← Back to home
Privacy Policy
Orbit is developed by Ali Vira ("I", "me", or "we"). This Privacy Policy explains what information is collected when you use the Orbit app ("App"), how it is used, and your rights regarding that information.
1. Information I Collect
Information you provide directly
| Data | Purpose |
|---|---|
| Email address | Account creation and authentication |
| Friend names | Core app functionality — tracking your relationships |
| Friend photos | Displaying your contacts within the app |
| Friend birthdays (month & day; year optional) | Birthday reminders on your home screen |
| Friend notes | Personal context you add to a friend's profile |
| Activity records (date, type, optional notes) | Logging moments and tracking when you last connected |
| Meeting cadence preferences | Calculating when you're due to reconnect |
| Snooze settings | Temporarily deferring reminders |
Information collected automatically
Usage data is collected via Google Firebase Analytics — including screen views, feature interactions, and general usage patterns. This data is aggregated and used solely to improve the App.
Information from third-party sign-in
If you choose to sign in with Google or Apple, I receive your email address and basic profile information made available by that provider in accordance with the permissions you grant.
2. How Your Information Is Used
Your data is used only to provide and improve Orbit. Specifically:
— To authenticate your account and keep your data private
— To display your friends, reminders, and activity history within the App
— To calculate upcoming connection reminders and birthday alerts
— To improve the App based on aggregated, anonymised usage patterns
I do not sell your personal information to anyone, ever.
3. How Your Information Is Stored
Your data is stored securely across the following infrastructure providers:
| Service | What it stores | Privacy policy |
|---|---|---|
| Supabase | Account credentials, friend profiles, activity records, app settings | supabase.com/privacy |
| Cloudflare R2 | Friend photos you upload | cloudflare.com/privacypolicy |
| Google Firebase | Aggregated, anonymised usage analytics | firebase.google.com/support/privacy |
| Apple (Sign in with Apple) | Authentication — name and email address only (email may be private relay) | apple.com/legal/privacy |
All data stored in Supabase is protected by Row Level Security (RLS) — a database-level policy ensuring your data is only ever accessible by your own account.
Friend photos are scanned by the Google Cloud Vision API for content moderation before being stored in Cloudflare R2. Photos are transmitted to Google's servers solely for this purpose and are not retained by Google beyond the moderation check. See Google's Cloud Privacy Notice for details.
4. Sharing of Information
I do not share, sell, rent, or trade your personal information with third parties for their own commercial purposes. Information is shared only with the infrastructure providers listed in Section 3, and only to the extent necessary to operate the App.
5. Data Retention
Your data is retained for as long as your account is active. If you request account deletion, all of your data — including friend profiles, activity records, photos, and account credentials — will be permanently deleted within 30 days.
6. Your Rights and Choices
You have the right to:
— Access the personal data stored about you
— Correct inaccurate information at any time within the App
— Delete your data by requesting account deletion
— Export a copy of your data upon request
To request account deletion or a data export, email friendsinorbitsupport@gmail.com. I will respond within 30 days.
7. Children's Privacy
Orbit is not directed at children under the age of 13. I do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information through the App, please contact me and I will promptly delete it.
8. Security
I take reasonable technical and organisational measures to protect your information, including encrypted data transmission (TLS) and database-level Row Level Security. No method of transmission over the internet is 100% secure, however, and I cannot guarantee absolute security.
9. Changes to This Policy
If I make material changes to this Privacy Policy, I will update the "Last updated" date at the top of this page. For significant changes, I may also notify you within the App. Continued use of the App after changes are posted constitutes acceptance of the updated policy.
10. Contact
If you have questions about this Privacy Policy or want to exercise your data rights, please get in touch:
Ali Vira
friendsinorbitsupport@gmail.com