Orbit

Privacy Policy

Last updated: March 23, 2025

Orbit ("we", "us", or "our") operates the Orbit mobile application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using Orbit, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Information you provide directly:

• Account information: Phone number or email address, name, username, date of birth, and optional profile photo.
• Content: Check-ins (including place name and coordinates), hangouts, captions, photos, and comments you post.
• Messages: Conversations and messages sent to other users via the app.
• Support communications: Information you send us when requesting help.

Information collected with your permission:

• Contacts: With your permission, your device contacts' phone numbers are sent to our server to identify which of your contacts already use Orbit. We use these numbers only to generate suggestions in real time — they are not stored on our servers after the request completes.
• Location: Precise location when you actively create a check-in. We do not track your location in the background.

Information collected automatically:

• Push notification token: A device token used to deliver push notifications to your device.
• Usage data: App interactions such as RSVPs, friend requests, and notification reads, used to operate the service.

2. How We Use Your Information

We process your information to:

• Create and manage your account (necessary to perform our contract with you).
• Display your profile and content to users you choose to share with.
• Match your contacts against existing Orbit users for friend suggestions (with your consent).
• Send push notifications about activity relevant to you.
• Respond to support requests.
• Detect and prevent abuse, fraud, and safety issues (legitimate interest).
• Improve and develop the Service (legitimate interest).

3. Sharing of Information

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share information only in these circumstances:

• With other users: Your profile, check-ins, and hangouts are visible to the users you choose (friends, orbit members, or invitees).
• Service providers: We use third-party providers including Twilio (SMS delivery), Expo (push notifications), UploadThing (file storage), and cloud database hosting. These providers act as data processors and are contractually required to protect your data.
• Legal requirements: If required by law, subpoena, or court order, or to protect the rights, property, or safety of Orbit, our users, or others.
• Business transfers: If Orbit is acquired, merged, or its assets transferred, your information may be part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal information as long as your account is active. When you delete your account, your profile, check-ins, hangouts, messages, and photos are permanently deleted within 30 days. Aggregate or anonymized data may be retained indefinitely. Some data may be retained longer where required by law.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information (available in app Settings).
• Deletion: Request permanent deletion of your account and associated data (available in app Settings or at enterorbit.co/delete-account).
• Portability: Request your data in a portable format.
• Objection / Restriction: Object to or restrict certain processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent (e.g. contacts access), you may withdraw at any time via your device settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at contact@enterorbit.co. We will respond within 30 days.

Device permissions you can revoke at any time:

• Location: Revoke in device Settings. You will not be able to create check-ins without it.
• Contacts: Revoke in device Settings. Friend suggestions based on contacts will be disabled.
• Notifications: Manage in app Settings → Notifications, or in device Settings.

6. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, contact us at contact@enterorbit.co. We will not discriminate against you for exercising these rights.

7. EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following applies:

• Data controller: Orbit, C. F. Møllers Allé 59, 2300 Copenhagen, Denmark (contact: contact@enterorbit.co).
• Legal bases: We process your data on the basis of contract performance (providing the Service), consent (contacts access, location), and legitimate interests (safety, fraud prevention, service improvement).
• International transfers: Your data is stored and processed in the United States. Transfers outside the EEA are made under standard contractual clauses or other appropriate safeguards as required by GDPR.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

Orbit is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

9. Security

We use industry-standard measures to protect your information, including HTTPS encryption for data in transit and secure credential storage. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or by other means before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of Orbit after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

For questions, requests, or concerns about this Privacy Policy or your personal data, contact us at:

contact@enterorbit.co