Legal
Privacy Policy
Last updated: 22 July 2026
Ordano is a local-first, all-in-one life-management app for tasks, notes, habits, journal, finances and calendar. Privacy is the foundation of the product: by default your data lives on your own device, and we never sell it.
Who we are
Ordano ("Ordano", "we", "us") provides the Ordano web and mobile application available at ordano.live and app.ordano.live. For any privacy question you can contact us at privacy@ordano.live.
Local-first by design
Everything you create in Ordano — tasks, notes, habits, journal entries, transactions and calendar events — is stored locally on your device (in your browser's IndexedDB storage). You can use the entire app without an account and without your data ever leaving your device.
Account & authentication
Creating an account is optional and only required to enable multi-device cloud sync. Authentication is handled by Supabase Auth. Depending on the method you choose, we process:
- Email & password or magic link: your email address.
-
Google Sign-In: your basic Google profile — name, email
address and profile picture. We request only the
openid,emailandprofilescopes. Ordano does not access your Gmail, Google Drive or other Google data through sign-in.
Optional cloud sync
If you sign in and enable sync (a Pro feature), the content of your Ordano modules is stored in our database (hosted by Supabase) so it can be mirrored across your devices. Data is transmitted over encrypted connections (HTTPS/TLS) and protected by row-level security so that each account can only access its own records. You can stop syncing at any time and wipe your local copy from the app's System page.
Google Calendar
Ordano may optionally offer a read-only Google Calendar import
so you can view your events alongside your Ordano agenda. This feature is opt-in:
it runs only if you explicitly connect your calendar, uses the
calendar.readonly scope, imports events for display only, and never
writes to or shares your calendar. You can disconnect it at any time, which
revokes the access token and removes the imported data.
Payments
Paid plans are handled by Lemon Squeezy, our Merchant of Record. When you purchase a plan, Lemon Squeezy processes your payment and billing details under its own privacy policy — Ordano never sees or stores your full card number. We receive only the information needed to activate your subscription (such as your plan, status and billing period).
What we do not do
- We do not sell or rent your personal data.
- We do not show ads or use advertising trackers.
- We do not use your content to train models or profile you.
Google API disclosure. Ordano's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Your rights
You can access, export or delete your data directly from the app (System → Export / Import, and Sign out & wipe). To delete your cloud account and all associated server-side data, contact privacy@ordano.live and we will process your request.
Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected here with a new "Last updated" date.