Privacy Policy for Orbit

1. Introduction

Welcome to Orbit ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Orbit (the "App").

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the App.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and display name when you create an account
• Contact Information: Names, phone numbers, email addresses, birthdays, addresses, and other details you enter for your contacts
• Profile Information: Your personal contact information that you choose to save in the app
• Custom Fields: Any additional information you choose to add to contact records
• Group Information: Names and organization of contact groups you create

2.2 Information Collected Automatically

• Device Information: Device type, operating system, and app version
• Usage Data: How you interact with the App, features used, and frequency of use
• Authentication Data: Information from third-party authentication services (Google Sign-In, Sign in with Apple)

2.3 Information from Third Parties

• Device Contacts: With your explicit permission, we import contacts from your device's contact list
• Social Authentication: Basic profile information (name, email) when you sign in with Google or Apple

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: To create, maintain, and sync your contact information across your devices
• Account Management: To create and manage your user account
• Contact Management: To store, organize, and manage your contacts and groups
• Notifications: To send birthday reminders and other notifications you have enabled
• Synchronization: To sync your data between your device and our cloud storage
• Improve the App: To understand how users interact with the App and improve features
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Communication: To respond to your inquiries and provide customer support

4. Data Storage and Security

4.1 Cloud Storage

Your data is stored securely using Google Firebase, a trusted cloud platform. All data is:

• Encrypted in transit using industry-standard SSL/TLS protocols
• Stored in secure data centers with restricted access
• Protected by Firebase security rules ensuring you can only access your own data
• Backed up regularly to prevent data loss

4.2 Local Storage

Some data is cached locally on your device to enable offline functionality. This local data is:

• Limited to 50MB to protect device storage
• Protected by your device's security features (passcode, biometric authentication)
• Cleared when you log out or delete the app

4.3 Security Measures

We implement appropriate technical and organizational security measures, including:

• Email verification for new accounts
• Secure authentication using Firebase Authentication
• Role-based access control ensuring data isolation between users
• Regular security updates and monitoring

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.2 Service Providers

We share information with trusted service providers who assist us in operating the App:

• Google Firebase: Cloud hosting, authentication, and database services
• Google Cloud Functions: Backend processing and notifications
• Stripe: Payment processing for premium features (if applicable)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent fraud or abuse of the App
• Protect the safety of users or the public

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your information at any time through the App's settings.

6.2 Delete Account

You can delete your account and all associated data at any time through the App's profile settings. This action is permanent and cannot be undone.

6.3 Contact Data

You can add, edit, or delete individual contacts at any time. When you delete the App, all locally stored data is removed from your device.

6.4 Permissions

You can manage app permissions (contacts, notifications, camera, photos) through your device settings.

6.5 Export Data

You can export your contact data at any time. Contact us to request a copy of your data.

7. Permissions Explained

The App requests the following permissions to provide its services:

• Contacts: To import and sync contacts from your device's contact list
• Notifications: To send birthday reminders and other alerts you enable
• Camera: To take photos for contact profiles (optional)
• Photo Library: To select existing photos for contact profiles (optional)
• Internet: To sync your data with cloud storage and enable authentication

All permissions are optional except for internet access, which is required for the App to function.

8. Children's Privacy

The App is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child without parental consent, please contact us immediately, and we will delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those of your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. When you delete your account:

• All contact data is immediately deleted from our database
• Your user profile is permanently removed
• Authentication records are deleted
• Backup copies are deleted within 30 days

We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention).

11. Third-Party Links and Services

The App may contain links to third-party websites or integrate with third-party services (e.g., Google Sign-In, Sign in with Apple). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete your personal information
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data includes:

• Consent: You have given explicit consent for specific purposes
• Contract: Processing is necessary to provide the services you requested
• Legitimate Interests: Processing is necessary for our legitimate business interests

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

15. Contact Us

16. Your Consent

By using the App, you consent to this Privacy Policy and agree to its terms. If you do not agree with this policy, please do not use the App.