Terms of Use

Effective date — 29 August 2026.

1 · Who we are

Orma is made and cared for by a detail-obsessed traveller and data enthusiast in Auckland, New Zealand, operating as a sole operator — not a company. No team, no board, no investors: just the tool its maker wanted for their own multi-city trips, opened up to everyone who plans the same way.

We say this up front because it's the honest scale of the operation, and because it shapes the rest of these terms. Replies come from the maker, decisions are made by the same hands that live with them — and Orma is a young product, still finding its feet.

In these terms, "we", "us" and "our" mean Orma and its maker. "You" and "your" mean the person using Orma.

2 · What Orma is — and what it isn't

Orma is a planning tool. It helps you organise trips: itineraries, scenarios, events, wishlists, packing lists, and shared plans.

It is important that you understand what that does and does not mean.

Orma is:

• A place to record, structure and think about your own travel plans
• A way to share those plans with people you choose
• A way to connect an AI assistant to help you build and adjust plans, if you want one

Orma is not:

• A booking system. We do not make, hold, confirm or guarantee any reservation.
• A travel agent, tour operator, carrier, or accommodation provider.
• A source of truth for travel information.

Everything Orma shows you about the outside world — flight times, opening hours, weather, exchange rates, transit connections, links to booking sites — is an aid to planning, not a guarantee. It may be sourced from third parties, may be out of date, and may be wrong.

Before you travel, confirm the details with the airline, hotel, operator or provider directly. Do not rely on Orma alone for anything you can't afford to get wrong.

3 · Agreeing to these terms

You agree to these terms by accepting them when you first sign in — you'll be shown these terms and asked to read to the end before agreeing. We record which version you accepted and when.

If we make a significant change — one that materially affects your rights or how you can use Orma — we'll tell you in the app at least 30 days before it takes effect, we'll say what changed, and we'll ask you to read and accept the updated terms the same way before you continue. If you keep using Orma after that date, the new terms apply to you. If you'd rather not accept them, you can export your data and close your account at any time before the change takes effect — see section 11.

Smaller changes take effect when we publish them. Fixing a typo or a broken link, making wording clearer without changing what it means, or describing something the product already does — none of that changes what you've agreed to, so we won't interrupt you to re-accept it. We'll move the "last updated" date at the top so you can see that something changed. If a change we thought was small turns out to affect your rights, we'll treat it as a significant one and give you the 30 days.

We'll only make changes for a reason we can explain: to reflect new features, to comply with the law, or to keep the terms accurate as the product develops.

4 · Your account

Sign-in is handled by our authentication provider, through the sign-in provider you choose (such as Google or Microsoft) — Orma never sees or stores a password. You're responsible for activity under your account and for keeping that sign-in method secure. If you think someone else has access, secure the account you sign in with — change that provider's password and review its security settings — then sign out of Orma on any shared devices.

One person per account. Accounts are personal. If you want to plan with someone, share the trip (section 6) — don't share the login.

You must be at least 16 to use Orma. If you're under 16, please don't create an account.

You must be able to enter into a binding contract where you live.

5 · Your content

Your trips are yours. Trips, scenarios, events, notes, wishlists, packing lists and everything else you enter remain your content. We don't claim ownership of any of it.

The licence you give us. To run the service, you grant us a non-exclusive, worldwide, royalty-free licence to host, store, reproduce, transmit, display and process your content — solely for the purpose of providing Orma to you and the people you share with. That licence includes the right to sub-licence to the infrastructure providers we use to run the service (for example our database, hosting and authentication providers), strictly to the extent they need it to perform those functions for us.

This licence lasts as long as your content is in Orma, plus the period your content persists in our backups (section 11). It ends when your content does. We don't use it for anything else.

We do not use your content to train AI models, and we don't hand it to anyone else to train on. Your trips are not training data.

One honest caveat: if you choose to connect your own AI assistant (section 7), what gets sent to that assistant's provider is governed by their terms, not ours. Some providers train on what you send them unless you turn that off in their settings. We can't control that and we won't pretend otherwise — it's worth checking your settings with them.

