Effective Date: 01.01.2026
Last Updated: 01.01.2026
This Privacy Policy explains how ORMI LABS LTD, a private limited company registered in England and Wales under company number 17243079, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom (“Ormi,” “we,” “us,” or the “Controller”), collects, uses, stores, shares, and protects personal data in connection with the Ormi mobile application, the ormi.me website, and related services.
Contact details:
This Privacy Policy applies to accounts created in the Ormi mobile application. Users are not required to create an account on the ormi.me website.
Ormi enables users to record and manage information relating to menstrual cycles, pregnancy, well-being, children, vaccinations, reminders, and related events.
Ormi may also provide a user community and artificial intelligence features.
Ormi is not a healthcare provider or medical device and is not a substitute for professional medical advice. Calculations, predictions, educational materials, and AI-generated responses are provided for informational purposes only.
The data we process depends on the features a user chooses to use.
We may process:
We do not receive or storethe password used for a user's Apple or Google account.
Users may voluntarily provide:
This information may constitute health data or another sensitive or special category of personal data.
We process such information to provide the requested Ormi features and, where required by applicable law, based on the user's explicit consent.
We do not sell health data or use it to determine insurance eligibility, employment eligibility, creditworthiness, or other discriminatory outcomes.
An adult user may voluntarily add:
The Ormi account belongs to the adult user. By entering information about a child, the user represents that they are the child's parent, legal guardian, or otherwise have a lawful basis to provide and manage that information.
Children must not independently create an Ormi account or use the community or AI features unless this is permitted by applicable law and authorized and supervised by a parent or legal guardian.
When a user voluntarily uses an AI feature, we may process:
Selected information may be transmitted to OpenAI or another AI provider identified to the user before the transfer takes place.
Where required, personal data is transmitted to an external AI provider only after the user has received a clear disclosure and provided explicit permission.
Users should not submit passwords, payment information, government identification numbers, or personal data relating to another person unless they have a lawful basis to do so.
When a user participates in the Ormi community, we may process:
Content published in the community may be visible to other users.
We may process:
Third-party diagnostics, analytics, or advertising SDKs may also process device identifiers and application interaction data when those SDKs are active in the released version.
When a user contacts us, we may process:
We process personal data to:
We do not make decisions that produce legal or similarly significant effects for a user solely through automated processing.
Depending on the user's country and the relevant activity, we may rely on:
A user may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Ormi AI features may use OpenAI or another AI provider clearly identified before any personal data is transmitted.
Before first use, the user must be informed about:
If the user declines, personal data must not be sent to the AI provider.
Withdrawing consent stops future optional transmissions. It may not require deletion of data that has already been irreversibly anonymized or that must be temporarily retained for legitimate legal or security purposes.
AI-generated content may be inaccurate, incomplete, outdated, or inappropriate for the user's circumstances. It must not be treated as a diagnosis, treatment plan, emergency service, or sole basis for a medical decision.
We disclose data only where necessary to operate a requested feature, protect the service, or comply with law.
Ormi may use:
Service providers may process data only for the contracted purposes and subject to applicable contractual, confidentiality, and security obligations.
We do not sell users' personal data.
Some service providers may process personal data outside the user's country, including in [ACTUAL COUNTRIES OR REGIONS].
Where required, we use recognized transfer safeguards, such as:
The final published version must accurately identify the regions in which the main database, uploaded files, AI requests, and backups are processed.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Our retention periods are:
After the applicable period expires, data is deleted or irreversibly anonymized.
Certain information may be retained for longer where required by law, necessary to resolve a dispute, prevent fraud or repeated abuse, or protect the security of Ormi and its users.
Users may:
Deleting an account results in deletion or irreversible anonymization of associated personal data, except for limited information that must be temporarily retained for legal, security, fraud-prevention, or dispute-resolution purposes.
We may verify that the requester controls the relevant account. We will never ask for the user's password.
Verified deletion requests are processed within [ACTUAL PERIOD, FOR EXAMPLE 30 DAYS].
Deleted data may remain in protected backups for up to [BACKUP RETENTION PERIOD] before being overwritten or securely removed.
Deleting the Ormi application from a device does not automatically deletethe user's account.
Depending on applicable law, a user may have the right to:
Requests may be sent to support@ormi.me.
We may request reasonable verification of identity or account ownership. We will not request more information than is reasonably necessary to verify and process the request.
We use reasonable organizational and technical safeguards designed to protect personal data, including:
No storage or transmission system can guarantee absolute security.
If a personal-data incident occurs, we will investigate and provide notifications where required by applicable law.
Ormi is intended for users who are at least 16 years old.
We do not knowingly permit children under 16 to independently create accounts.
If a parent or legal guardian believes that a child has independently provided personal data to Ormi, they may contact support@ormi.me.
Information about a child entered by an adult user for family-record purposes is treated as personal data relating to another individual. The adult user represents that they have lawful authority to provide and manage that information.
The minimum age and parental-consent process may differ by country. We may restrict access where required by applicable law.
Community content may be reviewed using automated tools and/or human moderation.
Users may report content and block other users.
To protect users and enforce our rules, we may:
The Ormi Community Guidelines form part of the Terms of Use.
Users can disable push notifications through their device or application settings.
Where analytics or advertising technologies are used, we provide legally required disclosures and consent controls.
If Google Mobile Ads or another advertising SDK is active in the released application, its actual collection and use of data must be disclosed in this Privacy Policy, Google Play Data Safety, Apple App Privacy, and any required consent interface.
We may update this Privacy Policy to reflect changes to Ormi, applicable law, or our data-processing practices.
For material changes, we may notify users through the application, by email, or through another prominent notice.
Where required, we will request new consent before applying a materially different processing activity.
The current effective date and last-updated date appear at the beginning of this document.
Data Controller:
ORMI LABS LTD
128 City Road, London, EC1V 2NX, United Kingdom
Company number: 17243079
Email: support@ormi.me
Users may also have the right to submit a complaint to the competent data-protection authority in their country.
To provide AI features, Ormi will transmit selected data to [OPENAI OR ACTUAL AI PROVIDER].
The transmitted data may include:
The data may be processed in [COUNTRIES OR REGIONS].
AI-generated responses may be inaccurate and do not replace a doctor or another qualified professional.
Using AI is optional. If you select “Not Now,” Ormi's essential non-AI features will remain available.
You may withdraw your consent through the privacy settings. Withdrawal prevents future optional transmissions to the AI provider.
Buttons:
Links:
Ormi is not a medical device and does not provide medical diagnosis or treatment.
Cycle, ovulation, fertility, and pregnancy predictions are estimates. They must not be used as the sole method of contraception, confirmation of pregnancy, diagnosis, or basis for changing treatment.
AI-generated responses may contain errors. Consult a qualified healthcare professional before making a medical decision.
In the event of severe pain, heavy bleeding, difficulty breathing, loss of consciousness, danger to life, or another emergency, immediately contact your local emergency services.
