Privacy & Safety

Trust is the product.

Ora sits in someone's home and listens to their life. We treat that responsibility as the centre of everything we build — not an afterthought. Here is exactly how data is handled, protected and governed.

Psychologically safe by design. Ora's conversations are co-designed with a licensed clinical psychologist, so every interaction is emotionally safe, empathetic, and appropriate for vulnerable users — with ongoing clinical review through pilot testing.

Data we collect

Only what is needed to keep someone company and to surface meaningful changes in wellbeing — nothing more.

A signal, not a feed. Caregivers never see raw transcripts or hear live audio. Ora translates conversations into a high-level wellbeing signal — built for reassurance, with the elderly person's dignity and privacy kept intact. These are observations, never a diagnosis, drawn from conversation alone — never cameras or body sensors. And when there's no conversation to read, Ora says so plainly, rather than inventing a reassuring number.

🎙️

Voice conversations

Processed for understanding — not permanently stored as raw audio.

💛

Emotional tone signals

Indicators of mood and affect, used to spot meaningful change.

📈

Wellbeing patterns

Conversation rhythms and trends over time.

⚙️

Device usage data

Basic operational data to keep the device working well.

How we protect it

Self-hosted infrastructure — data is never sent to Google, OpenAI, or any third-party AI provider. We run our own models on our own infrastructure.
Encrypted in transit and at rest — protected at every stage of its life.
A dedicated cybersecurity engineer on the team — keeping data secured on our own servers and actively guarding against leaks.
Access restricted to named team members only — no open access, no anonymous accounts.
PDPA compliant — the right to access, correct, and delete data at any time.

Consent framework

1️⃣

Primary caregiver consent

The primary caregiver sets up the account and gives primary consent.

2️⃣

Verbal consent at setup

The elderly user gives clear verbal consent when Ora is first introduced.

3️⃣

Withdraw any time

Either party can withdraw consent and request full data deletion at any point.

Alert escalation protocol

Ora distinguishes between everyday changes and genuine concern, and responds proportionately at three levels.

Level	Trigger	Response
Yellow	Mood shift, unusual quietness	Caregiver notified via the app
Orange	Expressed distress, physical complaint	Urgent notification + suggested action
Red	Safety language, emergency keywords	Immediate alert + option to contact emergency services

On emergencies: emergency escalation is permitted under Singapore's PDPA where a person's safety is at risk. Protecting life takes precedence, and the framework is built to honour that responsibly.

Our security roadmap

Security is foundational, not a checkbox. As we grow, we're committed to aligning with recognised security standards and pursuing formal certification — with a dedicated cybersecurity engineer leading the way.

Want the full detail?

Our complete Privacy Policy — covering retention, sub-processors, and your rights in full — is available on request and will be linked here as a downloadable document.

Request the full policy →