Analytics. We may use aggregated, de-identified information about how Orma is used to understand and improve the product. This never identifies you and never exposes the substance of your trips.

Export. You can export a copy of your data — trips, scenarios, events, wishlists, packing lists and preferences — in a portable format, at any time, for free.

6 · Sharing and collaboration

When you share a trip, the people you invite can see it, and — if you make them editors — change it. You control membership and can remove access at any time.

Changes are attributed and logged. The log is visible to the trip's members. That means if you make a change to a shared trip, the other members can see that you made it, and when.

How sharing works: by invitation, inside Orma. To invite someone, you enter their email address in the trip's sharing panel and choose their role. There's no public join link — a trip is only ever shared with a specific address you type in. The invitation is delivered inside Orma: the person sees it only once they sign in with that same email address and accept it. We don't send an email on your behalf — Orma has no mailing system.

If you invite someone, you're giving us their details. When you enter another person's email address to invite them, you're providing us with their personal information, and we hold it. You confirm that you're entitled to do that, and that they'd reasonably expect you to.

What we hold, and for how long. Until the person accepts, their email address sits in a pending invitation. If they never accept, the invitation expires after 14 days and can no longer be used; you can also revoke it yourself at any time. A revoked or expired invitation is kept as a record — but the person it named can ask us to delete their email address (see the Privacy Policy), and we will.

Please don't use invitations to contact people who haven't agreed to hear from you.

7 · AI assistants

Orma does not contain any AI

There is no chatbot in Orma. There is no AI writing your itinerary. We do not run an AI model, and no AI of ours reads your trips.

Orma is a planning tool. You put things in, Orma organises them and shows them to you. That's it.

But you can connect your own AI assistant, if you already use one

Some people use an AI assistant day to day — ChatGPT (made by OpenAI), Claude (made by Anthropic), or something similar. If you're one of them, Orma gives you the option to let your assistant work with your trips, so you can say "add my Tokyo flight on the 13th" instead of filling in a form.

If you don't use an assistant, or don't want one anywhere near your travel plans, do nothing. The rest of this section won't apply to you, and Orma works exactly the same.

Here is precisely what connecting one means.

It's your assistant, not ours.
ChatGPT is OpenAI's product. Claude is Anthropic's. We didn't build them, we don't run them, we don't pay them and they don't pay us. You already have your own account with them, under your own agreement with them, and that agreement — not this one — governs how they handle what you send. Orma simply opens a door. You decide whether to walk through it.

Nothing is connected unless you connect it.
The option lives in your account settings and it is switched off. Connecting is a deliberate act by you. We will never connect an assistant on your behalf, or turn one on in an update.

You choose what it can reach.
When you connect an assistant, you approve the scope — what it's allowed to see and do. It gets that and nothing beyond it.

Your trip data goes to them when you use it.
This is the part to be clear-eyed about. If you connect ChatGPT, your trip data goes to OpenAI so ChatGPT can answer you. If you connect Claude, it goes to Anthropic. That's not a side effect; it's how it works. Once it's there, it's covered by their privacy policy, not ours. We can't reach into their systems and get it back.

Nothing changes inside your trip without you.
An assistant cannot edit a trip's contents. It can only propose changes — proposals sit there doing nothing until you open Orma, read them, and approve them. This is deliberate, and it is the single most important thing to understand about how Orma works with AI.

Nothing gets deleted without you either.
Removing an event, deleting a scenario and its events, or deleting a whole trip are all held for you in the same way. An assistant cannot destroy any of them on its own. Because deleting a scenario or a trip cannot be undone — there is no trash, and we cannot bring it back from a backup — approving one asks you to confirm a second time before it runs. Deleting a trip can only be approved by its owner.

The narrow exceptions.
Under read-and-write access, some things do happen directly rather than waiting for you: creating a new trip, creating a new scenario (which can copy an existing scenario's events into it, so you have two versions to compare), switching which scenario is the active one, leaving advisory notes on a trip (its own read of pacing or timing, shown beside Orma's own checks and labelled with the assistant's name — you can dismiss any of them), and any change to your wishlist. That includes deleting a wishlist entry, which we do not yet hold for review — though a deleted wishlist entry goes to Recently deleted and can be restored for 30 days, so it is the one deletion that isn't final. If you want a harder guarantee, grant read-only or per-trip access instead.

