's information.

You can stop both by blocking third-party cookies in your browser, or by using Google's opt-out add-on for Google Analytics.

What we don't collect

Orlea does not require a Google account and does not connect to your existing calendar account. We never hold anyone's login for another service, and we never write to anyone else's calendar. We don't collect payment card numbers - those go directly to our payment provider.

Children's information

Orlea holds information about children, but children are not our users. Accounts are held by adult caregivers, and only an adult can create a family, invite members or enter information. We don't market to children and we don't build profiles of them.

The information about a child is entered by the adults responsible for them, and those adults decide who else can see it. If you believe a child's information is in Orlea without the authority of a person responsible for them, email us and we will remove it.

We'd encourage you to use as little identifying detail as the app needs - first names are usually enough.

Calendar invites and emails we send for you

This is the part of Orlea most worth understanding. When you assign an event to someone, Orlea emails them a real calendar invite, so it appears in their own calendar without them installing anything. That means:

• We send email to people who may not be Orlea users, and we store their email address in order to do it, and to send updates and cancellations to the same people who got the original.
• The invite contains the event details you entered - including which child it concerns. Only assign events to people you're willing to share that with.
• By inviting someone or assigning them an event, you're confirming you have a reasonable basis to give us their email address for this purpose.

Anyone who receives an invite can ask us to stop sending them, by emailing hello@orlea.co.

Calendar subscription links

You can subscribe to a feed of your family's events, or one per child, in any app that reads a calendar URL. These links are long and unguessable, but they are not password-protected:anyone who has the link can read that calendar. If a link is shared more widely than you intended, rotate it in settings and the old one stops working immediately.

AI processing

Several parts of Orlea use AI to make sense of text you give us - turning a messy forwarded email into a draft event, working out which aisle a shopping item belongs in. Where that happens, the provider is Anthropic (the company behind Claude), and there are no others.

Below is every place it happens, and what gets sent. It is always text you have handed to that specific feature - never your whole account. We don't send your calendar, your children's names, your packing lists, or your recipes.

Your shopping list

Orlea files each item into the right aisle for the shop you're in. It works that out itself wherever it can. When it can't - an item it has never seen, or an aisle you've named something only you would recognise - the item name, or the aisle name, is sent to be matched to a kind of thing like "produce" or "frozen".

Only those short names go: not your quantities, not who added the line, not the rest of the list. A guess is marked on the row so you can see it was one, and correcting it teaches your list - after which Orlea stops asking about that item.

Activities

When you paste a description of an activity, or a link to one, the text of it - and the page it points to, and its main picture - is sent to be turned into a draft activity with a date, a price and an age range. You review the draft before anything is saved.

Your Orlea email address

If you use the email address we give your family, the content of messages sent to it - the newsletter, the party invitation - is sent to be turned into a draft event or a shopping item. Attachments are not sent.

The "tell us what would help your family" box on our website

The orlea.co home page has a box where you can describe what you'd like help with, and we suggest the part of Orlea built for it. What you type there is sent to Anthropic to be matched against our feature list.

Please don't include names or anything you'd rather not share - a sentence about the problem is all it needs. It's on a public web page and you don't need an account to use it.

We don't store what you type. It's used to produce the suggestion and then discarded. We record only which feature was suggested, so we can see which parts of Orlea people are looking for - that record contains no part of your description and nothing that identifies you.

Anthropic only ever chooses from a fixed list of our features; it doesn't write the response you see, and it has no access to any Orlea account or family workspace.

What is true of all of it

Anthropic never sees more than the text for the job in hand. It has no access to your account, and it cannot read anything you didn't hand to that feature. In each case it answers a narrow question - which aisle, which kind of thing, what date - and Orlea decides what to do with the answer.

