Privacy Policy

1. Introduction

Orleia is built on a fundamental belief: your data belongs to you. This Privacy Policy explains how Orleia handles your information. Orleia is designed as a local-first, non-profit productivity tool. We do not operate servers, maintain databases, or collect personal data.

2. Data Storage & Location

Everything is local. All data you create within Orleia is stored exclusively in your browser's IndexedDB and localStorage. This means:

• Your data never leaves your device
• No servers receive or store your information
• No accounts or cloud storage are involved
• Clearing your browser data will erase your Orleia workspace
• Exporting a backup is your responsibility (we provide the tools)

Optional "about you" profile. During setup, Orleia may ask optional questions about you (name, pronouns, age range, time zone, work situation, interests, schedule, preferences, and goals). Every field can be skipped. This profile is stored only on your device in the same local storage as the rest of your workspace, is never uploaded or shared, and is only ever sent to a third party if you explicitly include it in a message to Noor.

3. Optional Password Protection

Orleia offers an optional local password feature. This is entirely optional - you can use the full app without setting one. If you choose to set a password:

• The password is stored only on your device in localStorage
• It is never sent to any server or third party
• It cannot be recovered if lost - only your data can be preserved by resetting it
• It acts as a simple lock, not an account system
• You can reset it at any time from the lock screen

4. Noor AI & NVIDIA NIM

Orleia integrates with NVIDIA’s NIM API to power Noor, its built-in AI assistant. Noor offers three models - Ethos 4.7 (deep reasoning), Logos 4.5 (balanced everyday intelligence), and Verse 4 (fast, lightweight responses). When you use Noor:

• Your prompts and relevant context are sent to NVIDIA’s NIM API for processing
• If you filled in the optional "about you" profile during setup, it is included in that context so Noor can personalize its help (for example, using your name, time zone, or goals). It is never shared with anyone else, and you can leave it empty
• This data is transmitted to NVIDIA for processing and is handled under NVIDIA’s API terms; Orleia does not store it, but we cannot control NVIDIA’s internal logging
• You can bring your own API key for full control
• AI features are optional - all core tools work without them

5. Voice Input & Speech Recognition

Voice dictation in Noor lets you speak to your assistant. When you use the microphone, your speech is transcribed to text by your own browser's built-in speech recognition engine. Depending on your browser, that engine may process audio on your device or pass it to the browser vendor's speech service (for example Chrome uses Google's speech service) under that vendor's terms. Orleia never receives your audio.

The transcribed text is handled exactly like text you type - it stays on your device and is only sent to NVIDIA's NIM API when you choose to send it as a message to Noor (see section 4). You can revoke microphone access at any time through your browser's site permissions.

6. Analytics & Tracking

Orleia uses no cookies and no advertising or cross-site tracking of any kind. The site is hosted on Vercel, which collects basic, anonymized request metrics (page views, approximate region, browser family) through Vercel Analytics. This data is aggregate and not linked to your identity or your workspace content - we cannot see your habits, tasks, notes, journal, or any data you create inside Orleia. There are no embedded third-party ad scripts, no tracking pixels, and no fingerprinting.

7. Third-Party Services

Orleia itself has no third-party dependencies that process your personal data. The only external service integrations are:

• NVIDIA NIM API - Powers Noor's AI features (optional), including chat (Nemotron models), image generation (FLUX.1-dev), and image understanding (Llama 3.2 Vision). See section 4 for details.
• Web search engines - When you ask Noor to search the web, only your search query is sent to keyless search providers (DuckDuckGo, Mojeek, Wikipedia, Bing RSS, Google News RSS) to fetch results. No workspace data is included.
• Vercel - Hosts the application and provides aggregate, anonymized visit metrics. See section 6.
• Supabase - Used only for optional sign-in (Google, Apple, GitHub, Microsoft) and only to identify your session. Your workspace data is not stored in Supabase and sync between devices happens peer-to-peer directly between your devices.
• Google Fonts - Loaded from the Google Fonts CDN for typography.
• Google STUN - When you use device-to-device sync, public Google STUN servers help your devices find each other; only connection metadata passes through, never your data.

8. Data Export & Deletion

Since we don't store your data, there's nothing for us to delete. You can export your entire workspace as JSON from the Settings page, or clear your browser data to remove everything. Individual notes can be exported as .docx files.

9. Children's Privacy

Orleia is intended for users aged 13 and older. During setup, Orleia asks you to confirm you are 13 or older, and you may not use Orleia if you are under 13.

We do not knowingly collect any personal information from children or minors. Because all data is stored on your own device and never sent to us, Orleia has no mechanism to receive or process children's data.

10. Contact

For privacy-related questions, email us at orleia.workspace@gmail.com (opens Gmail), reach out via the Buy Me a Coffee page, or open an issue on our GitHub repository.