This policy explains what personal data the Oryn: Life RPG iOS app ("Oryn", "the app") collects, why it collects it, who it is shared with, and the rights you have over it.
Oryn is developed and operated by Predrag Džunić, an individual developer based in Serbia, acting as the data controller.
Contact for any privacy matter: p.dzunic@outlook.com
You sign in with Apple or Google. We never see or store your password for those accounts. From the sign-in we receive your email address and, where provided, your name. If you use Sign in with Apple with Hide My Email, we only ever receive Apple's relay address and never your real one.
You also choose a display name (nickname) and an avatar inside the app.
To let the AI coach build a realistic daily plan, the app asks about your routine and stores your answers: schedule type, working hours, the part of day when you have most energy, free time blocks, energy type, hobbies, what blocks you, your preferred language, and the hours of your morning and evening check-in window.
Subscription status, subscription events, and your RevenueCat customer identifier. Payments are processed entirely by Apple. We never receive or store your card number or billing details.
If you allow notifications, we store a device push token so reminders and season announcements can reach your phone. You can revoke this at any time in iOS Settings.
If you join a season, your display name, avatar and season XP appear on the public leaderboard visible to other players. Nothing else is shown — not your email, not your tasks, not your goals, not your conversations with Oryn. If you prefer not to be listed, do not join a season, or choose a display name that does not identify you.
Oryn's coaching, day plans and chat replies are generated by Anthropic's Claude models. When you use those features, the relevant context — your message, your profile answers, your goals and your recent tasks — is sent to Anthropic for processing so a reply can be produced.
Requests never go directly from your phone to Anthropic; they pass through our own server function, which holds the API key and enforces your usage limits. We log only metadata about each call — the type of call, the number of tokens used, the model and the timestamp. The content of your messages is not stored in that log.
Anthropic processes the data as our service provider and, under its commercial terms, does not use it to train its models.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and running your account | Performance of a contract |
| Generating plans and coaching replies | Performance of a contract |
| Processing subscriptions and purchases | Performance of a contract |
| Sending reminders and season notifications | Consent (iOS permission you grant) |
| Enforcing usage limits and preventing abuse | Legitimate interest |
| Keeping the service secure and working | Legitimate interest |
We use the following providers. Each processes data only to deliver its part of the service.
| Provider | What it handles | Where |
|---|---|---|
| Supabase | Database, authentication, server functions, push delivery | EU (Frankfurt, eu-central-1) |
| Anthropic | AI processing for plans and chat | United States |
| Apple | Sign in with Apple, payments, push notification delivery | Global |
| Google Sign-In only | Global | |
| RevenueCat | Subscription management | United States |
Your account data is stored in the European Union. Transfers to providers in the United States rely on the European Commission's Standard Contractual Clauses.
Under the GDPR you have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to processing, and withdraw consent at any time.
To exercise any of these, email p.dzunic@outlook.com. We reply within 30 days. You may also complain to your national data protection authority.
Email p.dzunic@outlook.com from the address linked to your account, or use the in-app account deletion option where available in your version. Deleting your account permanently removes your profile, goals, tasks, habits, check-ins, conversations, progress and any virtual items. This cannot be undone, and purchased virtual items are not refundable.
Oryn is not intended for children under 13, and in the European Economic Area not for children under 16. We do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Data is transmitted over TLS and stored encrypted at rest. Database access is restricted by row-level security rules so one account cannot read another's data. Your session credentials are stored in the iOS Keychain. No system is perfectly secure, but we take these measures seriously.
If we change this policy we will update the date at the top of this page. Significant changes will be announced inside the app.
Predrag Džunić — Serbia
p.dzunic@outlook.com
Ova politika objašnjava koje lične podatke iOS aplikacija Oryn: Life RPG („Oryn", „aplikacija") prikuplja, zašto ih prikuplja, sa kim ih deli i koja prava imaš nad njima.
Oryn razvija i održava Predrag Džunić, samostalni programer iz Srbije, u svojstvu rukovaoca podacima.
Kontakt za sva pitanja privatnosti: p.dzunic@outlook.com
Prijavljuješ se preko Apple ili Google naloga. Tvoju lozinku za te naloge nikada ne vidimo niti čuvamo. Iz prijave dobijamo mejl adresu i, ako je dostupno, ime. Ako koristiš Sign in with Apple uz Hide My Email, dobijamo isključivo Apple-ovu posredničku adresu, nikada tvoju pravu.
U aplikaciji biraš i nadimak i avatar.
