Privacy Policy

The Short Version

• We have no servers. There is no Orca Studio backend. We never receive, see, or store your data.
• Your data stays on your device, in encrypted app-private storage.
• The app only talks to servers you choose it to — your own OpenSearch or Elasticsearch clusters, and, optionally, your own AI provider. Nothing is sent anywhere unless you initiate it.
• No analytics, no telemetry, no advertising, no third-party trackers. Ever.

Information We Collect

None. Orca Studio has no user accounts and no sign-up. The app does not gather personal information, usage metrics, telemetry, crash-reporting uploads, advertising identifiers, device fingerprints, or location data. There is no developer-operated server for such data to be sent to.

Information the App Handles, and Where It Stays

Everything below is stored locally on your device in the app's private storage. None of it is transmitted to us.

• Data you import or copy — imported NDJSON, JSON, _bulk and CSV files, indexes copied from a cluster, saved dashboards and queries. The document store is encrypted at rest with SQLCipher (AES-256) under a key generated on the device and held in the Android Keystore.
• Connection profiles — the name, address, username and TLS choice of each cluster you save, kept as a plain JSON file. Secrets are never in that file. Passwords, API-key header values and AWS credentials are sealed separately under a Keystore-held AES-256-GCM key, so a leaked profile file gives up hostnames and usernames and nothing that can authenticate.
• AI provider API keys (optional, see below) — also sealed with the Android Keystore.
• A first-launch timestamp — a single local timestamp used to recognise early ("founder") installs for a future upgrade offer. It contains nothing that identifies you.

Android backup is switched off for this app (allowBackup=false). Imported datasets can be large and private, and connection secrets have no business in a cloud backup, so none of it is copied to your Google account or carried across a device-to-device transfer. The cost is that a reinstall starts fresh.

Connections to Other Services (All User-Initiated)

Orca Studio only communicates over the network when you ask it to, and only with the services you point it at. There is no update check, no licence check, and no telemetry beacon.

1. Your OpenSearch Clusters

When you add a connection, the app connects directly from your device to the cluster you specify — OpenSearch, Amazon OpenSearch Service, or Elasticsearch. This traffic does not pass through any server operated by us. If the profile uses AWS SigV4, requests are signed on your device and sent straight to AWS.

You can mark a connection read-only to block every write the app could make, and a connection tagged as Production is read-only whatever that switch says. TLS is configurable, including pinning your own CA certificate. If you use a plain http:// address, that traffic is not encrypted in transit — the app says so on the connection itself and on the form where you enter it.

2. AI Providers — Optional, Bring-Your-Own-Key

Plain-English query translation works fully offline using a built-in translator, and this is the default. If you choose to add your own API key for a cloud provider, then when you ask a question in plain English the app sends, directly to that provider:

• your question, and
• the index name, and the field names and types from its mapping.

It does not send your document values. Not one — not a sample, not an example row, not a snippet for context. The prompt is assembled from the mapping alone, and that is enforced in the code that builds it rather than left to the model's discretion. Before the first cloud call of each launch the app shows you the exact payload, and a setting keeps translation on-device entirely so no cloud request is possible.

Requests go only to the provider whose key you supplied:

• Anthropic (Claude): https://api.anthropic.com
• OpenAI (GPT): https://api.openai.com

Your use of these providers is governed by their own privacy policies (Anthropic, OpenAI). You can remove your key at any time in the app's settings, which stops all communication with the provider.

3. Google Play Billing

Orca Studio is free, and the current version contains no purchases — the billing code that ships is inert. If an optional one-time "Orca Studio Pro" unlock is offered in a later version, the transaction will be processed by Google Play Billing. We would receive only your entitlement status — whether the unlock was purchased — and not your name, payment card, or billing address. That processing is governed by Google's Privacy Policy.

Crash Reports

If the app crashes, it saves a single diagnostic report on your device only. This report is never uploaded automatically and contains no data from your indexes — it holds the app version, device model, Android version, and the technical stack trace. You can view, share, or delete it in Settings → Diagnostics. If you choose to share it, it goes only where you send it.

Permissions the App Uses

• Internet / network state — to reach the servers you choose: your clusters, your AI provider (only if you add a key), and Google Play for billing.
• Billing — to offer the optional one-time Pro purchase through Google Play.

There are no runtime permission prompts at all. The app does not request access to your location, camera, microphone, contacts, call logs, or your files outside its own private storage, and it uses no advertising identifier.

Data Security

Your imported and copied data is encrypted at rest with SQLCipher (AES-256), and your connection secrets and API keys are sealed with the Android Keystore using device-bound keys. Where the device has a lock screen the key additionally requires the device to be unlocked; the app states which protection it actually got in Settings → Diagnostics rather than assuming. No method of electronic storage is ever completely secure, and the protection provided by the Android Keystore depends on your device's integrity — a rooted or compromised device weakens these guarantees.

Data Retention and Deletion

Because your data lives only on your device, you control it entirely:

• Delete individual workspaces, connections, dashboards, or keys within the app. Deleting a connection removes its stored secret with it.
• Uninstalling the app removes all of its data, including the encrypted stores and every stored secret. Because Android backup is disabled, nothing survives it.

We hold no copy of your data, so there is nothing for us to retain or delete on our side.

Your Privacy Rights (GDPR, CCPA, and Others)

Because Orca Studio does not collect or hold your personal data, we have nothing to disclose, export, correct, or delete on your behalf, and we do not sell or share personal information. Any personal data you handle through the app resides in your own clusters or with your chosen AI provider; for that data you are the controller and should exercise your rights directly with those services.

Children's Privacy

Orca Studio is a developer tool intended for adults and is not directed at children. We do not knowingly collect any information from children.

International Use

The app processes your data locally on your device. Cross-border transfer happens only if and when you connect to a cluster or AI provider located in another region — a choice you make and control.

Changes to This Policy

We may update this policy to reflect changes to the app. The "Last Updated" date at the top will always show the current version, and material changes will be noted there.

Contact

Questions about this policy or the app's privacy practices:

Stephen Taylor — [email protected]