ORCL

Privacy Policy

Worry Free TV. Guaranteed.

Last updated:

Orcl ("we", "us") builds family TV channels across the streaming services you already pay for. We collect as little as possible and never sell your data.

What we collect

  • Account: email address and password (authentication via Supabase; passwords are hashed, never stored in plain text).
  • Family profiles: profile names, age ranges, avatars, language preferences, and the channel programming preferences you set (era, rating cap, themes to skip, faith setting).
  • Connected services (Connected tier and up): OAuth tokens that let Orcl deeplink into Netflix, Disney+, Paramount+, and other services you connect. We store the tokens. We never see your service passwords.
  • Watch parties: playback state shared in real time among party members via Supabase Realtime — channel, current position, host actions.
  • Usage within Orcl: watch history, saved titles, channels you build, and Kids Mode screen time totals — all tied to a profile.
  • Parental PIN: stored only as a one-way bcrypt hash — we cannot read it back.
  • Subscription status: Basic, Connected, or Plus, via RevenueCat. Institutional (parish/school) accounts are billed via Stripe. We never see or store your card details — Apple, Google, and Stripe process all payments.
  • Sports preferences (Connected tier and up): your selected teams and leagues, used to assemble sports channels.
  • Analytics: anonymous product events (screen views, channel built, watch party started) via PostHog, used only to improve the app.

What we do not collect

  • We do not collect payment card numbers.
  • We do not sell or rent personal data to anyone.
  • We do not show third-party advertising inside Orcl.
  • We do not track what you watch inside other streaming apps — Orcl only hands you off to them.
  • We do not send notifications to children. Push notifications are parent-facing only.

Children

Orcl is designed for family use under a parent's account. Accounts are created by adults. Profiles for children store only a first name or nickname, an age range, and an emoji avatar. Kids Mode further restricts the experience — no search, no comments, no recommendations, no view counts.

Data storage and deletion

Data is stored with Supabase. You can delete a profile (and its history, saved items, and screen time logs) at any time in the app. Disconnecting a paid streaming service revokes and deletes the OAuth token immediately. To delete your entire account and all associated data, contact us and we will remove it within 30 days.

Third-party services

We rely on Supabase (database, auth, real-time sync), RevenueCat (consumer subscriptions), Stripe (institutional billing), PostHog (analytics), TMDb and JustWatch (catalog metadata), YouTube Data API (faith and Kids Mode content), Pluto TV (free live channels), and Sportradar (sports schedules). Each processes data only as needed to provide its function.

Contact

Questions about privacy: privacy@orcl.tv

This policy reflects how the Orcl app actually handles data. Have it reviewed by legal counsel and update the contact addresses before public launch.