← Back to Ore

Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how hecara ("hecara", "we", "us") processes personal data when you use Ore, including the Ore desktop apps, our websites and the related cloud services (the "Service"). We collect only what we need to run the Service, and we never sell your personal data.

1. Information we process

Account information. Your email address, a hashed version of your password, and the display name and avatar you choose.

Devices. For each signed-in device: a device identifier, the operating system, the Ore version and when it was last active. We use this to manage your device limit and sessions.

Voice and dictated text. When you dictate, your audio is streamed to our servers for speech recognition, and the recognized text is processed to clean it up, format it or translate it. This content is processed to return your result and is not stored on our servers after the request completes, apart from short-lived technical caches. Your dictation history and notes are stored on your own device.

Ore Agent. When you use Ore Agent with Ore's cloud models, we store your conversations so you can see your history, together with any memory and "About me" information you give it. If you choose to use your own model or search service, your Agent requests go directly from your device to that provider, and your Agent personalization for that mode stays on your device.

Dictionary. Words and names you add, terms Ore learns from your corrections, and, only if you choose to import them, names from your system contacts. Your dictionary is stored with your account and sent with dictation requests to improve recognition of those words.

Usage and billing. Usage counters such as dictation time, text cleanup requests, Agent credits and token counts, and your plan and subscription status. Payments are handled by Stripe; we receive the payment status and the last details Stripe shares with us, but never your full card number.

Technical data. Request metadata such as timestamps, processing time, the type of request and error codes, which we use to keep the Service reliable and to prevent abuse. Ore does not use third-party analytics, advertising or tracking tools.

2. How we use information

  • to provide the Service, including speech recognition, text cleanup, translation and Ore Agent;
  • to manage your account, devices, plan, usage allowances and payments;
  • to keep the Service secure and reliable, and to detect and prevent fraud and abuse;
  • to send you service messages, such as email verification, password resets, renewal reminders and important changes;
  • to respond to your support requests;
  • to meet legal obligations.

We do not use your audio, dictated text or Agent conversations to train our own AI models, and we do not use them for advertising.

3. Service providers

We work with carefully selected providers that process data on our behalf, only as needed to deliver their part of the Service:

  • cloud hosting and infrastructure;
  • speech recognition providers;
  • AI model providers, for text cleanup, translation and Ore Agent;
  • a web search provider, when Ore Agent searches the web;
  • Stripe, for payments;
  • an email delivery provider, for account and service emails;
  • content delivery networks, for downloading the app and updates.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of assets, in which case this Policy will continue to apply to your data.

4. International transfers

Our servers are located in Singapore. Some of our service providers process data in other countries. Payments are collected through a Stripe account registered to an individual in Hong Kong SAR who operates hecara, so payment records are also held in connection with that account. Where data is transferred across borders, we take steps to ensure it receives a standard of protection comparable to that required under applicable data protection law, including the Personal Data Protection Act 2012 of Singapore.

5. Retention

  • Account, device, dictionary and Agent data is kept while your account is active, or until you delete it.
  • Audio and dictated text are not kept after processing, apart from short-lived technical caches.
  • Usage and request metadata is kept for as long as needed for billing, security and reliability.
  • Payment and invoice records are kept as required by tax and accounting law.

When you ask us to delete your account, we delete or anonymize your personal data within 30 days, except where we must keep it to meet a legal obligation.

6. Security

Data is encrypted in transit. API keys you enter for your own model or search service are encrypted on your device and are never sent to our servers. We limit access to personal data to the people who need it to run the Service. No system is perfectly secure, but we work to protect your data and will notify you of a breach where required by law.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can edit your profile, dictionary and Agent personalization in the app, and you can request any of the above by emailing us. We will respond within the time required by law. If you are not satisfied with our response, you may complain to your local data protection authority.

8. Permissions on your device

Ore asks for microphone access to record your voice, accessibility access to type text into other apps, and, only if you choose to import contacts, access to your contact names. You can change these permissions in your system settings at any time.

9. Children

Ore is not directed to children under 13, or under the minimum age for consent to data processing where they live. We do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

10. Changes to this Policy

We may update this Policy. If a change is material, we will notify you in the app or by email before it takes effect. The "Last updated" date shows when it was last changed.

Questions or requests about your privacy? Contact us at [email protected].