Privacy policy
Last updated 22 October 2026
This policy explains what the Orbit habit-tracking app for Android (“Orbit”, “the app”, package com.orbit.com) collects, why, who it is shared with, and the choices you have. Orbit is operated by StuCompany (“we”, “us”). By using Orbit you agree to this policy.
1. What we collect
| Data | What exactly | Why |
|---|---|---|
| Account | Mobile number, the name you choose, your time zone, a 5-digit PIN and answers to security questions. The PIN and answers are stored only as one-way hashes; we cannot read them. | To create your account, log you in and let you recover it. |
| Rituals and progress | The rituals you create (name, note, goal, icon, colour), what you tick each day, water amounts, streak freezes, vacation dates and reminder settings. | This is the core of the app: showing your day, streaks, insights and reports. |
| Steps (Health Connect) | Your daily step total. With your permission Orbit also reads exercise sessions and sleep on your phone to tick matching rituals automatically; only the result (the ritual being ticked) is sent to our server. | Activity cards, step goals, and auto-ticking rituals. |
| Screen time (Usage access) | Your total screen time per day in minutes. If you use Focus mode, the list of apps you choose to block and the app currently on screen are used only on your phone and are never sent to us. | Screen-time insights, limits and Focus mode. |
| City (optional) | A city you search for when you turn on the smart water goal, and its coordinates. | Raising your water goal on hot days. |
| Friends and challenges (optional) | Your friend code, the buddies you add, and challenges you create or join. | Sharing streaks and challenges with people you choose. |
| Purchases | Which plan you bought, payment status, PayU transaction and mandate IDs, renewal dates. We never see or store your card number, UPI PIN or bank login. | Unlocking Orbit Plus and managing renewals and refunds. |
| Technical | Login sessions (a device name and when each session was last used) and basic server logs (such as IP address and time of a request) kept for security. | Keeping your account secure and the service running. |
Orbit does not collect your precise location, contacts, photos, files, messages or advertising ID. Orbit has no advertising and no third-party analytics or tracking.
2. Permissions on your phone
- Health Connect (steps, exercise, sleep) — read only, only if you allow it. Orbit uses Health Connect data solely to show your activity and tick your rituals, and does not use it for advertising or sell it.
- Usage access — to measure screen time and run Focus mode.
- Notifications, alarms, full-screen alerts, “display over other apps” — to deliver reminders as notifications, call-style or alarm alerts, and the Focus mode screen.
You can turn any of these off in your phone’s settings at any time; the related feature simply stops working.
3. Who we share data with
We do not sell your personal data. We share it only with these service providers, and only what they need:
- PayU India (payment processor) — when you buy Orbit Plus: your name, mobile number, an email placeholder created from your number, the amount, and the payment details you enter on PayU’s page. PayU handles payments and autopay mandates under its own privacy policy.
- Anthropic (AI provider) — only when you use the AI coach or describe a ritual for AI to fill in: your ritual names and completion statistics, or the text you typed. Your mobile number is not sent.
- Open-Meteo (weather) — only the name you search for and your city’s coordinates, from your phone, when the smart water goal is on.
- Hosting providers who run our servers and database on our behalf.
- People you choose — buddies and challenge members can see your display name and your challenge progress or streak.
- Authorities — if required by law or to protect the rights and safety of our users.
4. How we protect your data
All traffic between the app and our servers is encrypted with HTTPS. PINs and security answers are hashed, login tokens are stored securely on your phone, and accounts lock after repeated wrong PINs. No method is perfectly secure, but we work to protect your information.
5. How long we keep it
We keep your data while your account exists. Logins expire after about 60 days of inactivity. When you delete your account, your profile, rituals, history, reminders, metrics, friends, challenges and our copy of your payment history are deleted immediately, and any autopay is cancelled. PayU, as the payment processor, keeps its own records of transactions for as long as financial law requires.
6. Your choices and rights
- See and export your history any time (Orbit Plus: PDF and CSV export in the app).
- Correct your name and rituals in the app.
- Delete your account and data: in the app go to You → Security → Delete account, or follow these steps.
- Withdraw consent to Health Connect, Usage access or notifications in your phone’s settings, and turn off autopay in You → Orbit Plus.
Depending on where you live (for example under India’s Digital Personal Data Protection Act, 2023), you may have further rights such as grievance redressal. To use them, use the developer contact details on Orbit’s Google Play page.
7. Children
Orbit is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
8. Changes
If we change this policy we will update the date above, and tell you in the app if the change is significant.
9. Contact
Questions or requests about your privacy: use the developer contact details on Orbit’s Google Play page.