Orbdit · Privacy

Privacy Policy

1. Who we are

Orbdit is provided by Truffle Techs L.L.C-FZ, a company registered in the United Arab Emirates (free zone).

For privacy matters or general support you can reach us at contact@truffletechs.com.

2. Our privacy posture in one line

Orbdit is designed to collect as little as possible. Your wishes, notes, photos, journey answers and reflection writing are stored on your device, with the backup and sharing choices explained below. We do not sell your data or display ads in Orbdit. We do not use Apple's advertising identifier (IDFA) or Android's advertising identifier, or track you across other apps or websites. On iOS, Orbdit does not request App Tracking Transparency permission. Limited campaign measurement is described below.

3. What data we collect

We collect limited purchase, diagnostic and usage data to operate and improve Orbdit. Some records use a random installation identifier or a hashed purchase identifier instead of your name. These are pseudonymous identifiers, not a guarantee that the records are completely anonymous. We do not use them for cross-app tracking:

Private content stored on your device

• Your wish text and structured wish details
• Sighting notes
• Photos you attach to a sighting (chosen with the system photo picker)
• Guided journey answers, linked wishes, weekly reflection writing and opened-week records
• Library search text, which filters the library locally

Orbdit does not upload this private content to our servers. Journeys use authored questions, and weekly reflections are assembled on your device without sending your writing to an external AI service. Eligible app data may be included in backups or device transfers controlled by your operating system and your settings. Those backups are separate from Orbdit's servers; you can manage them through your device and backup provider.

Reflection and journey share cards exclude your personal words by default. If you choose words or a photo, preview a card and share it, the image and a general Orbdit link pass to the destination you select through the system share sheet. That destination's privacy practices apply. Saving a card places the image in your photo library or gallery. Orbdit's sharing analytics do not include your private words, image or source-record identifiers.

4. How we collect it

• Automatically, as limited app telemetry through the services named above.
• Through purchase services, when Apple, Google Play and RevenueCat process purchases or restoration. Our counter receives authenticated RevenueCat notifications and stores only the Founding fields listed above; other notification fields are discarded instead of added to the ledger.
• From you, if you email us at contact@truffletechs.com (we then hold that correspondence to reply).

Orbdit does not ask you to enter a name, email, phone number, address or payment details to use the app. It does not request access to your contacts, location, health records or microphone. Apple handles iOS payments and Google Play handles Android payments; those providers may supply purchase information needed to deliver or support a purchase. We do not receive your payment card or bank details. If you contact us, we receive the information you choose to include in that correspondence.

5. Who we share it with

We use the following services for the limited processing described above:

• RevenueCat: subscription/purchase management and restoration.
• PostHog: product analytics and campaign measurement, configured to use its EU service.
• Sentry: scrubbed crash and performance reporting.
• Apple: iOS App Store purchases, system services and platform-managed campaign measurement.

Google provides Google Play purchases and install-referrer information on Android. Railway hosts our Founding counter and database. Previously published iOS versions also use Apple's CloudKit public database for the legacy counter; the updated reader uses our shared hosted counter.

We do not sell data to brokers or use a third-party advertising SDK. Session recording and replay are disabled in our diagnostics and analytics configuration. On Android, permitted install-referrer campaign fields can be attached to analytics. On iOS, Apple Ads campaign fields can be attached to analytics, and Apple's SKAdNetwork reports limited conversion information to the participating advertising network, including TikTok. This measurement does not use IDFA or Android's advertising identifier. We use no third-party AI service that receives your private content.

6. How long we keep it

• On-device data (wishes, notes, photos, journeys and reflections) remains in the app until you delete it or remove the app. Device backups and images you previously saved or shared are controlled separately and are not erased by the app's local deletion command (see §9).
• Analytics, crash and performance data are retained according to the applicable provider retention settings. You can contact us about retention or a privacy request.
• Purchase status persists as needed to provide and restore subscriptions and one-time purchases. Apple, Google Play and RevenueCat also maintain purchase records under their own policies.
• Founding purchase records are retained to preserve the lifetime offer total and prevent duplicate counting. The counter currently has no automatic expiry for its minimal sale, delivery and import-audit records. A refund or local data deletion does not erase those records or reopen a sold spot. You may contact us with a privacy request; this is separate from deleting your local writing.

