Privacy Policy

Who we are

Ornalia is operated by SoftKarrot. This policy covers the Ornalia Android app and the Ornalia website. When this page says “we”, it means SoftKarrot; when it says “you”, it means the person using Ornalia.

If you want anything on this page explained, or you want a copy of what we hold about you, email support@ornalia.xyz.

What we collect, and why

You can browse, search, and fill a cart and a wishlist without an account. While you do, your cart and wishlist are kept on your own device, not on our servers. You can also message our support team without an account, and if you do, we store those messages, see using Ornalia without signing in. Placing an order always signs you in, because we first confirm your phone number with a one-time code. Apart from what that section describes, and from the last row of the table, which depend on your own choices, everything in the table below starts only once you sign in.

Using Ornalia without signing in

If you use Ornalia without an account, this is what we keep:

• Nothing about your cart or wishlist while you browse, search or add to them. They are stored only on your device: in your browser’s local storage on the website, and in the app’s secure storage in the app. When you place an order, the items in your cart are sent to us with it; when you sign in, your cart and wishlist are saved to your account.
• Search words, without your identity. A word you search for is added to a shared count of popular searches. Nothing links it to you, and it is not kept as your search history.
• Support messages, if you write to us. We store the text of each message you send, our staff’s replies, and when each was sent and read. Guests can send text only, not photos or files. We do not ask for your name or phone number to do this.
• A guest chat token. The first time you message us, our server creates a random code and your device keeps it, in the same local or secure storage. It is how your device finds your conversation again. Anyone holding that code can read the conversation, so we never show it or send it anywhere else. If you clear the app’s data or your browser storage, your device loses the code and can no longer open that conversation; the messages themselves stay with us.
• If you sign in later on the same device, including when you confirm an order with a one-time code, we link that conversation to your account, and our staff see your name, phone number and email (if you have added one) next to it. From then on it is part of your account data, and it is deleted when you delete your account.
• Your IP address. We use it to limit how many messages or orders can come from one place in a short time, which stops abuse; that count is held in our server’s memory and is not saved with your messages. Like most web services, our server also keeps standard technical logs of the requests it receives, and these can include the IP address a request came from. We use them to find and fix faults.

A guest conversation that is never linked to an account is kept until it is deleted. To have one deleted, ask us in the conversation itself or email support@ornalia.xyz.

What we do not collect

• Your location, precise or approximate
• Your contacts, calendar, SMS messages or call logs
• Audio or video recordings
• Health or fitness data
• Your browsing history outside the app
• Card numbers or bank details
• The list of other apps installed on your device
• Crash logs or diagnostics (the app ships no analytics or crash-reporting SDK)

Who else sees it

We do not sell your data. Four kinds of people and companies see parts of it, and only these four:

• Our staff — to pack and dispatch your order, answer your messages, and moderate reviews.
• The courier delivering your order — your name, phone number and delivery address, because a parcel cannot arrive without them.
• The companies that run our infrastructure — Amazon Web Services stores the data and powers the search-by-photo feature, and Google Firebase Cloud Messaging delivers push notifications to your phone. They process it on our instructions and for no purpose of their own.
• Meta (WhatsApp, Messenger and Instagram) — if you opt in to order updates on WhatsApp, or message us on Messenger or Instagram, Meta carries those messages, so it processes your phone number or account and the message text.

Anything you post publicly — a review, its star rating and any photos on it — is visible to everyone, alongside your display name and profile picture. Please do not put anything in a review you would not want to be public.

How it is protected

Everything travelling between your device and our servers is encrypted in transit (HTTPS and WSS), and unencrypted traffic is switched off in the app itself. Data is stored on Amazon Web Services in the Asia Pacific (Singapore) region. Access to the admin tools is restricted to our staff accounts.

We sign you in with a one-time code sent by SMS, so there is no password of yours for anyone to steal or reuse.

Deleting your account

You can delete your account yourself, at any time, from inside the app: open Profile and tap Delete account at the bottom of the account menu. If you no longer have the app installed, use our account deletion page.

Deleting removes your profile, cart, wishlist, saved addresses, search history, messages (including a conversation you started as a guest and then linked by signing in), notifications, push tokens, your reviews, and the photos and files you uploaded. This happens immediately and cannot be undone.

One thing is kept: the record of orders you have already placed. We remove the personal details from them — your name, phone number, WhatsApp number, email address and street address are erased and replaced with a placeholder — but the order itself, its items and its totals remain, because we are required to keep accurate sales records for accounting and tax purposes. What is left cannot be traced back to you.

How long we keep things

While your account is open, we keep your data for as long as you keep using Ornalia. When you delete your account, everything listed above goes at once, apart from the anonymised order records. Sign-in sessions expire on their own. A guest support conversation that was never linked to an account is kept until you ask us to delete it, as described above.

Children

Ornalia is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

If we change what we collect or what we do with it, we will update this page and change the date at the top. Significant changes will also be announced in the app.