Orbit (referenced as "we", "our", or "the app") is committed to protecting your personal information. Orbit is built with a strict "privacy-by-design" philosophy: all data processed during your workouts remains 100% on your device.
1. Information Processing & Storage
All activity logs, GPS coordinate paths, step metrics, cadence metrics, and personal profile information (such as weight and workout targets) are stored locally on your device within an encrypted private SQLite database structure.
We do not own, operate, or maintain cloud database servers to compile or review your workouts. Your training routes, routines, and performance metrics are entirely your own and never sent to our servers.
2. Location Services (GPS Data)
To support outdoor lap counter functions, Orbit requires access to your device's Location services.
- Foreground Location: Tracks your coordinates to draw workout path polylines, measure point A distance, and trigger lap counts.
- Background Location: Permits the app to continue counting laps, tracking displacement, and playing audio voice notifications when the device screen is off or in your pocket.
- Privacy Guard: Location tracking only activates during an active workout session. Your coordinate files never leave your device unless you choose to share them manually.
3. Device Sensor Diagnostics
To support indoor gym tracking BLE-free, Orbit accesses local hardware sensors:
- Accelerometer & Gyroscope: Analyzes walking gait, calculates steps, and measures angular Z-axis yaw changes.
- Magnetometer: Measures magnetic field vectors at your start line calibration point.
This sensor processing is executed in real-time on-device. No sensor streams are compiled or uploaded.
4. Subscription Billing & Analytics
Orbit utilizes RevenueCat and the native Apple App Store to coordinate subscription billing for Orbit Pro. Purchases are secured using Apple's in-app purchasing mechanics. We do not gather or store payment credentials, credit card details, billing statements, or real names.
5. Strava Integration & Cloud Sync
Orbit offers optional integration with Strava for automated activity syncing:
- OAuth 2.0 Authorization: When you connect your Strava account, authentication occurs securely via Strava's official OAuth 2.0 flow. You never enter or share your Strava password with Orbit.
- Local Token Storage: Orbit exchanges the authorization code directly with Strava's servers for access and refresh tokens. These tokens are stored strictly within your device's private on-device SQLite database. We do not store or mirror your tokens on external third-party servers.
- Data Transmission: When you upload a session or enable Auto-Sync, workout telemetry (duration, lap counts, cadence, steps, and GPS route GPX data) is transmitted directly from your phone to Strava's API (API v3) over encrypted HTTPS.
- User Control: You can disconnect your Strava integration anytime in the app Settings or revoke Orbit's permissions in your Strava account settings. Disconnecting immediately removes all stored OAuth tokens from your device.
6. Contact Us
If you have questions regarding this Privacy Policy, please contact us at: senthil930@gmail.com.