← Back to home

Privacy Policy

Last updated: July 19, 2026

At Orbit, we believe maintaining friendships shouldn't come at the cost of your privacy. This policy explains what data we collect, why we collect it, and what we do with it. We've kept it short and clear — no legalese mazes.

1. Who we are

Orbit ("we," "us," or "our") is an app that helps people maintain long-distance friendships through shared prompts and moments. This policy covers how we handle information collected through our mobile app and website at heyorbit.me.

2. What we collect

2.1 Account information

When you sign up, we collect:

2.2 Location and timezone

With your permission, we collect your location to:

Location is optional — you can decline it and set your timezone manually instead. We use it only for the two purposes above. Other people never see your exact coordinates or address — only your general area and the distance between you.

2.3 Content you create

We collect and store the content you create within the app:

2.4 Usage data

We log basic usage data to keep the app running smoothly and improve features:

2.5 Notification tokens

If you enable notifications, we store a Firebase Cloud Messaging (FCM) token so we can send you reminders when prompts arrive or friends respond.

3. How we use your information

We use your data only for the following purposes:

We do not sell your data. Ever. Not to advertisers, not to data brokers, not to anyone.

4. Who can see what

The core of Orbit is the "reveal" mechanic — your responses are only visible to a friend after both of you have responded to the same prompt. Until then, your response is private.

5. Third-party services

Orbit is built on Google Firebase. We share data with these services as part of running the app:

Each of these has its own privacy policy. We've selected them because they meet industry-standard privacy and security practices.

6. How long we keep your data

7. Your rights

You can do all of the following from within the app or by contacting us:

To exercise any of these rights, email us at privacy@heyorbit.me. We respond within 30 days.

8. Children's privacy

Orbit is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we've collected data from a child under 13, contact us at privacy@heyorbit.me and we'll delete it.

9. GDPR (Europe)

If you're in the European Economic Area, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority. The legal basis for our processing is your consent (which you give when you sign up) and our legitimate interest in providing the service.

10. CCPA (California)

California residents have the right to know what personal information we collect, request deletion, and opt out of any "sale" of personal information. We don't sell data, so the opt-out option doesn't apply, but you can still request access or deletion at any time.

11. Security

We use industry-standard security practices: encrypted connections (HTTPS), encrypted storage, Firestore security rules that restrict access to your data, and Firebase's managed infrastructure. No system is perfectly secure, but we take this seriously.

12. Changes to this policy

If we make significant changes, we'll notify you in-app and via email before they take effect. Minor wording changes will just be updated here with a new "last updated" date.

13. Contact

Questions? Concerns? Want a data export? Email us at privacy@heyorbit.me.

We tried our best to make this readable, but if anything is unclear, just ask.