Privacy Policy

Privacy Policy

Effective date: 27 April 2026

Ochre is built so that your learning stays yours. We collect as little as possible, store it locally on your device wherever we can, and never sell or share data with advertisers. This policy explains exactly what data Ochre handles, where it goes, and what your rights are.

Who we are

Ochre is developed by Tom Buteux as an independent app under Ochre Studios. If you have questions about this policy or how your data is handled, contact us at tombuteux@gmail.com.

What data Ochre collects

Stored on your device only

The following data is created and stored entirely on your device, in a local SQLite database. It never leaves the device unless you explicitly trigger an action that sends it (see "Sent off-device for AI processing" below).

• Cards and decks — the questions, reference answers, and groupings you create.
• Review history — the dates and ratings of each review, your typed or transcribed answers, and any AI-suggested ratings.
• Drafts — text you save for later card generation.
• Streak and activity log — the dates on which you completed reviews.
• App settings — your theme preference, notification times, and onboarding state.
• Free-trial usage counts — how many AI generations and evaluations you've used.

You can delete all of this at any time from Settings → Delete all cards or Settings → Reset app data. Deleting the app from your device also removes everything stored locally.

Sent off-device for AI processing

Ochre uses Anthropic's Claude AI to generate questions from text you provide and to evaluate your typed or spoken answers. When you trigger one of these actions, the relevant data leaves your device:

Action	What is sent
Generate cards from text	The text you typed into the capture screen
Evaluate an answer	The question, the reference answer, and your typed or spoken answer
Fact-check generated cards	The generated questions and reference answers

The data path: the request goes from the app to a Cloudflare Worker we operate (the "AI proxy"), which forwards it to Anthropic's API. The proxy holds the Anthropic API key — your device never has it. Anthropic processes the request and returns a response.

Retention: Anthropic states it does not train its models on data sent through the API and retains inputs and outputs for up to 30 days for trust-and-safety purposes (see anthropic.com/privacy). The Cloudflare Worker logs no request bodies; Cloudflare may retain standard request metadata (IP address, timestamp, status code) for operational and security purposes per Cloudflare's privacy policy.

We do not keep a server-side copy of the text you send for AI processing.

Voice input

If you use voice to answer recall questions, your microphone audio is processed by your device's operating system (Apple's Speech Recognition framework on iOS) to produce a text transcript. The audio itself is handled by Apple, not by Ochre — see Apple's privacy policy for details. Only the resulting transcript is then handled by Ochre as described above.

You can revoke microphone or speech-recognition permission at any time in your device's Settings.

Subscriptions

If you subscribe to Ochre Pro, the subscription is processed by Apple (App Store) or Google (Play Store) and managed via RevenueCat. RevenueCat receives an anonymous app-instance identifier and the subscription receipt, which it uses to determine entitlement state. We do not receive your name, email address, or payment details — those stay with Apple or Google.

Notifications

Daily review reminders are scheduled locally on your device using the operating system's notification framework. No notification content is sent through our servers.

What we do not collect

• We do not collect your name, email address, phone number, or any account credentials. Ochre has no user accounts.
• We do not use analytics, tracking pixels, or advertising SDKs.
• We do not use cookies or device fingerprinting.
• We do not access your contacts, photos, location, or any data outside the app.
• We do not sell, rent, or share data with third parties for marketing purposes.

Crash and diagnostic data (TestFlight / App Store)

Apple provides aggregated crash reports and basic usage statistics to developers through TestFlight and App Store Connect. You can opt out of sharing this data with developers in your device's Settings → Privacy & Security → Analytics & Improvements. This data is collected by Apple, not by Ochre.

How we use your data

We use the data described above only to:

• Run the app's core features (storing cards, scheduling reviews, generating and evaluating answers).
• Maintain your subscription entitlement.
• Diagnose technical issues if you contact us with a problem.

We do not profile you, build advertising audiences, or share your data for any commercial purpose.

Your rights

Because nearly all of your data lives on your device, you control it directly:

• Access: open the app — your full library is visible to you at all times.
• Correction: edit any card, deck, or folder in the app.
• Deletion: use Settings → Delete all cards or Settings → Reset app data to wipe local data. Uninstalling the app removes everything stored locally.
• Subscription cancellation: manage or cancel your subscription through your Apple ID or Google account.
• Withdraw permissions: revoke microphone, speech-recognition, or notification permission in your device Settings at any time.

If you are in the UK or EEA, you also have the right to lodge a complaint with your national data protection authority (in the UK, the ICO).

To exercise any right that requires our action — such as deleting any residual logs or asking what data we hold about you — email tombuteux@gmail.com.

Children

Ochre is rated 4+ and is suitable for all ages, but the app does not knowingly collect any personal information from anyone, including children. There are no accounts, no profiles, and no social features.

Changes to this policy

If we change this policy in a material way, we will update the effective date at the top and notify users in-app before the changes take effect. The current version is always available at ochrestudios.co.uk/privacy and via the link in the app's Settings screen.