Last updated: 7 July 2026
Oropod is a media asset management app, made by Oropod AS (organisation number 936 855 520), a company registered in Norway. This policy explains how we collect and handle your personal data when you use the Oropod app, our backend service at api.oropod.com, and this website. Oropod AS is the data controller for that processing.
Oropod is designed to work with your own storage and the services you already use. Much of your data stays on your device or flows directly between your device and the services you connect, so we only receive what is described below.
When you create an Oropod account, our authentication provider Clerk stores your email address and a user identifier on our behalf. We use these to identify you, secure your account and associate your workspaces with you. Our backend stores your email address and the identifiers of the workspaces you can access.
If you use Oropod-hosted storage, the media files, derived versions (such as compressed previews) and related metadata you upload are stored in our cloud storage so you can reach them across your devices. You control this content and can add or remove it at any time.
Oropod can connect to other services that you already use. When you connect one, you sign in to that service directly from the app on your device, and any access tokens are stored securely in your device’s Keychain. Because this happens on your device, we do not receive your sign-in credentials or your account details for those services. Connecting a service is always your choice, and you can disconnect it at any time. Folders shared over your local network are likewise accessed directly from your device, and their contents are not sent to us.
To keep the app reliable we use Sentry to collect crash and error reports. These reports are configured to exclude personal data. We never send your IP address, and identifiers such as email addresses are replaced with pseudonymous short codes before they leave your device, so reports can be correlated without revealing who you are.
Subscriptions are sold and processed by Apple through the App Store. We receive your subscription status from Apple so we can unlock paid features. We do not receive your payment card details.
This website uses Umami, a privacy-focused analytics tool hosted in the EU. It is cookieless and collects only aggregate, non-identifying statistics.
Some data is kept only on your device and is never sent to us, including a local cache of file metadata for offline use, downloaded files, and credentials held in the Keychain.
We use the personal data we collect to:
Where the GDPR applies, we rely on the following legal bases.
We do not sell your personal data. We share it only with service providers that process it on our behalf, under contract and only as needed to run Oropod.
We may also disclose data where required by law. As our infrastructure evolves we will keep this list up to date.
If you connect a third-party service such as Frame.io, the connection runs directly between your device and that service, and your use of it is governed by their own privacy policy.
Some of our providers are located outside the EEA, in particular Clerk in the United States. Where personal data is transferred there, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
We keep your account and content data for as long as your account is active. If you close your account or ask us to delete your data, we remove it within a reasonable period, except where we must keep certain records to comply with the law. Diagnostic data is retained only for a limited period.
We protect your data with encryption in transit, secure credential storage in the device Keychain, access controls on our backend, and the pseudonymisation of diagnostic data described above.
If the GDPR applies to you, you have the right to access, correct, delete, restrict or object to our processing of your personal data, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, contact us at info@oropod.com. You also have the right to lodge a complaint with the Norwegian Data Protection Authority or your local supervisory authority.
When you use Oropod to store media that contains other people’s personal data, you are the controller of that content and Oropod AS acts as your processor. If you need a data processing agreement, contact us at info@oropod.com.
Oropod is a professional tool and is not directed to children. We do not knowingly collect personal data from children.
We may update this policy from time to time. We will post any changes on this page and update the date shown above.
For general inquiries as well as questions about this policy or your data, please contact us at info@oropod.com or the address below:
Oropod AS
Postboks 6 Risum
1761 Halden
Norway
Organisation number 936 855 520.