Read-only means read-only. A connection you set to read-only cannot write anything at all — not your itinerary, not your wishlist, not even an advisory note. It can read your trips and answer questions about them, and that is the whole of it.

Assistants get things wrong.
They misread times, invent details, confuse timezones, and say things confidently that aren't true. We don't warrant anything an assistant produces. Read every proposal before you approve it, and apply section 2 — confirm anything that matters with the airline, hotel or operator.

Shared trips: check with the people you're travelling with.
If you connect an assistant to a trip you share with other people, their information in that trip goes to your assistant's provider too. They may not expect that. Before you connect an assistant to a shared trip, make sure the other members are comfortable with it. Any changes your assistant proposes to a shared trip are visible to the trip's members, attributed to the assistant by name — but the conversation is yours to have.

You can disconnect at any time.
One switch in your settings, effective immediately. Nothing further is sent. Data already sent is subject to your assistant provider's policies — see above.

We don't train anything on any of this.
Not your trips, not your proposals, not your conversations.

ChatGPT is a trade mark of OpenAI. Claude is a trade mark of Anthropic. We name them only to describe what Orma can work with. We are not affiliated with, endorsed by, sponsored by, or partnered with either company, and this list is an example rather than a promise — assistants Orma works with may change over time.

8 · Acceptable use

Don't:

• Attempt to access other people's data, or probe, scan or test the security of the service
• Use Orma to store unlawful content, or to spam people with invitations
• Resell the service, scrape it at scale, or overload it
• Use Orma to break the law, or to help anyone else do so

If you breach this section, we may suspend or close your account under section 11.

Indemnity. If someone brings a claim against us because of unlawful content you stored, or your breach of this section, you'll cover our reasonable losses and costs arising from it. This doesn't apply to the extent the claim is caused by something we did wrong, and it doesn't apply where the law doesn't allow it.

9 · The service, as it stands

Orma is young and improving quickly. We'll provide updates needed to keep it working as described in section 2, and we'll tell you about significant changes.

We aim to keep Orma available, but we don't promise uninterrupted service. We may need to take it down for maintenance, and things break. Where we can give notice, we will.

We may change or discontinue features. If we discontinue something significant, or the service as a whole, we'll give you reasonable notice and time to export your data.

Nothing in this section limits your rights under any consumer law that applies to you. See section 13 and the annex for your country.

10 · Fees, and how Orma pays for itself

Orma is free. There's no paid plan, no trial, and no credit card.

How we cover the costs

Running Orma costs money — servers, domains, the boring stuff. To cover that, some links in Orma to booking sites and operators may be affiliate links. If you click one and book something, the company you booked with may pay us a small commission.

You pay exactly the same price either way. The commission comes out of their margin, not your pocket. There is no Orma surcharge, and no Orma discount.

We think you should know five things about this.

1. Using them is entirely optional.
Affiliate links are a convenience, not a requirement. Book directly, book through a competitor, book by phone, book nothing — Orma doesn't care and won't nag you.

2. It has no bearing on your access to Orma.
Whether you use affiliate links constantly or never touch one, you get the same Orma. Same features, same limits, same everything. We don't track your bookings to decide what you're worth. There is no tier here.

3. Money does not decide what you see.
This is the important one. Commission does not influence what Orma shows you, how results are ordered, or what gets recommended. We do not sell placement. We do not rank a hotel higher because it pays better. If that ever changes, we will say so clearly, in the product, at the point you'd see it — not quietly, in an updated version of this document.

4. Please shop around.
We are not a price comparison service and we're not trying to be. An affiliate link is a shortcut to somewhere you can book — it is not our opinion that it's the best deal available to you. Do your own research. Prices, routes and deals vary enormously by who you are, where you're booking from and when. You will often do better elsewhere, and we'd genuinely rather you did than that you booked badly through us.