Anthropic does not use what you submit to train its models. It keeps the text and its response for up to 30 days so it can check for misuse, and then deletes them - so even where Orlea itself doesn't store something, Anthropic holds it briefly. Content that Anthropic flags as breaking its usage policy can be kept for longer. We ask Anthropic to run this processing on United States infrastructure, so it happens in the same country as the rest of your information.

Recipes are the exception worth naming: recipe text is not sent anywhere. Orlea reads it on our own servers, which is why a line it can't make sense of is still saved exactly as you typed it.

How we use your information

• To provide the service - showing your week, sending invites, building shopping lists.
• To sync changes to everyone in your family in real time.
• To take payment and manage your subscription.
• To answer you when you contact us.
• To keep the service secure, diagnose faults and prevent abuse.
• To meet our legal obligations.

We do not sell your information, share it with data brokers, or use the contents of your family's workspace to advertise to you.

Who we share it with

We use a small number of providers to run Orlea. They may handle your information only to perform their service for us.

Stripe - payments

Handles checkout and card details directly. We receive confirmation of your subscription status, not your card number. Stripe also uses payment information for its own fraud prevention and legal compliance, deciding that use itself rather than acting on our instructions - so for that part Stripe is responsible to you directly, and their privacy policy governs it.

Cloudflare - website hosting and network

Serves orlea.co and protects it from attack.

Convex - application backend and database

Stores the family workspaces that make up the app.

Cloudflare Email - transactional email

Delivers calendar invites, invitations and account emails.

Google - website analytics

Counts page views on orlea.co. Not used in the app.

Microsoft - website session analytics

Records how visitors move through orlea.co, so we can see which parts confuse people. Not used in the app.

Anthropic - AI processing

Works out which aisle a shopping item belongs in, turns pasted activity details and messages sent to your Orlea email address into drafts, and matches descriptions typed into the box on our home page to a feature. SeeAI processing for exactly what is sent in each case. Recipe text is not sent to them.

We may also disclose information where the law requires it, or where it's necessary to protect someone's safety or our legal rights. If Orlea is ever sold or merged, your information may transfer with the business - we'd tell you before that happened.

Where your information is held

Your information is stored and processed outside New Zealand and Australia. The app's database and backend are hosted in the United States (US East, Northern Virginia), and our other providers operate internationally: Cloudflare serves the site and delivers our email from a global network, Stripe processes payments, and Anthropic processes the text described under AI processing above, also in the United States. We only use providers that are required to protect your information to a standard comparable to the law here.

Security

• Every family gets its own workspace, and one family's data cannot reach another's.
• Traffic between your device and Orlea is encrypted in transit.
• Passwords are stored hashed, never in readable form.
• Invitations are single-use, expire, and can be revoked. Subscription links can be rotated at any time.
• Roles limit what people can do: view-and-tick members can see the week and tick items off, and change nothing else.

No system is perfectly secure. If a breach ever put you at risk of serious harm, we'll notify you and the Office of the Privacy Commissioner, as the Privacy Act requires - and the OAIC where the Australian notifiable data breaches scheme applies.

How long we keep it

We keep your family's information while your account is open. If you delete your account, we delete the family's content within 30 days, except where we must keep records longer - billing records, for instance, which tax law requires us to retain for seven years. Backups are overwritten within 14 days.

Your rights

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that's wrong;
• delete your account and its contents;
• stop sending you calendar invites or other email.

Email hello@orlea.co and we'll respond within 20 working days, as the Privacy Act requires. There's no charge.

A note on shared workspaces: information in a family is genuinely shared. If you ask us to delete an event you created, other members of your family will see it disappear. If you leave a family, the content you added stays with the family unless the primary caregiver removes it.

Complaints

Please raise it with us first - hello@orlea.co. If you're not satisfied, you can complain to the Office of the Privacy Commissioner in New Zealand (privacy.org.nz), or, in Australia, to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes to this policy

If we change this policy in a way that materially affects you, we'll email you or tell you in the app before it takes effect. The date at the top shows when it was last updated.