Privacy Policy
Last updated August 2026
Orbit is a messaging app with seller storefronts built in. This policy explains what we collect, why, and how long we keep it.
What we collect
- Your account — name, email address, phone number, and password (stored only as an argon2id hash, never in readable form). Date of birth and a profile photo are optional.
- Your messages — see the encryption section below.
- Your shop, if you open one — shop name, contact number, product names, prices and photos. This is public by design: a shop page is meant to be shared.
- Orders — what was ordered, the delivery address you type, and the status history.
- Device information — platform and a push token, so we can deliver notifications and ring your phone for calls.
Your contacts
When you tap "Find contacts", your phone sends us the numbers in your address book so we can tell you which of them already use Orbit. We compare and discard. Numbers belonging to people who are not on Orbit are never written to our database. We never upload names, email addresses, or anything else from your address book.
Your messages are end-to-end encrypted
Message text is encrypted on your phone before it is sent. Our servers store the encrypted bytes and hold no key that can open them, so we cannot read your conversations and cannot hand their contents to anyone else.
Photos, files and voice notes are encrypted the same way before upload.
Order confirmations and status updates are written by the server rather than by you, so those specific messages are not encrypted — the server has to generate them.
How long we keep things
- Messages — once every recipient's device has downloaded a message, the copy on our server is deleted, along with any photo or voice note attached to it. For a group, that means when every member has received it.
- Undelivered messages — kept at most 30 days, then deleted whether they were delivered or not.
- Orders — kept beyond that window. An order thread is often the only record a buyer and seller have of what was agreed, and disputes arise long after delivery.
- Your account — kept until you delete it.
Because delivered messages are removed from our servers, the copy on your phone is usually the only copy. Losing your phone can mean losing that history.
Who we share with
We do not sell your data and we do not share it for advertising. We use service providers to run the app: hosting (Contabo, Germany), email delivery for sign-in codes, and Google Firebase for push notifications. They process data on our instructions only.
We may disclose information if the law requires it — but note that we cannot produce the contents of encrypted messages, because we cannot read them.
Your choices
- Edit or remove your profile details at any time in Settings.
- Turn off any notification channel independently.
- Block another user, or report a shop or person.
- Delete your account — in the app under Settings, or at https://orbit.braine.agency/account/delete without installing anything. This removes your profile, shop, products, messages and order history permanently and cannot be undone.
Children
Orbit is not intended for children under 13, and we do not knowingly create accounts for them.
Contact
Questions about this policy: support@orbit.braine.agency