Privacy Policy

Last updated: October 19, 2026

Onry ("Onry", "we", "us") is a mobile app that helps caregivers log and share events about the people they care for ("care recipients"). This policy explains what information Onry collects, how it's used, who can see it, and the choices you have.

Information we collect

Onry collects the information you and your care team enter into the app, including:

• Account information — your email address and password, used to create and sign in to your account, and the name you give yourself in the app. Passwords are stored only in hashed form.
• Care recipient information — the name and, if you choose to add it, the date of birth of each care recipient you set up.
• Care team information — who is on each care recipient's care team and whether they are an admin or a supporter, who owns each care team, the invite links admins create (with an optional note about who each link is for), and requests to join a care team.
• Event data — the care events you and your care team log (for example, notes, categories and times), who logged each one, and the list of event types for each care recipient. This includes events the app records for you, such as how you responded to a reminder notification (for example, whether it was acted on, snoozed, skipped or missed).
• Event history — if an event is changed or removed, we keep a copy of the earlier version, so that a care recipient's record can't be lost or quietly rewritten.

We don't collect analytics, advertising identifiers, or device tracking data, and Onry does not access your device's location.

Information stored on your device

Onry keeps your sign-in session in your device's secure storage. Your reminder settings and the care recipient you last selected are stored on your device only. Reminders are scheduled by your own phone as local notifications: Onry does not send push notifications and does not collect a notification token for your device.

How we use your information

Information you provide is used only to operate the app for you and your care team:

• To create your account and authenticate you.
• To store and display the events and care team data you and your care team enter.
• To share event data with the people an admin has added to a care recipient's care team.
• To limit how quickly certain actions can be repeated (such as creating invite links or logging events), which protects your data if an account is misused.
• To respond to you when you contact us.

We do not sell your information, and we do not use it for advertising.

Who can see your data

Data about a care recipient is visible only to the members of that care recipient's care team. Access is enforced at the database level, so a caregiver can only see care recipients whose team they have joined.

• Admins can see the care recipient's full event history, including earlier versions of changed or removed events.
• Supporters can see events logged in the last 7 days, plus any events they logged themselves.
• Your name is visible to the other members of every care team you're on.
• Joining a care team — invite links grant nothing by themselves. When you use one, the care recipient's admins see your name and email address so they can decide whether to approve you. You can't see anything about the care recipient until you're approved. Invite links work once and expire after 7 days, and we store only a fingerprint of each link, never the link itself.

If you leave a care team, or an admin removes you, you lose access to that care recipient. The events you logged stay on the care recipient's record for the rest of the team.

Service providers

We use a small number of service providers to run Onry:

• Supabase hosts our database and handles authentication.
• Cloudflare R2 stores our nightly database backups. Backups are encrypted before they leave our systems, and Cloudflare cannot read them.
• Formspree receives messages you send through our contact form.

We don't share your data with anyone else.

Deleting your data

Deleting your account

You can delete your account in the app, from Settings → Delete Account. If you're the owner of any care teams, you first choose for each one whether to hand ownership to another admin or to delete that care recipient's record along with your account.

Your account is deleted 30 days after you ask. Straight away, you lose access to your care teams, your teammates see you as leaving the team, your open invite links stop working and your pending join requests are withdrawn. During those 30 days you can sign in and restore your account. After 30 days your name, settings, email address and password are deleted permanently. The events you logged are kept, because they are part of each care recipient's record. They are shown with a label such as "Former carer 1" instead of your name, which an admin of that care recipient can rename.

Deleting a care recipient's record

The owner of a care team can delete the care recipient's record in the app. It disappears for everyone on the care team straight away, and the owner can restore it for 30 days. After 30 days the care recipient's record and everything recorded about them (their events, event history, event types, care team, invite links and join requests) are deleted permanently.

Backups and retention

We keep your data for as long as your account or the care recipient's record is active, and delete it as described above. Encrypted backups are kept so we can recover from a failure: daily backups for 30 days, weekly backups for 120 days, and monthly backups for one year. Deleted data can remain in these backups until they expire. Backups are only used to restore the service, and data deleted before a restore is deleted again.

If you can't use the in-app options, or want something else deleted, contact us.

Security

Data is encrypted in transit between the app and our servers. Access to every care recipient's data is checked by the database itself for each request, not just by the app. You can sign out of every device at once from Settings if you lose a phone or signed in on one that isn't yours.

Children's privacy

Onry is intended for use by caregivers (adults). A care recipient may be a child or other dependent, but their information is entered and controlled by their caregivers, not by the care recipient directly.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page.

Contact

Questions about this policy or your data? Use our contact form.