Skip to content
Legal

Privacy policy

Last updated

The short version

Orbit stores the flights you type in. It does not track you around the internet, show ads, or sell anything about you to anyone. It does keep a record of a few things you do inside the app so we can tell whether the app works — that is described in full below, because it is the one part people are usually surprised by.

Who we are

Orbit is made and operated by SC QWERTYBIT SRL, fiscal code RO38120209, Constantin Voda 16, Bucharest, Romania. Under the GDPR we are the data controller for everything described here.

For anything in this policy — including access, correction or deletion requests — write to office@qwertybit.com. We have not appointed a Data Protection Officer; we are not required to at our size, and that address reaches the people who can actually act.

What we process, and why

Everything Orbit holds, what it is for, and the legal basis we rely on:

Your logbook

The flights you enter — airport codes, dates, times, aircraft, seat and any notes — plus the trips and legs derived from them, and the totals computed from those (distance, hours, countries, continents, badges, XP and level). This is the product. Legal basis: performance of the contract — we cannot give you a logbook without storing your logbook.

Your account

Your email address, and a display name, avatar image, home city and home country if you choose to add them. Orbit signs you in with a one-time code rather than a password, so we never hold a password for you. Signing in with Google gives us your email address and display name and nothing else. Legal basis: performance of the contract.

Using Orbit without an account

You can use Orbit as a guest. Your logbook then lives only on your device and we hold none of it. Creating an account later moves that data to the account so it survives a new phone. Note that the app activity record described below is sent while you are a guest.

Pro purchases

Whether you hold a Pro entitlement, and the identifiers Google Play and RevenueCat use to tell us so. Payment is taken by Google — we never see your card details, name or billing address. Legal basis: performance of the contract.

Friends and invitations

If you use the friends feature we store the connection between the two accounts. If you invite someone by email, we store that person's email address so we can send the invitation and recognise it when they accept. Legal basis: performance of the contract with you, and our legitimate interest in letting people invite friends. If you have been invited to Orbit and would rather we did not hold your address, email us and it will be removed.

App activity

This is the part worth reading properly. Orbit records a short trail of what happens inside the app, so we can tell whether it is working: signing in, adding a flight, removing a flight, and the three steps of a purchase (started, outcome, completed). Each record holds the event name, a small amount of context about it — a route and distance for a flight, a plan and status for a purchase — and the time.

Each record is tagged with a device identifier: a random string generated on first launch, stored on your device. It is not an advertising identifier, it is not shared with anyone, and it cannot be used to track you outside Orbit. It does deliberately persist when you create an account, which is what lets us see that someone who tried the app as a guest went on to sign up.

These records never contain your email address, your name, or the contents of your notes. Legal basis: our legitimate interest in understanding whether the product works. We considered this against your interests: the data is minimal, it is never used to make a decision about you, it is never combined with anything from outside Orbit, no third party receives it, and no screen in the app or elsewhere can read it back. If you disagree, you can object — see your rights below.

The website

This site sets no cookies and carries no advertising scripts. It uses Vercel Analytics to count page views and which buttons get pressed. That is deliberately the least invasive option available: it stores nothing on your device, gives you no persistent identifier, and cannot follow you to another website. We see totals, not people. Legal basis: legitimate interest in knowing which pages are read.

If you join the launch waitlist we receive the email address you type, which phone you picked, the page you submitted it from, the country your request came from and your browser's user agent. It goes to our Slack and is used once — to tell you Orbit has launched. Legal basis: your consent, which you can withdraw at any time by emailing us.

What we never do

  • No location tracking. Orbit needs to know where you have been, and you tell it by typing it in.
  • No access to your contacts, photos (beyond an avatar you pick), calendar or messages.
  • No advertising identifiers, no ad networks, no ad SDKs of any kind.
  • No selling or renting of personal data. Ever, on any tier.
  • No automated decision-making or profiling with legal or similarly significant effects.

Who else touches your data

These are our processors. Each acts only on our instructions, under a data processing agreement, and none receives your data for their own purposes.

  • Supabase — database, authentication and file storage. Holds your account and logbook.
  • Google Play and RevenueCat — purchases and entitlement status.
  • Resend — transactional email: sign-in codes and friend invitations.
  • Slack — receives website waitlist signups.
  • Vercel — hosts this website and provides its cookieless analytics.

Orbit also fetches destination photographs from Wikipedia and Wikimedia Commons. Those requests identify the app, not you, and carry no account information.

We may also disclose data where we are legally required to, or to establish or defend legal claims.

Where your data goes

Some of the processors above are established outside the European Economic Area, principally in the United States. Where personal data is transferred outside the EEA, it is protected by the European Commission's Standard Contractual Clauses, or by the provider's certification under the EU–US Data Privacy Framework, or both. You can ask us for details of the safeguards in place for any specific transfer.

How long we keep it

  • Your account and logbook — until you delete your account. Deletion is immediate and permanent.
  • App activity records — 24 months, then deleted. If you delete your account sooner, the link to you is severed immediately and what remains is an unattributed count that cannot be traced back.
  • Invitations — until accepted, or until they expire.
  • Waitlist emails — deleted once the launch email has been sent, or sooner if you ask.
  • Purchase records — as long as required by Romanian tax and accounting law.

How it is kept safe

All traffic is encrypted in transit. The database enforces row-level security, so one account cannot read another's data even if the app asked it to. The app activity table has no read access at all from any client — it can only be written by our own server functions, and only read by us. Account deletion runs server-side with privileges the app itself does not hold.

Your rights

Under the GDPR you have the right to: access the data we hold about you; have it corrected; have it erased; restrict or object to how we use it — including the app activity record described above; receive it in a portable form; and withdraw consent where consent is the basis, without affecting what came before.

You can exercise most of these yourself: Pro exports your full logbook from inside the app, and Settings deletes your account and everything attached to it. There is also a deletion request page if you no longer have the app installed. For anything else, email office@qwertybit.com — we answer within 30 days, and it is free.

If you think we have got this wrong, you can complain to the Romanian supervisory authority, the ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest — dataprotection.ro. You may also complain to the authority where you live.

Children

Orbit is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.

Google Play Data safety

For cross-checking against our Play listing, this is what Orbit collects in Google's categories. Nothing is shared with third parties for advertising, and no data is sold.

  • Personal info — email address, name (display name), user IDs. Collected, linked to you, for account management and app functionality. Optional: photo.
  • App activity — in-app actions, as described above. Collected, linked to you while you hold an account.
  • Device or other IDs — the device identifier described above. Collected, linked to you, for analytics.
  • Financial info — purchase history (entitlement status only; no payment details reach us).
  • App info and performance — crash and diagnostic data, if you have opted in at the operating-system level.
  • Not collected — location, contacts, calendar, messages, photos other than an avatar you choose, health, or browsing history.

Data is encrypted in transit, and you can request deletion both in the app and at our deletion page.

Changes

If this policy changes in a way that affects you, we will say so in the app and on this page before the change takes effect. The date at the top is always the date of the current version.

Contact

SC QWERTYBIT SRL, Constantin Voda 16, Bucharest, Romania. Questions, requests or complaints: office@qwertybit.com.

This policy is published at orbitflights.app/privacy and applies to the Orbit mobile app (8,801 airports, offline) and this website.