Privacy Policy

1. Who We Are

Orbi is a chat and event messaging app operated from Denmark. If you have questions about your data or this policy, contact us at hello@orbichat.io.

2. What We Collect

We collect only the personal data reasonably necessary to provide, secure, and improve the service:

• Phone number
• Username (this does not have to be your real name)
• Profile photo (optional)
• Date of birth (optional)
• Device and security-session information
• Relationships and event activity you create through Orbi
• Support reports and limited technical and usage information

We process chat and event content to provide the service. We do not analyze private message or attachment content for advertising, targeting, or commercial statistics. We may process structured event and activity information, such as event category, broad area, views, registrations, attendance, and time, to create the aggregate statistics described below.

If you choose to provide your date of birth, it will be visible to other users (e.g. your friends or connections) to enable birthday features.

We may collect limited technical and usage data to improve performance, reliability, and security.

3. How We Use Your Data

• Create and manage your account
• Provide user-to-user communication
• Allow you to host and join events
• Display birthdays and enable birthday-related features
• Improve service performance and security
• Create privacy-protected aggregate statistics about app, event, and community activity
• Provide organizers and business customers with statistics about their activities and anonymous benchmarks

We do not use your personal data for advertising or targeting. We do not sell personal data, personally identifiable information, user-level activity histories, or access to individual profiles.

4. Aggregate Statistics

Orbi may create, use, and provide privacy-protected aggregate statistics to event organizers, community operators, partners, researchers, or other business customers. Examples include totals and trends for event interest, registrations, attendance, retention, categories, broad geographic areas, and times.

Through the aggregate statistics service, these recipients do not receive personal data, private communications, contact relationships, precise location histories, individual activity histories, or data that is intended to identify a person. We use aggregation thresholds and other safeguards to reduce the risk that individuals can be identified from statistics.

5. Legal Basis for Processing

We process your personal data in accordance with GDPR based on:

• Performance of a contract, to provide the Orbi service
• Legitimate interests, to improve performance, security, and reliability
• Legitimate interests in measuring and developing privacy-protected event and community services, where those interests do not override your rights
• Consent, where required by law

6. Data Retention

We retain your data only as long as necessary to provide the service. When you delete your account, your data is removed from our active systems within a reasonable time, except where retention is required for legal or security purposes.

Technical and activity information used to produce statistics is retained only as long as reasonably necessary for its stated purpose. Statistics may be retained for longer when they have been aggregated so that they no longer identify individual users.

7. Data Deletion and Control

You can:

• Delete your account at any time
• Delete your chats and events manually
• Edit or remove your date of birth in account settings
• Request a copy or correction of your data by contacting us

8. Third-Party Services and Aggregate Recipients

We use trusted third-party services, such as hosting and analytics, that process data on our behalf. These providers are bound by data processing agreements and GDPR standards.

Organizers, partners, researchers, and business customers may receive the privacy-protected aggregate statistics described in section 4. They do not receive personal data or access to individual Orbi profiles through the statistics service.

Some providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

9. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Object to or restrict certain kinds of processing
• File a complaint with your local Data Protection Authority

10. Data Security

We implement reasonable security measures to protect your information. While no system is 100% secure, we take data protection seriously and regularly review our practices.

11. Children’s Privacy

Orbi is not intended for children under the age of 13, and we do not knowingly collect personal data from them.

If we become aware that such data has been collected, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email.

13. Contact

If you have questions about this Privacy Policy or how your data is handled, contact us at hello@orbichat.io.