Privacy Policy

What we collect

When you visit our website

Signup form — if you sign up to learn more about Ouna, we collect your name, email, and phone number.
Advertising measurement. If we run an ad campaign on Google or Meta, those platforms may set first- or third-party cookies on our pages to measure the ad's performance. You can block these cookies in your browser. When your browser sends a Global Privacy Control signal, we do not load Meta's measurement tool or send the website signup event to Meta.
Server logs. Our hosting provider records standard web request data (IP, browser, page) to keep the site running and protect it from abuse. We don't analyze this for marketing.

When you create an Ouna account

Phone number — required to create your account and verify it's you.
Display name — the name you'd like Ouna to use when speaking with you.
Birth year — required during setup so Ouna can place your stories in time.
Email address — optional.
Profile photo — optional.

When you talk or write with Ouna

Voice recordings. Your spoken conversations are recorded. This is essential — Ouna cannot remember what you said unless we keep what you said. Recording requires the microphone permission you grant your phone; you can revoke it at any time in your device settings.
Transcripts — text versions of your recordings.
Chat messages. Anything you write to Ouna in text — chat messages, replies, notes inside the app — is stored in the same way and for the same purpose as a voice transcript.
Memory graph — a structured map of the people, places, and events you have mentioned, and how they connect, so Ouna can carry context from one session to the next.
Conversation summaries — short notes about what was discussed, themes that came up, and how the session went.
Session metadata — duration, timestamps, and audio or technical quality information.

What the app collects automatically

Device information — type, operating system, app version, for compatibility.
Usage data — which screens you visit, which features you use, how long sessions last.
Advertising and attribution identifiers — the standard device-level identifiers iOS and Android provide (and that you control through your device settings), plus app-event signals (installs, sign-ups, retention milestones). See Analytics, attribution, and ad measurement below — content of your conversations is never part of this.
Push notification token — only if you opt in.
Crash and feedback reports — technical details when the app errors out or you submit feedback.

How we use what we collect

To run Ouna for you. Your name, birth year, conversation history, memory graph, and summaries let Ouna recognize you, remember what matters, and build on previous conversations.
To improve Ouna. We read transcripts and summaries to learn how the product is working and where the agent gets things wrong. What we learn changes how Ouna behaves for everyone going forward. This is internal use only — see Who at Ouna can see your conversations below.
To keep people safe. We run automated analysis over each conversation to flag signs of acute distress or safety concerns. A small group of our team reviews these flags to improve how the agent handles those moments. See the Safety section below.
To contact you. If you signed up on the website, we use your email for updates about Ouna; you can unsubscribe at any time. If you have opted in to push notifications, we use them only for time-sensitive account information or to let you know a conversation summary is ready.
To keep your account secure. Your phone number verifies it is you; encryption and access controls protect the account itself.

What we do not do

We do not:

Sell your data — to anyone, ever.
Share your conversations, voice, transcripts, stories, or anything you have told Ouna with marketers, advertisers, analytics vendors, or third-party data brokers — ever, for any reason.
Use your conversations, voice, or transcripts to train any external AI model.
Build advertising profiles based on what you've said to Ouna.
Send content, themes, summaries, or any inference we have drawn from your conversations to advertising platforms or analytics tools.
Retarget you on Facebook, Google, or any other platform based on what you've talked about with Ouna.
Surface your stories or any part of them to other Ouna users.
Combine your Ouna data with public-internet profiles or social-media data we didn't get from you directly.

These are commitments, not preferences. If we ever change them — for example, if a future paid feature involves a different data flow — we will say so clearly, before the change takes effect, and ask you to consent again.

Analytics, attribution, and ad measurement

To run the company, we need to understand how Ouna is being used and which advertising campaigns and audiences bring in people who go on to find Ouna valuable. We use a small number of analytics, attribution, and advertising-measurement tools — both inside the app and on the website — for this purpose. These tools may include software development kits (SDKs) and server-to-server integrations from advertising platforms (such as Meta, Google, or others we may use in the future).

What these tools see is engagement data: app installs, sign-ups, retention milestones, device-level advertising identifiers (the standard ones iOS and Android provide and that you control through your device settings), basic technical metadata, and — where required for ad-platform matching — a hashed (one-way-encrypted) version of your phone number, email, first name, or account identifier. Hashing means the platform receives a scrambled fingerprint it can only match against records it already holds — never the readable value itself.

On iOS, newer versions of the Ouna app ask for your permission first through Apple's App Tracking Transparency prompt. In versions of the Ouna iOS app that show this prompt, attribution runs only if you allow it — if you decline, ad platforms receive only Apple's aggregate, anonymous install and conversion milestones (SKAdNetwork), such as whether registration or a first meaningful call occurred, without information that identifies you or lets the platform recognize your device — and you can withdraw your permission at any time in your device Settings or with the in-app "Advertising attribution" control. In app versions that do not show the prompt, we do not use your device's advertising identifier; ad-platform matching there relies only on the hashed identifiers described above, and you can always exercise the opt-out rights in Your rights below.

