Private by architecture.

Ormiko works from the conversations you bring it. That can be a phone call you choose to record, a voice note, a clip from your Wear OS watch, or a typed text note. You decide what goes in — Ormiko does not silently harvest everything around you.

From each capture, Ormiko derives a private knowledge graph: who was involved, the topics and places discussed, the commitments made, and durable facts worth remembering (roles, deal terms, life events). It keeps the full transcript alongside that graph so a later recap is grounded in what was actually said.

Everything above — the people, places, projects, commitments, facts and raw transcripts — is stored locally in an encrypted SQLite database on your phone. There is no Ormiko cloud account holding your conversations, and no Ormiko server that stores your relationship graph. We cannot read your data, because we never receive it.

The behavioural history that tunes your nudges — which reminders you act on and when — is part of this on-device store and never leaves the device.

To turn audio and text into a transcript and a structured understanding, Ormiko sends that captured audio or text to Google's Gemini API. This is Ormiko's single cloud dependency. Nothing else — not your knowledge graph, not your nudge history, not your contacts — is sent to any third party.

You supply your own Google Gemini API key, so this processing happens under your own Google account and is governed by Google's Gemini API terms. Your relationship with Google for that processing is direct; Ormiko is simply the app that formats the request and files the result back into your on-device graph.

Camera frames, on the rare path where vision is used, are sent for that single processing step and then discarded — they are never stored as images or turned into biometric templates.

Some nudges are place-aware — a reminder that makes sense as you arrive at the office, for instance. To make those work, Ormiko checks your location on-tick only: at the single moment a context nudge is being evaluated. There is no continuous background location tracking, and Ormiko does not build a history of where you've been.

Any location or weather coordinates used for context are coarsened to roughly city level. Location is optional, and like every sensitive sensor it has an off switch in Settings → Privacy.

Ormiko asks only for what a given feature needs, and several of these are strictly opt-in. You can run the core of the app without granting the optional and opt-in ones.

The overlay and call-screening roles power the pre-call brief card. They are opt-in — Ormiko will not show the brief at ring time unless you turn them on. Notably, that native brief reads from a snapshot and never opens your encrypted database directly.

Ormiko is a tool for working adults and is not directed at children under 16. It is not designed for, marketed to, or intended for use by children, and we do not knowingly collect information from them.

As Ormiko evolves, this policy may change. When it does, we'll update the “last updated” date at the top of the page. The architecture described here — on-device by default, with Gemini as the single cloud dependency — is the principle we intend to keep.

Questions about privacy, or anything in this policy? Reach us at hello@ormiko.app.