Privacy Policy
The short version
- Your expenses, budgets, accounts, goals and everything you import stay on your iPhone. We never see them.
- If you turn on Group sharing, your account email, the name you choose, and the groups you share are stored on our server so the other members see the same balances.
- We send only the emails you ask for, such as a sign-in code. No marketing email.
- No ads, no analytics, no tracking, and we never sell or share your data.
- Deleting your account in the app deletes the account on our server.
1. What stays on your iPhone
Everything you enter or import in orbo stays in the app's storage on your iPhone, and in your own iCloud backup if you have backups turned on (under Apple's terms). That includes expenses, categories, budgets, bills, accounts, savings, goals, lent and borrowed entries, notes, photos of bills, bank statements you import, and bank messages that a Shortcuts automation you set up hands to orbo. We have no access to any of it. Deleting the app deletes it from the iPhone.
The optional smart features (category suggestions, reading a receipt) use Apple Intelligence on your iPhone; nothing is sent to us. In India, orbo downloads the public mutual fund prices that AMFI publishes; that download sends no information about you.
2. What goes to our server (Group sharing only)
Group sharing is off until you turn it on. Then you sign in with Google or with a code sent to your email, and we store:
- Your email address, the one you sign in with.
- Your name as other members see it, which you choose and can change.
- An account identifier, a random ID that links you to your groups.
- The groups you share: their names, members, and the expenses, amounts, dates, categories, splits, payments between members and comments added to them.
This is stored by our database provider, Supabase, in India (Mumbai), and sent over encrypted connections. Members of a group see that group; nobody else does.
Feedback you send
If you use Send feedback, we keep what you choose to send: your message, and only the extras you leave on: an email address to reply to, your orbo version and iPhone model, a crash report from your iPhone, and a screenshot. It is stored by Supabase in India (Mumbai), read only by us, and used only to answer you and improve orbo. Feedback never includes your expenses or accounts, unless you write them in the message or show them in a screenshot.
3. Emails
We send only emails you cause, such as sign-in codes. They are delivered by our email provider, Resend, which handles your email address and the message to deliver it for us.
4. What we don't do
- No selling, renting or sharing of personal data.
- No advertising and no advertising identifiers.
- No analytics, crash-reporting or tracking tools. A crash report reaches us only when you choose to attach one to feedback, or through Apple if you share crash reports with developers, without your identity.
- No bank connections: orbo never asks for bank logins.
- No profiling or automated decisions about you.
5. Why we use it
To provide Group sharing, which you ask for, to answer feedback you send, and to keep accounts secure. Where the law asks for a legal basis, it is providing the service you request and our legitimate interest in keeping accounts secure.
6. How long we keep it
Your account and shared groups are kept while your account exists. When you delete your account, you leave every group, every iPhone signed in to it is signed out, and the account is deleted. Expenses you added to a group stay in that group for its other members. Feedback is kept for up to 12 months; email us to have yours deleted sooner. Our email provider keeps sending logs for 30 days, and any server backups are deleted within 30 days.
7. Your choices and rights
- Delete your account in the app: Settings › Group sharing › Delete account. It takes effect at once.
- Export your data from Settings › Data at any time.
- Leave a group or remove expenses you added.
- Depending on where you live (for example the EU, the UK, India, Brazil, California or Korea) you may have the right to access, correct, delete or port your data, to object, and to complain to a regulator. Email us; we answer within 30 days. In India, our grievance officer is Harsh Sahu, reachable at hello@orbo.moonlabs.one.
8. Children
orbo is not made for children. You must be at least 13 to turn on Group sharing, 14 in South Korea and 18 in India; orbo asks you to confirm your age before you sign in. In South Korea, orbo also asks your separate consent to collecting your account details and to storing them outside Korea, and you can refuse.
9. International transfers
Our server and email provider may be outside your country. Where the law requires, we rely on the providers' standard contractual clauses or similar safeguards.
10. Security
Data is encrypted in transit and at rest by our providers. Access to the database is limited to the developer and protected by two-factor authentication. If a breach affects your data, we will tell you and, where required, the authorities.
11. Changes
We post changes here and update the date above. For a change that matters to Group sharing, we tell account holders in the app or by email first.
12. Contact
Harsh Sahu · Jaipur, Rajasthan, India · hello@orbo.moonlabs.one · orbo.moonlabs.one