Da bi AI coach mogao da napravi realan dnevni plan, aplikacija pita o tvojoj rutini i čuva odgovore: tip rasporeda, radno vreme, doba dana kada imaš najviše energije, slobodne termine, tip energije, hobije, šta te koči, jezik, i sate jutarnjeg i večernjeg check-in prozora.
Status pretplate, događaji vezani za pretplatu i tvoj RevenueCat identifikator. Plaćanje u celosti obrađuje Apple. Broj kartice i podatke za naplatu nikada ne dobijamo niti čuvamo.
Ako dozvoliš notifikacije, čuvamo push token uređaja da bi podsetnici i obaveštenja o sezonama mogli da stignu do telefona. Dozvolu možeš povući u iOS podešavanjima.
Ako se pridružiš sezoni, tvoj nadimak, avatar i sezonski XP pojavljuju se na rang listi koju vide ostali igrači. Ništa drugo se ne prikazuje — ni mejl, ni zadaci, ni ciljevi, ni razgovori sa Orynom. Ako ne želiš da budeš na listi, nemoj se pridruživati sezoni ili izaberi nadimak koji te ne identifikuje.
Savete, dnevne planove i odgovore u chatu generišu Anthropic Claude modeli. Kada koristiš te funkcije, relevantan kontekst — tvoja poruka, odgovori iz upitnika, ciljevi i skorašnji zadaci — šalje se Anthropic-u na obradu da bi se dobio odgovor.
Zahtevi nikada ne idu direktno sa tvog telefona ka Anthropic-u, nego kroz našu serversku funkciju koja drži API ključ i sprovodi ograničenja. Beležimo isključivo metapodatke o pozivu — tip poziva, broj tokena, model i vreme. Sadržaj tvojih poruka se u tom logu ne čuva.
Anthropic podatke obrađuje kao naš obrađivač i, po svojim komercijalnim uslovima, ne koristi ih za treniranje modela.
| Svrha | Pravni osnov (GDPR čl. 6) |
|---|---|
| Kreiranje i vođenje naloga | Izvršenje ugovora |
| Generisanje planova i saveta | Izvršenje ugovora |
| Obrada pretplata i kupovina | Izvršenje ugovora |
| Slanje podsetnika i obaveštenja o sezonama | Pristanak (iOS dozvola) |
| Sprovođenje limita i sprečavanje zloupotreba | Legitimni interes |
| Bezbednost i ispravan rad servisa | Legitimni interes |
| Provajder | Šta obrađuje | Gde |
|---|---|---|
| Supabase | Baza, autentifikacija, serverske funkcije, slanje push poruka | EU (Frankfurt, eu-central-1) |
| Anthropic | AI obrada planova i chata | SAD |
| Apple | Sign in with Apple, plaćanje, isporuka notifikacija | Globalno |
| Isključivo Google prijava | Globalno | |
| RevenueCat | Upravljanje pretplatama | SAD |
Podaci o nalogu čuvaju se u Evropskoj uniji. Prenos ka provajderima u SAD oslanja se na standardne ugovorne klauzule Evropske komisije.
Po GDPR-u imaš pravo na pristup podacima, ispravku, brisanje, prenosivost, ograničenje obrade, prigovor i povlačenje pristanka u svakom trenutku.
Za bilo koje od ovih prava piši na p.dzunic@outlook.com. Odgovaramo u roku od 30 dana. Pritužbu možeš uputiti i nadležnom organu za zaštitu podataka.
Pošalji mejl na p.dzunic@outlook.com sa adrese povezane sa nalogom, ili iskoristi opciju brisanja naloga u aplikaciji ako je dostupna u tvojoj verziji. Brisanjem naloga trajno nestaju profil, ciljevi, zadaci, navike, check-in podaci, razgovori, napredak i svi virtuelni predmeti. Radnja je nepovratna, a kupljeni virtuelni predmeti se ne refundiraju.
Oryn nije namenjen deci mlađoj od 13 godina, a u Evropskom ekonomskom prostoru ni mlađoj od 16. Njihove podatke svesno ne prikupljamo. Ako smatraš da je dete napravilo nalog, javi nam i obrisaćemo ga.
Podaci se prenose preko TLS-a i čuvaju šifrovani. Pristup bazi je ograničen pravilima na nivou reda (row-level security), pa jedan nalog ne može da čita podatke drugog. Podaci o sesiji čuvaju se u iOS Keychain-u. Nijedan sistem nije savršeno bezbedan, ali ove mere shvatamo ozbiljno.
Ako menjamo ovu politiku, ažuriraćemo datum na vrhu stranice. Značajne izmene biće najavljene u samoj aplikaciji.
Predrag Džunić — Srbija
p.dzunic@outlook.com