Privacy Policy — Ora Within

Last Updated: September 5, 2026

This Privacy Policy explains our privacy practices and the choices and rights that may be available to you when you use the Ora Within mobile application (the "App") and the website located at orawithin.com (the "Site"), together the "Services."

Ora Within is currently operated by Kaila Lipford, an individual doing business as "Ora Within" ("DBA"). Kaila Lipford intends to form ORA WITHIN LLC as the operating business entity; this Privacy Policy will be updated to reflect ORA WITHIN LLC as the responsible party once that entity is officially registered with the applicable state authority. Until that time, Kaila Lipford, individually, is the party responsible for the Services and for compliance with this Privacy Policy.

1. Who This Policy Covers

The Services are intended for use by individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it promptly. If you believe a person under 18 has provided us with information, please contact us at hello@orawithin.com.

The Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate.

2. Information We Collect

2.1 Information You Provide Directly

Account information: your email address, and password (if you sign in with email/password), or basic profile information from Apple or Google if you use "Sign in with Apple" or "Sign in with Google."
Onboarding and wellness information: responses you provide during onboarding and ongoing use of the App related to your wellness goals, habits, and preferences, used to personalize your daily healing plans (food, movement, spirit, and mind content).
Daily check-ins: your responses to "how are you feeling today" prompts and related reflections.
Food logs: meals, macros, and grocery list information you choose to enter.
Journal and reflection entries: text you enter into journaling or reflection features.
Progress data: which daily healing cards and protocols you complete, your streak and calendar history.
Communications: information you provide when you contact us for support.
Waitlist and contact form submissions (Site): if you join our waitlist or submit a contact form on orawithin.com, we collect the information you provide (such as your email address).

2.2 Our Commitment on Wellness Information

We treat the information described above — your wellness goals, habits, check-ins, food logs, and journal entries — as sensitive information deserving of extra care, regardless of whether every piece of it meets a specific legal definition of "health data" in your state. Specifically:

We do not sell this information.
We do not use it for targeted advertising or marketing.
We do not share it with third parties, except as necessary to operate the Services (see Section 2.4), to comply with law, to protect the Services or our users, or at your direction.

Ora Within is a wellness tool and does not provide medical advice, diagnosis, or treatment. See our Terms of Service for more on this.

2.3 Information Collected Automatically

Usage data: how you interact with the App (such as which screens you visit and which features you use), collected to maintain and improve the Services.
Device information: device type, operating system, and app version, used for troubleshooting and compatibility.
Website analytics (Site only): we currently use Google Analytics 4 to understand how visitors use orawithin.com. Google Analytics may use cookies and similar technologies to collect information such as pages visited and general location (city/region level, derived from IP address). You can learn about Google's practices at https://policies.google.com/privacy and opt out using Google's opt-out tools.

2.4 Biometric Authentication — Important Disclosure

The App offers an optional "Quick Sign-In" feature that lets you use your device's Face ID, Touch ID, or device passcode instead of retyping your password.

Ora Within does not collect, receive, store, or have any access to your biometric data (such as your face or fingerprint scan). This authentication happens entirely on your device, using Apple's or Google's own operating-system-level security systems. Your device tells our App only "yes, this is an authorized user" or "no" — it never shares the underlying biometric scan, image, or template with our App, our servers, or any third party. Enabling this feature is entirely optional, and you can disable it at any time (see "Forget this device" in the App's settings).

2.5 Information From Third-Party Services

Supabase: our backend database and authentication provider. Account information and the data described in Section 2.1 are stored using Supabase's infrastructure.
RevenueCat: our subscription management provider, used to manage and verify your subscription status. RevenueCat receives subscription/purchase identifiers from Apple's or Google's app stores; it does not receive your full payment card information.
Apple App Store / Google Play: if you subscribe to Ora Within, your payment is processed entirely by Apple or Google. We do not receive or store your payment card number, bank details, or full billing information.
Apple Sign-In / Google Sign-In: if you choose to sign in using these options, we receive basic profile information (such as your email address, or an anonymized relay email if you choose Apple's "Hide My Email" option) as permitted by you.
Website-only services: if still active on orawithin.com at the time of your visit, the Site may also use Stripe (session/booking payments), Gumroad (digital guide purchases), Calendly (scheduling), and Netlify Forms (waitlist and contact submissions). Each provider has its own privacy practices governing information processed through their systems.

3. How We Use Your Information

We use the information described above to:

Provide, operate, and personalize the App's daily healing plans and features
Maintain your account and authenticate you (including via optional biometric-assisted sign-in)
Process and manage your subscription
Track your streaks, calendar history, and progress within the App
Respond to your support requests and communications
Maintain and improve the Services, including troubleshooting technical issues
Communicate with you about your account, the Services, or (where you've opted in) our waitlist and updates
Comply with legal obligations

4. How We Share Your Information

We share information only as described in this Policy:

With the service providers described in Section 2.5, solely to provide the Services
If required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Ora Within, our users, or others
In connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information becomes subject to a different privacy policy
With your consent, for any other purpose disclosed to you at the time we collect the information

5. Data Retention

Active account data: retained for as long as your account remains active.
Deleted account data: when you delete your account through the App's Delete Account feature, your wellness data, check-ins, food logs, journal entries, and account records are deleted from our active systems as part of that process.
Backups: our systems may retain residual copies of deleted data for a limited period as part of routine backup processes before being overwritten. We work to honor deletion requests across our systems, including backups, to the extent feasible.
Legal and security records: we may retain limited information where reasonably necessary for fraud prevention, legal compliance, dispute resolution, accounting, or security purposes, even after account deletion.

6. How to Delete Your Account

You can permanently delete your Ora Within account and associated data directly within the App: Profile → Account → Delete Account. You will be asked to confirm this action, since it is permanent and cannot be undone. Deleting your account does not automatically cancel an active Apple App Store or Google Play subscription — you must cancel that separately through your Apple ID or Google Play account settings to avoid future charges.

7. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, which may include the right to access, correct, delete, restrict or object to certain processing of, or receive a portable copy of your information, and to withdraw consent where we rely on it. To exercise any of these rights, contact us at hello@orawithin.com, or use the in-app Delete Account feature described above. We will respond within a reasonable timeframe.

Certain privacy laws may provide residents of particular jurisdictions (for example, California, or other states with comprehensive privacy or consumer health data laws) with additional rights. Where such laws apply to Ora Within, we will honor those rights as required.

8. Data Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children. See Section 1 for more information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last Updated" date above, and, where appropriate, through the App or by email. Any changes will become effective when the revised Privacy Policy is posted or as otherwise stated in the notice. Where required by applicable law, we will obtain your consent before applying material changes to how we collect, use, or share your personal information.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: hello@orawithin.com

Responsible party: Kaila Lipford, individually, doing business as "Ora Within" (Chicago, Illinois). This Policy will be updated to reflect ORA WITHIN LLC once that entity is officially formed and registered.

12. Governing Law

This Privacy Policy is governed by the laws of the State of Illinois, without regard to its conflict of law principles, without limiting the rights you may have under the laws of your own country or state of residence as described in Section 7.

← Back to orawithin.com