7. How we protect it

All network traffic uses standard HTTPS/TLS encryption in transit. On-device app data is protected by the operating system: iOS data protection on Apple devices and Android's app-private storage and device protections on Android. Device backups follow your operating system and backup-provider settings. Access to processor dashboards is limited and credential-controlled.

8. Push notifications

Orbdit can send notifications, but only ones you schedule yourself (for example your chosen sync-window time, and optional opt-in reminders). All notifications are scheduled locally on your device. We run no notification server.

• What's in a notification: generic text only (for example “It's 11:11. Make a wish.”). Your wish text and any personal information never appear in a notification.
• Categories: all notifications are transactional (things you asked for). We send no marketing, promotional, or re-engagement notifications.
• How to control them: turn categories on or off in Orbdit's Settings, and control system permission in iOS Settings → Notifications → Orbdit or Android Settings → Apps → Orbdit → Notifications (the Android labels may vary by device).

9. Your privacy choices and rights

Depending on where you live (EU/EEA/UK under GDPR, California under CCPA/CPRA, Brazil under LGPD, India under DPDPA, and others), you have rights over your data. Some records use installation or purchase identifiers rather than a name, so a request may require information that lets us locate the relevant record. You can always:

• Delete your data: remove your on-device content in Settings → Privacy → Delete all data. This does not automatically delete purchase-provider records, the Founding counter, device backups or images you previously exported.
• Ask us questions or make a request: email contact@truffletechs.com.

GDPR / UK (EU, EEA, UK)

Legal bases: performance of contract (delivering Orbdit+ and app functionality) and legitimate interests (limited analytics and stability). You may access, rectify, erase, restrict, port, or object to processing, and you may lodge a complaint with your supervisory authority. We do not carry out automated decision-making with legal effect. You may also withdraw consent where processing relies on consent. Contact us for information about the processing that applies to your request; the international-processing information below does not limit these rights.

California (CCPA / CPRA)

Where California privacy law applies, you may request to know, access, delete or correct personal information, opt out of its sale or sharing, and limit uses of sensitive personal information, subject to the law's conditions and exceptions. You have the right not to be discriminated against for exercising these rights. You may send a request to the contact address above. This notice does not waive any rights you have under applicable law, including rights associated with legally recognized opt-out preference signals.

Brazil (LGPD) / India (DPDPA)

Where applicable law grants rights over your data, including access, correction and deletion, you can contact us at contact@truffletechs.com to exercise them.

10. Children's privacy

Our Terms of Use describe the eligibility rules for Orbdit. If you believe a child has provided personal information through Orbdit, contact contact@truffletechs.com so we can review the concern and take the steps required by applicable law. Store age ratings do not determine which privacy protections apply.

11. Widgets and Live Activities

Orbdit offers home-screen widgets on Android. On iOS it also offers lock-screen and StandBy widgets and a sync-window Live Activity. The displayed information is limited to items such as an angel-number glyph, countdown, generic wish-state badge and Founding theme. Your private wish text, notes, photos and reflection writing are not displayed on these surfaces. Widgets read a small cached display record on your device, using app-private storage on Android and an App Group on iOS. The widget display record does not contain your private writing. iOS Live Activities end automatically and can be dismissed.

12. International transfers

The services listed above may process information outside your country. Our PostHog integration is configured to use its EU service; this does not mean that every provider processes all data in the EU. You can contact us for information about the locations and transfer safeguards applicable to your data.

13. The Orbdit website

Separately from the Orbdit app, we measure visits to orbdit.com so we can see which pages people find useful. This uses Cloudflare Web Analytics, which counts page views in aggregate. It sets no cookies and stores nothing on your device, it does not follow you to other websites, and it does not build a profile of you. We see totals such as how many people viewed a page and which country a visit came from. We cannot identify you from it. This is separate from the app: what you write in Orbdit stays on your device, as described above.

14. Changes to this policy

If we make material changes, we will update the “last updated” date above and, where appropriate, notify you in-app. An update to this notice does not reduce your rights under applicable privacy law.

15. Contact

• Contact (privacy · support · legal notices): contact@truffletechs.com
• Provider: Truffle Techs L.L.C-FZ, United Arab Emirates

← Back to Truffle Techs