What these tools never see:

The content of your conversations.
Your voice recordings.
Your transcripts.
Your stories, memories, or anything you've shared with Ouna.
Your memory graph or anything derived from your conversations.
Any safety, wellbeing, distress, or AI-generated inference about you.
Any health-related, mental-health-related, or sensitive personal information.
Anything we have learned about you from talking with you. Ever.

We use these tools to answer questions like: "Which campaigns and audiences brought in people who became successful Ouna users?" We do not use them to retarget you based on the content of your conversations, to profile you based on what you have talked about, or to build a picture of who you are out of what you have told Ouna. Those uses are off-limits, regardless of which tools we use.

If you live in a US state that gives you the right to opt out of "sharing" personal information for cross-context behavioral advertising (for example, California's CPRA), see Your rights below. We honor Global Privacy Control signals on our website and will provide an in-app control to opt out at any time advertising-measurement tools are active.

How voice conversations work

When you talk with Ouna, specialist providers work together in real time to make the conversation possible — handling the live call, turning speech into text, generating Ouna's responses, rendering its voice, and identifying people and themes in what was said.

Under our written agreements with these providers, they do not retain your conversations beyond the time needed to do their part, do not use them to train their own models, and do not share them with anyone else. After each call, the recording, transcript, and analysis are transferred to our own storage and removed from provider systems. We do not name specific vendors here because we may change them as the product evolves; the rules above apply to whoever we use.

When else we may share information

Beyond the conversation-time service providers described above, there are a small number of additional circumstances in which information may be disclosed. Most users will never be touched by any of these. We list them here for completeness:

Other service providers and vendors. We use vendors for things like cloud hosting, customer support, email delivery, error monitoring, security, payments, and analytics. They process information on our behalf, only as we direct, and only to perform the service for which they are engaged. They are bound by confidentiality and data-protection terms.
Legal process. We may disclose information if we believe in good faith that doing so is necessary or appropriate to comply with a law, regulation, subpoena, court order, warrant, or other lawful request from a competent governmental, judicial, or regulatory authority. Where we are legally permitted to tell you about a request, we will.
Safety and protection. We may disclose information if we believe in good faith that doing so is necessary or appropriate to (i) protect or defend the rights, property, or interests of Story Industries or another party, including to enforce or apply these terms, our policies, or any contract; or (ii) protect the rights, property, or personal safety of Story Industries, our team, our users, or the public.
Fraud, abuse, and security. We may disclose information to detect, investigate, prevent, or respond to fraud, abuse of the service, security incidents, or technical issues, and to enforce our Terms of Service.
Business transfers. If Story Industries is involved in a merger, acquisition, financing, sale of assets, reorganization, bankruptcy, or similar transaction, your information may be reviewed in due-diligence and transferred as part of that transaction. We will require any successor to honor the commitments in this Privacy Policy, and we will tell you about any change of ownership that materially affects how your data is handled.
At your direction or with your consent. We may disclose information with your consent, or when you direct us to share it.

Outside of these circumstances and the limited analytics and attribution disclosures described above, we do not disclose your information to third parties. In particular, we never share your conversations, voice, transcripts, stories, or anything derived from them with marketers, advertisers, or data brokers — see What we do not do.

Who at Ouna can see your conversations

Building a product that listens well requires a small number of people on our team to read transcripts of conversations from time to time. There is no other way to find out where the agent is working as intended and where it is not. We treat this access as a responsibility, not a default, and we keep it as narrow as we can.

Members of our team read transcripts or summaries only in the following circumstances:

To diagnose a reported bug that requires looking at a specific session.
To review a session the agent ended at the threshold (see Safety below), so we can assess whether the agent handled the moment well and where to teach it next.
For periodic product-quality review on a small sample of sessions, against specific learning questions about how the product is performing — structured review, not casual reading.
To help a user who has contacted us with a question that requires us to look at their own sessions.

Outside of these circumstances, your sessions are not read. They are not browsed casually, are not shared outside our company, and are not used for any purpose other than the operational ones described in this policy.

As Ouna grows, this access will be formalized with audit logging and role-based controls. Today, with a small team and a small user base, it operates as a written team norm that everyone on the team is bound by, kept narrow on purpose, and reviewed as part of how we work.

Safety

Ouna is for biographical reflection. Your life, your stories, your patterns over time. The hard parts of your biography — losses, abuse, addictions, regrets, periods of darkness, complicated sexual experience, family violence, things you carried and never told anyone — are part of what Ouna is for. We hold them with the seriousness they deserve.

Ouna is not a therapist, a clinical service, a crisis line, or an emergency service. Using Ouna does not create a clinical, counseling, medical, or other professional relationship between you and Story Industries. Ouna is a software product for personal reflection.

