1 Overview
Orbit ("the app", "we", "our") is a personal life management app for tracking habits, todos, water intake, meals, workouts, and prayer times. This Privacy Policy explains what data the app collects, why, how it is stored, and your rights as a user.
By using Orbit, you agree to the practices described in this policy.
2 Data We Collect and Why
2.1 Data Stored Locally on Your Device Only
The following data is stored exclusively on your device in an encrypted database and is never transmitted to our servers or any third party:
| Data | Purpose |
|---|---|
| Name, gender, date of birth | Personalize the experience |
| Height, weight | Calculate hydration and nutrition goals |
| Sleep and wake schedule | Calculate your daily activity window |
| Habits and todos | Core tracking functionality |
| Meal and nutrition entries | Nutrition tracking |
| Water intake logs | Hydration tracking |
| Workout sessions and logs | Fitness tracking |
| Prayer completion records | Prayer tracking |
| App preferences and settings | Preserve your configuration |
This data is stored in an encrypted SQLite database on your device. It is never backed up to the cloud, shared with third parties, or accessible by us.
2.2 Location Data
Location is used only at the moment you trigger a prayer time calculation. The app requests approximate (city-level) location only — precise GPS location is never requested or used. Your location coordinates are transmitted to the AlAdhan Prayer Times API and OpenStreetMap Nominatim solely to determine your city for prayer time accuracy, and are never stored on our servers. Location is only accessed in the foreground while you are using the app — no background location access is used.
Location permission is entirely optional. As an alternative, Orbit includes a built-in offline list of cities and countries. You can select your city manually from this list without granting any location permission — your device location is never accessed in this mode. You can switch between automatic (location-based) and manual (city list) modes at any time in Settings.
Location Permission: When you choose automatic mode, Orbit requests approximate location
permission (Android: ACCESS_COARSE_LOCATION; iOS: NSLocationWhenInUseUsageDescription
equivalent) — not precise/fine location. This is the minimum scope required for city-level prayer time
calculation and is only accessed on demand, never continuously or in the background.
2.3 Bug Reports
If you choose to submit a bug report through the in-app "Report a Bug" feature, the following information is sent to our secure database (Firebase Firestore):
| Data | Required | Purpose |
|---|---|---|
| Bug title | Yes | Identify the issue |
| Bug description | Yes | Understand the issue in detail |
| Email address | No (optional) | Follow up with you if needed |
| App version | Yes (automatic) | Reproduce on the correct version |
| Device platform | Yes (automatic) | Android-specific debugging |
Bug reports are submitted anonymously. If you do not provide an email address, there is no way to link the report back to you. You are limited to 10 bug reports per day.
3 Third-Party Services
Orbit uses the following third-party services. We do not control their privacy practices and encourage you to review their policies:
| Service | Purpose | Data Sent | Privacy Policy |
|---|---|---|---|
AlAdhan APIapi.aladhan.com |
Prayer time calculation | GPS coordinates, timestamp | No formal policy published. AlAdhan is a free public API — only your GPS coordinates and a timestamp are sent; no account or identity is required. |
OpenStreetMap Nominatimnominatim.openstreetmap.org |
Reverse geocoding fallback | GPS coordinates | View policy |
| Firebase (Google) | Bug report storage and anonymous authentication | Bug report content (see §2.3) | View policy |
4 Analytics and Crash Reporting
Orbit does not use any analytics, crash reporting, or usage tracking services. We do not collect data about how you use the app beyond what you explicitly submit via the bug report feature.
5 Permissions
The app requests the following Android permissions:
| Permission | Reason |
|---|---|
INTERNET |
Fetch prayer times from the AlAdhan API and submit bug reports |
ACCESS_FINE_LOCATION |
Obtain precise GPS coordinates for accurate prayer times |
ACCESS_COARSE_LOCATION |
Fallback location for prayer times |
POST_NOTIFICATIONS |
Send habit, meal, water, prayer, and workout reminders |
SCHEDULE_EXACT_ALARM |
Schedule reminders at precise times |
USE_EXACT_ALARM |
Schedule reminders on Android 12+ |
RECEIVE_BOOT_COMPLETED |
Restore scheduled reminders after a device reboot |
VIBRATE |
Vibrate as part of notification feedback |
WAKE_LOCK |
Ensure background tasks (reminders) execute correctly |
All permissions are used solely for the stated purposes. Location permission is only requested when you use the prayer times feature.
6 Data Security
- All locally stored data is encrypted using SQLCipher with a unique key stored in the device's secure keystore
- Bug reports are transmitted over HTTPS and stored in Firebase Firestore, protected by Firebase App Check (verifies requests originate from the genuine Orbit app) and security rules that restrict all access to submitted reports
- We use Firebase Anonymous Authentication solely to authorize bug report submissions — no account is created and no personal identity is attached
7 Data Retention
- Local data: Stored on your device until you delete the app or use the "Reset Data" button found in the app menu, which permanently and immediately erases all locally stored data
- Bug reports: Retained in Firebase Firestore for as long as necessary to investigate and resolve the reported issue, then deleted
8 Your Rights
You have the right to:
- Access: Request a copy of any personal data we hold about you (limited to bug reports, since all other data is stored locally on your device)
- Deletion: Delete all locally stored data instantly using the "Reset Data" button in the app menu, or request deletion of any bug report you have submitted by contacting us
- Correction: Request correction of inaccurate data in a submitted bug report
- Withdraw consent: Stop using any feature at any time (e.g. revoke location permission, stop submitting bug reports)
To exercise any of these rights, contact us at ahmedabdelnasser.dev@gmail.com.
9 Children's Privacy
Orbit does not contain violent, sexual, or otherwise inappropriate content and is suitable for general audiences. However, the app does not knowingly collect personal data from children under the age of 13. If you are a parent or guardian and believe your child has submitted a bug report containing personal information, please contact us at ahmedabdelnasser.dev@gmail.com and we will promptly delete it.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. Continued use of the app after changes constitutes acceptance of the updated policy. For significant changes, we will notify users through an in-app notice.
11 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:
📧 ahmedabdelnasser.dev@gmail.com