Orma
← Back to home

Privacy Policy

Last updated: June 2026

This policy explains in plain language how Orma collects and processes your personal data when you use the app. Orma is a free community app that helps reunite lost pets with their owners, report found or abandoned animals, and support adoptions from verified shelters and rescues. Our tagline is simple: “Find your friend”.

1. Who is the data controller

The data controller is Orma.

[Controller: to be updated with the company's details once incorporated. The project is currently run by an individual and no limited company (SRL) exists yet.]

For any privacy question or to exercise your rights, write to us at: info@orma.pet.

2. What data we process and why

We only collect the data we need to run the service. Specifically:

  • Email and display name: to create and manage your account (sign-up via Supabase Auth).
  • Phone number (optional): only if you choose to provide it, to make it easier for users to get in touch.
  • Approximate location: to send you “near you” alerts and to place reports on the map. On the public map, your location is obfuscated by about 150 meters to protect your privacy: we never show your exact position.
  • Uploaded photos: images of animals, of reports, and of shelters' documents.
  • Chat messages: the content you exchange with other users through the app.
  • Device token: a technical identifier needed to send you push notifications.

The purposes of processing are: managing your account, publishing and linking reports of lost, found or abandoned animals, sending you relevant alerts, enabling communication between users, supporting adoptions from verified shelters, and keeping the service secure.

3. Legal bases for processing

We process your data on the following legal bases:

  • Consent: for example, for using your location and sending push notifications, which you can turn on or off.
  • Performance of the service you requested: to manage your account and the features you use.
  • Legitimate interest: to keep the app secure and prevent abuse.

4. Providers and sub-processors

To run Orma we rely on a few trusted providers, who process data on our behalf:

  • Supabase — database and storage. The servers are located in the European Union, in Frankfurt (Germany).
  • Firebase (Google) — push notification delivery (FCM) and app crash reports (Crashlytics), to detect and fix issues.
  • OpenStreetMap / OpenFreeMap — map display.
  • Nominatim and Overpass — geocoding and searching for shelters on the map.

Orma contains no advertising, no ad tracking, and no third-party analytics tools. We do not sell your data to anyone.

5. How long we keep your data

We keep your data for as long as your account is active. Reports expire and are archived after 90 days. When you delete your account, your data is handled as described in the next section.

6. Account deletion

You can delete your account directly from the app, under Profile → Delete account. When you do:

  • your profile is anonymized;
  • your reports and sightings are removed (soft-delete);
  • your device tokens are deleted.

Alternatively, you can request deletion by writing to info@orma.pet.

7. Your rights (GDPR)

As a data subject, you have the right to:

  • access: know what data we process;
  • rectification: correct inaccurate data;
  • erasure: request deletion of your data;
  • restriction: limit processing in certain cases;
  • portability: receive your data in a readable format;
  • objection: object to certain processing.

To exercise these rights, write to us at info@orma.pet. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe your data is not being handled lawfully.

8. Minors

Orma is not intended for children under 16. If you are under 16, please do not use the service without the involvement of a parent or guardian.

9. No guarantee of results

Orma is a tool that helps reunite and adopt animals, but it does not guarantee any outcome. Users are responsible for the content they publish. Verified shelters are checked with the utmost care, but without a legal guarantee.

10. Changes to this policy

We may update this policy over time, for example to reflect new features or legal requirements. If we make significant changes, we will notify you through the app. The date of the last update is shown at the top of this page.