There are conversations Ouna isn't built for. When the agent recognizes one of these, it will say so plainly, surface the resources you actually need, and end the conversation:

If you are moving from reflection toward action that could harm you or another person right now — for example, if you have specific means in front of you and a plan, or you are about to act on harm to someone else — the agent will surface 988 (US/Canada Suicide & Crisis Lifeline), the Crisis Text Line (text HOME to 741741), or 911, and end the call. Reflection on dark periods you've lived through, present-tense feelings of distress, and processing of past events all stay in scope. The line is action toward harm, not the heaviness of what you're feeling.
If you are asking Ouna to do something it isn't built for — sexual content, content that violates our content policy, role-play or impersonation of a specific real person, or medical, legal, or therapeutic advice — the agent will say so, point you toward where you can get what you actually need, and end the call. Creative collaboration grounded in your own life — telling a joke, writing a poem, working on a fictional story, working through a non-explicit fantasy — is something Ouna is built for, and we hope you use it that way.

When the agent ends a conversation at this threshold, that's the end. We do not contact emergency services, family, employers, or any third party on your behalf. We do not monitor your conversations in real time. We do not promise to recognize every situation. We do not maintain a watchlist. The resources we surface are real — please use them. If you need help right now, you should call them directly.

We will also never share information with anyone — police, family, employers, anyone — because of something legal-but-private you told Ouna. Affairs. Drug use. Things you regret. Difficult feelings about people you love. Mistakes you are working through. Secrets you have carried for years. Those are yours to hold, and they stay with you. (This is a commitment about who else hears about it, not about whether the agent will keep the conversation going on a particular topic — the agent's scope is described above.)

The only circumstances in which information may leave our team without your consent are the narrow disclosure circumstances listed in When else we may share information — primarily, compliance with valid legal process when it is served on us.

Where your data is stored

Your account data, conversations, recordings, transcripts, and memory are stored on cloud infrastructure located in the United States. If you are located outside the United States, that data is transferred to and processed in the United States. By using Ouna, you consent to this transfer.

This includes our product-analytics data: the engagement events described in Analytics, attribution, and ad measurement are collected and stored with our analytics provider in the United States. Analytics collected before the move remain in the European Union only for the limited legacy-retention period, and older app versions may continue sending analytics events to the EU project until they are updated or retired.

How long we keep it

Website signup data (name, email, phone): kept until you ask us to remove it.
Voice recordings, transcripts, memory graph, summaries: kept for as long as your account exists, so Ouna can remember.
Account information: kept for as long as your account exists.

When you delete your account, all of the above is deleted. See Your rights below.

Your rights

Delete your account

You can delete your account from the Settings page in the app. When you do, we permanently delete your account information, all voice recordings, all transcripts, your entire memory graph, all summaries, and your authentication record. Deletion cannot be undone.

If you signed up on the website but never created an app account, email us to remove your signup data.

Export your data

We are building a self-service export feature inside the app. Until that is available, you can request a copy of your data by emailing hello@meetouna.com, and we will deliver it within 30 days.

Correct your data

If Ouna has misunderstood or misremembered something, you can correct it inside any conversation, or email us. If something in your account profile is wrong, you can correct it from the Settings page.

If you live in the European Economic Area (GDPR)

You have all the rights GDPR provides — including access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your national supervisory authority. Our legal basis for processing is your consent and our legitimate interest in providing and improving the service. Story Industries, Inc. is the data controller. Email us to exercise any of these rights.

If you live in California (CCPA/CPRA)

You have the right to know what we collect, to delete your data, to correct inaccuracies, to limit use of sensitive personal information (which includes voice recordings and inferences drawn from them), to opt out of any "sharing" of personal information for cross-context behavioral advertising, and to not be discriminated against for exercising your rights. We do not sell your personal information. We never share the content of your conversations, your voice, your transcripts, or anything derived from what you've told Ouna for cross-context behavioral advertising — see What we do not do and Analytics, attribution, and ad measurement. To exercise your right to opt out of any "sharing" of engagement data with advertising platforms, you can use the in-app control we provide at any time advertising-measurement tools are active, send us an email, or send a Global Privacy Control signal from your browser when you visit our website (we honor it).

Other US states

If you live in Virginia, Connecticut, Texas, Colorado, Utah, or another state with a comprehensive privacy law, you have substantially similar rights. Email us to exercise any of them.

Children

Ouna is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has signed up, contact us and we will delete the account.

Security

We use:

Encrypted connections (HTTPS/TLS) for everything in transit.
Encrypted storage for sensitive data at rest.
Authenticated API access with signature verification.
Access controls that limit who on our team can reach production systems.
Regular review of our security posture.

No system is perfectly secure. If you discover a security concern, please email hello@meetouna.com so we can address it.

Changes to this policy

We may update this Privacy Policy as Ouna evolves. When we make a substantive change — for example, a new way we use data, a new type of data we collect, a new sharing relationship — we will tell you in the app and by email before the change takes effect, and we will ask you to re-consent. The "Last updated" date at the top of this document marks the most recent revision.

Contact us

For any question about this policy, or to exercise any right described above:

Story Industries, Inc.

2810 N Church St, PMB 122936

Wilmington, DE 19802-4447

United States

Email: hello@meetouna.com

This Privacy Policy applies to the Ouna mobile application and the withouna.com website, both operated by Story Industries, Inc.