Privacy policy

Updated: September 22, 2026

This notice covers the ORVIO app and its information and support website.

1. Information in the app

Recorded or imported audio, voice features, reference transcripts, input text, generated audio, history, drafts and preferences are stored in the app’s private area on your device. They are used for speech generation, playback, history and restoring preferences. Voice features are used for synthesis, not identity authentication.

2. On-device processing

Once the model is downloaded, generation works offline. This version has no accounts, advertisements or analytics SDKs and does not automatically send recordings, text, history or diagnostics to the operator. Operating-system diagnostics follow your device settings and the OS provider’s policies.

3. Model download

When you choose to download or re-download the model, ORVIO retrieves approximately 884 MB over HTTPS from Hugging Face and its delivery infrastructure. The provider receives and may log connection information such as your IP address, request path, time and HTTP headers. Recordings and input text are not included. See Hugging Face’s privacy policy.

4. Microphone and file selection

Recording begins only after you press Record and grant OS microphone permission. Recording status and elapsed time are shown, and recording stops after 15 seconds. You can revoke permission in device settings.

For audio import, ORVIO reads only the file you choose through the OS file picker, converts it on-device and saves a copy in the app’s private storage. Import does not need microphone permission or broad access to your files. The original is not changed or deleted. Choosing a cloud-hosted file may require a download by the file provider, whose policies apply.

5. Retention and deletion

Delete voices and their features in Register voice, generated files in History, and models in Settings. Clear the text field to clear a draft. Deleting a voice does not delete audio already created with it. There is no automatic expiry. Deleting an imported voice in ORVIO does not delete the external source file.

When previewing existing audio, ORVIO may create a temporary volume-adjusted copy without changing the original. The copy is normally removed when playback stops.

Uninstalling deletes app-local data. iOS Offload App may retain it. Audio and model storage are configured to be excluded from OS backups, but ORVIO cannot control every OS transfer or diagnostic feature.

6. Export, sharing and links

Save and Share pass the selected file to your chosen destination using the OS interface. Cloud storage and external apps follow their own policies. Deleting in ORVIO does not remove exported copies. External links disclose normal web connection information, but ORVIO does not add recordings or input text to URLs.

7. This website

The website is hosted on Cloudflare Pages. Cloudflare may process connection information, including IP addresses, requested pages and device/browser information, to deliver and secure it. The operator does not install independent analytics, advertising tags, tracking cookies or contact forms. This does not mean Cloudflare’s own delivery and security services process no data. See Cloudflare’s privacy policy.

8. Email support

If you contact us, the operator receives your email address and the content you send to respond, resolve issues and address abuse. Gmail is used, so its provider also processes the correspondence. See Google’s privacy policy. Information is retained as needed to handle your inquiry and removed when no longer needed, except where legal obligations or disputes require retention.

9. Requests and changes

Contact the operator below to request access, correction or deletion of correspondence held by the operator. We may make proportionate identity checks and respond under applicable law. The operator cannot access audio stored only on your device; delete it in the app. Additional rights and the right to complain to a supervisory authority may apply where you live. Refer to the providers’ notices for their cross-border processing.

If purposes or recipients change, this notice will be updated and any required notice or consent provided. Future monetization is not enabled in this version.