5. We're not the seller.
If you book through an affiliate link, your contract is with that company, not with us. We're not the travel agent, carrier or operator, and section 2 still applies. If something goes wrong with the booking, they're who you deal with.

What we can see

We see aggregated performance data — how many clicks and bookings came from Orma overall, so we know whether this is keeping the lights on.

We don't use it to build a profile of you, we don't sell it, and it doesn't feed back into what Orma shows you.

If this ever changes

If we introduce paid plans:

• We'll publish pricing in advance and give existing users notice before anything changes for them.
• Prices shown to New Zealand consumers include GST. Prices shown elsewhere will state clearly what taxes are included.
• Nothing you created will be held hostage. Export stays free, permanently, on every plan and after you stop paying.

If you're in the EEA or UK, section C.3 of the annex sets out your right to change your mind.

11 · Ending things

You can leave at any time. Close your account from your account settings — deletion is self-serve, with a 7-day grace window in case you change your mind.

What happens when you do:

• We delete or de-identify your personal information within 30 days.
• Backups are purged on a rolling 90-day cycle, so your content may persist in encrypted backups for up to that long after deletion. We don't restore deleted accounts from backups.
• In trips you shared with other people, your changes remain in the trip's history so the trip still makes sense to its remaining members — but your entries are de-identified. Your name and email are removed.
• We keep the minimum records we're legally required to keep, for as long as we're required to keep them.

We can end things too. We may suspend or close your account if you breach these terms. We'll give you notice and a chance to put it right, unless the breach is serious or we're legally unable to. If we close your account for a reason other than your breach, we'll give you a reasonable opportunity to export first.

12 · Our rights

Orma — the software, the brand, the name, the design — is ours. These terms don't give you any rights in it beyond using the service as intended.

Feedback. If you send us an idea, suggestion or feature request, we're free to use it without owing you anything. We appreciate it, but we can't run a product where good ideas create obligations. Please don't send us anything confidential.

13 · Liability

First, and most importantly: nothing in these terms limits or excludes any right or remedy you have under consumer law that cannot be limited or excluded. If a consumer protection law where you live gives you a right, you have that right, regardless of anything in this section. The annex sets out how this works in New Zealand, Australia, and the EEA and UK.

Subject to that:

(a) Our liability is capped. To the maximum extent the law allows, our total aggregate liability to you for all claims relating to Orma in any 12-month period is limited to the greater of:

• the amount you paid us in the 12 months before the claim arose; or
• NZ$500.

(b) We're not liable for indirect loss. To the maximum extent the law allows, we're not liable for indirect or consequential loss, or for loss of profits, revenue, or opportunity.

(c) Some things aren't our responsibility at all. We're not liable for the acts or omissions of third parties — airlines, hotels, operators, booking sites, AI assistant providers, or the sources of the travel information Orma displays. See section 2.

(d) If you use Orma in trade. If you use Orma for business purposes, you agree that the New Zealand Consumer Guarantees Act 1993 and sections 9, 12A, 13 and 14(1) of the Fair Trading Act 1986 do not apply, and that it is fair and reasonable to be bound by this. Equivalent business-use exclusions in other countries apply to the extent the law permits. If you're in Australia, section B.2 of the annex explains how this works there.

14 · Privacy

How we handle personal information is set out in our Privacy Policy, which forms part of these terms.

In short: we collect what we need to run Orma, we tell you what we're doing, we don't sell your data, we don't train models on it, and you can get it out whenever you want.

15 · Third-party services

Orma uses third-party services to work — mapping and place data, authentication, hosting, and travel information sources.

Where a third-party provider requires it, their terms apply to your use of the parts of Orma that rely on them. Because Orma's mapping and places features are built on Google Maps Platform, when you use them you are also bound by Google's Terms of Service (including the Google Maps / Google Earth Additional Terms of Service) and Google's Privacy Policy.

Links to booking sites and operators are provided for convenience, and some of them may be affiliate links that earn us a commission — see section 10, which explains exactly how that works and what it doesn't affect. Either way, we don't control those sites, we don't endorse them, and we're not responsible for them. Your contract for anything you book is with them.

