Privacy policy

The short version

• There is no account. You never sign up, sign in, or give us an identifier of any kind.
• There is no analytics, no advertising identifier, no crash reporter of ours, and no third-party tracking SDK in the app.
• Your questions and your history are written to the app’s private storage on the device you typed them into, and nowhere else.
• The simulation itself runs locally and makes no network requests. The app works in airplane mode.Structurally rather than by policy: on the default path the component responsible for retrieval declares that it uses no network and returns no evidence without performing any request.
• One optional setting can send text off the device: “Ground in real sources”. It is off unless you turn it on. Details below.

What we collect

Nothing. We operate no account system and no user database, and there is no telemetry in the app. We do not know how many simulations you have run, what you asked, or whether you opened the app today.

The questions you type, the context you paste, the results, and your record of what actually happened are stored by the app in its own private container on your device. We have no access to that container and no mechanism by which its contents could reach us.

On-device intelligence

On supported devices — iOS 26, macOS 26 and visionOS 26 or later, where Apple Intelligence is available — Orakl uses Apple’s on-device Foundation Models system language model to name the outcomes of your decision, name the drivers, cast the archetypes and write the report prose. That processing happens on your device, inside Apple’s framework. Your content is not sent to us and not sent to a third party for that purpose.

Where the model is unavailable, deterministic code does the same jobs locally. Either way, no text leaves the device at this stage.

The one exception: “Ground in real sources”

A phone cannot read the web offline, and some questions benefit from real citations. So there is a Premium setting, in Settings under “Sources”, that lets the app look things up. Because this is the only place in Orakl where anything is transmitted, here is exactly what happens when it is switched on.

• It is off by default and only appears for Premium users. Nothing is transmitted until a user turns it on deliberately.
• When it is on, each run posts three things to Orakl’s lookup service: your question text (first 500 characters), your context text (first 2000 characters), and the category you picked. A language preference is sent as a request header so that results can be in your language.
• Nothing else is sent. No account, no device identifier, no advertising identifier, no history, no previous questions. The request uses an ephemeral connection with cookies disabled and no persistent cache.
• The service returns a short digest and citations. The digest is capped at 1200 characters and six citations before the app will use it.
• If the service is unreachable, slow, or returns anything malformed, the run proceeds without grounding rather than failing.

The app states the same thing in its own words, next to the switch: “Off by default. When on, your question is sent to Orakl’s lookup service to find relevant articles and reference pages, and the simulation cites them. Nothing else leaves your device — no account, no history, no identifiers.”

If you would rather nothing ever left the device, leave the setting off — which is where it already is — and the app is fully functional.

Purchases

Orakl Premium is sold through the App Store. Apple handles the transaction using your Apple Account; we never see or store your payment details. Entitlement is validated on your device through Apple’s StoreKit and cached locally so that a paying user is not shown a paywall when the network is down.That cache holds a purchase status and an expiry date. It holds no identifier, and it is stored in the app’s own preferences on your device. Apple’s handling of the transaction is governed by Apple’s privacy policy.

Third parties

The app contains no advertising, analytics or tracking SDKs. No data is shared with anyone, because none is collected. The only network destination in the app is the lookup service described above, and only when you have enabled it.

Children

Orakl is rated 4+ and collects no data from anyone, of any age.

Retention and deletion

Because everything lives on your device, deletion is entirely in your hands. Remove an individual analysis from History, or delete the app to remove all of it. There is nothing held on our side to delete, and no request you need to send us to have it deleted.

Changes and contact

If this policy changes, the revised version appears on this page with a new date at the top. Questions about any of it: hugomoriceau@icloud.com.