Privacy Policy
Last updated: January 4, 2026
At Ostra ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
1. Information We Collect
1.1 Personal Information
When you create an account, we collect:
- Email address
- Display name (optional)
- Authentication credentials (encrypted)
- Personalization preferences (narrative voice, life stage)
1.2 Microphone and Voice Recordings
Microphone Permission: Ostra requires access to your device's microphone to record voice entries. This permission is essential for the core functionality of turning your spoken thoughts into written journal entries.
When you use our recording feature:
- Audio recordings are captured using your device's microphone
- By default, recordings are stored locally on your device only
- Recordings are temporarily sent to our AI transcription service for processing
- Audio is not retained on our servers after transcription is complete
- You have full control over when and what you record
1.3 Cloud Audio Storage (Storyteller Tier Only)
If you subscribe to the Storyteller plan:
- Your audio recordings are backed up to our secure cloud storage
- This allows you to access your recordings across devices
- Audio files are stored in encrypted form
- If you downgrade from Storyteller, your cloud audio is retained for 30 days, then automatically deleted
- If you re-subscribe within 30 days, your cloud audio is preserved
1.4 Content You Create
We store the text content generated from your voice recordings, including:
- Transcriptions and story narratives
- Entry titles and moods
- Daily summaries
1.5 Usage Information
We automatically collect certain information when you use the app:
- Device type and operating system
- App version
- Usage patterns and feature interactions (anonymized)
- Crash reports and performance data
2. How We Use Your Information
We use the collected information to:
- Provide and maintain our services
- Process your voice recordings into text using AI
- Personalize your experience based on your preferences
- Send you important service notifications
- Improve our AI models and app functionality
- Process payments and manage subscriptions
- Comply with legal obligations
3. Data Storage and Security
3.1 Where We Store Your Data
Your data is stored using industry-standard secure cloud infrastructure. Our servers are located in regions that comply with applicable data protection regulations.
3.2 Audio Storage by Subscription Tier
- Wanderer (Free) & Dreamer: Audio recordings are stored locally on your device only. They are never uploaded to our cloud unless you upgrade to Storyteller.
- Storyteller: Audio recordings are backed up to our secure cloud storage for cross-device access and preservation.
3.3 Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS) and at rest
- Secure authentication protocols (including OAuth with Google and Apple)
- Row-level security ensuring users can only access their own data
- Regular security assessments
- Access controls and monitoring
4. Third-Party Services
We work with trusted third-party service providers to operate our app:
- AI Transcription Services: For converting your voice recordings into text. Audio is processed in real-time and not permanently stored.
- Cloud Infrastructure: For secure authentication, database, and cloud storage services
- Payment Processors: For subscription and payment processing
- Analytics Services: For anonymized usage analytics to improve the app experience
- Authentication Providers: Google Sign-In and Apple Sign-In for secure account access
These service providers are contractually obligated to protect your data and use it only for providing services to us.
5. Your Rights and Choices
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (see Account Deletion below)
- Export your data in a portable format
- Withdraw consent (where applicable)
- Opt out of analytics tracking
5.1 Account Deletion
You can delete your account at any time from within the app (Profile → Delete Account). When you delete your account:
- Your profile and all journal entries are permanently deleted
- All cloud-stored audio recordings are deleted
- Your authentication credentials are removed
- This action is irreversible
Deletion is processed immediately, though some data may remain in encrypted backups for up to 30 days before being permanently purged.
To exercise any of these rights, please contact us at contact@ostraapp.com.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services:
- Account data: Retained until you delete your account
- Journal entries: Retained until you delete them or your account
- Cloud audio (Storyteller): Retained while subscribed, then 30 days after downgrade
- Analytics data: Anonymized and retained for up to 12 months
7. Children's Privacy
Ostra is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at contact@ostraapp.com.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us:
- Email: contact@ostraapp.com
- Website: https://ostraapp.com