16 · General

Governing law. These terms are governed by New Zealand law.

Where disputes are heard. The New Zealand courts have non-exclusive jurisdiction. But if you're a consumer, you may also have the right to bring proceedings in the courts where you live, and to rely on the mandatory consumer protections of your own country. Nothing here takes that away from you.

Assignment. You can't transfer your rights under these terms. We may transfer ours — including to a New Zealand company formed to operate Orma, or if Orma is later acquired or restructured — provided your rights under these terms are not reduced. We'll tell you if that happens. If Orma moves into a company, that company takes over this agreement on the same terms, and the annex for your country continues to apply unchanged.

Severability. If a court finds any part of these terms unenforceable, the rest keeps working.

No waiver. If we don't enforce something straight away, we haven't given up the right to enforce it later.

Entire agreement. These terms, the annex for your country, and our Privacy Policy are the whole agreement between us about Orma.

Things outside our control. We're not liable for failures caused by events beyond our reasonable control — infrastructure outages, natural disasters, and so on. We'll do what we reasonably can to restore service.

Notices. We'll tell you about anything important in the app — announcements, term changes, and anything affecting your account all surface there.

Annex — Country-specific terms

These annexes add to the terms above. They only ever give you more rights, never fewer. If anything in the main terms conflicts with the annex for your country, the annex wins.

Annex A — New Zealand

A.1 Consumer Guarantees Act. If you're a consumer under the Consumer Guarantees Act 1993, that Act gives you guarantees that cannot be excluded. Nothing in these terms limits them. Section 13(a) and 13(b) apply only to the extent the CGA permits.

A.2 Fair Trading Act. Nothing in these terms limits your rights under the Fair Trading Act 1986.

A.3 Business use. Section 13(d) applies where you use Orma in trade.

A.4 Complaints. If you think we've breached the Fair Trading Act, you can contact the Commerce Commission at comcom.govt.nz.

Annex B — Australia

B.1 Australian Consumer Law. Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these terms excludes, restricts or modifies those guarantees. Section 13(a) and 13(b) apply only to the extent the ACL permits.

B.2 Limitation where permitted. To the extent the ACL permits us to limit our liability for failure to comply with a consumer guarantee, our liability is limited to resupplying the service or paying the cost of resupply.

B.3 Complaints. You can contact the ACCC at accc.gov.au.

Annex C — European Economic Area and United Kingdom

C.1 Your local law still applies. Although these terms are governed by New Zealand law, that does not deprive you of the protection of the mandatory consumer law of the country where you live. You can bring proceedings in your local courts.

C.2 Digital content and services. Your rights under the Digital Content Directive (EU) 2019/770, or the UK Consumer Rights Act 2015, apply to Orma — including where you use Orma without paying money. If Orma doesn't conform to what we've described in section 2, you have rights to have it brought into conformity, and to a price reduction or termination where it isn't. Section 9 does not limit those rights.

C.3 Right to withdraw. Orma is free and there is nothing to buy today. If we ever introduce a paid plan, you would have 14 days to change your mind and get a refund, without giving a reason, and we would provide the required withdrawal form at checkout. If you asked us to start supplying immediately and acknowledged that you'd lose the withdrawal right once supply begins, you'd be charged for what you'd used.

C.4 Data protection. We process personal information in accordance with the UK/EU GDPR. Our Privacy Policy sets out our lawful bases, your rights (access, rectification, erasure, restriction, objection, portability), and how to exercise them.

C.5 Our representative. Responsibility under the UK and EU GDPR sits with Orma and its owner (see section 1), who is also your point of contact for anything data-protection related.

C.6 AI transparency. Where Orma uses an AI system that interacts with you or generates content, we tell you, in accordance with Article 50 of the EU AI Act. See section 7.

C.7 Complaints. You can complain to your national data protection authority, or to the UK ICO.

Annex D — Everywhere else

Sections 1–16 apply. New Zealand law governs, and the New Zealand courts have non-exclusive jurisdiction. If the consumer law where you live gives you rights that can't be excluded, you have them, and nothing in these terms limits them.