Privacy Policy

1. The shape of Orbit

Orbit has two layers. The story world, with its places, films and narration, is shared by everyone and contains nobody’s personal information. Your hero, made from your photos, belongs to your account and is never shown publicly. Almost everything below follows from that line.

2. What we collect

Your email address. We send it a six-digit code to sign you in, so there is no password to remember, and we use it to reach you about your account.

Photos. To make a hero you upload three to five photographs of the pet, adult or child who becomes it. Before you choose any photo, you agree to how they are processed, and we record that agreement with the time and the words you were shown. For a child, the parent or legal guardian also confirms that they are one and consents, and we record that in the same way.

Your hero. What we make from the photos: a stylized character sheet, a short written description of how the character looks, the name you give it, a handful of short animated clips of it, and a picture of it standing in each place it visits.

Your explorer name. Two words we choose for you, such as Sunny Otter. You do not pick it, and it is not your name.

What you explore. Which places you visit, which doors you open, how many first-discoveries you have used today, and any scene you report.

Settings on your device. Music, ambience, read-aloud, Wait moments and the hero you last chose are remembered by your browser or your phone, on the device itself.

Purchases. If you buy discoveries or subscribe to Orbit Monthly, we keep a record of what you bought and when, with the store’s transaction number, so that the discoveries reach your account and the subscription can be managed. We never see your card details.

Technical information. Our hosting providers keep ordinary server logs: the address your device connects from, the browser or app it uses and the pages it asks for. When you ask for a sign-in code on the website, a security check runs in the page: it looks at the browser and the connection, not at your email, and tells us only whether the request came from a person. The apps instead prove that they are the real Orbit app on a real device, which Apple confirms without any personal information. If a page or the app fails, it sends us a short report of what failed: the screen, the error message, the app version and a random number the device made for itself, with no account, name or email attached. We use a cookie to keep you signed in on the web. If you arrive through a friend’s invite link, a second cookie remembers that invite for 30 days, so that the friend can be thanked when you join, and it holds nothing but the invite. We do not use advertising cookies or third-party analytics trackers.

3. What happens to your photos

Your photos are used for one thing: making your hero. Each one is checked to make sure it shows a single subject of the right kind, cropped to that subject, read for a few concrete traits such as eye color and hair, and then drawn into a character sheet in Orbit’s animated style.

To do that work, the photos are sent to AI providers acting on our behalf: one that looks at the photos to check the subject and describe its traits, and one that renders the character sheet from them. Each processes the photos to return a result to us, under commercial terms that bind it to that. We do not sell, license or share your photos with anyone else, and we do not use them to train models.

The moment you name the character and it is created, the original photographs are deleted from our storage, in the same step, before you see your new hero. If you throw the draft away instead, the photos and every picture made from them are deleted immediately. If you leave a draft unfinished, the draft and its photos are deleted 30 days after you last worked on it.

After that, the character sheet is the only likeness Orbit holds. It is stylized, not photographic, and every later picture of your hero is drawn from the sheet, never from the photos.

4. What is public

The places, films and narration of each story are shared by everyone. A link to a place shows the place with no hero in it, so a link you share never carries your hero.

Your explorer name appears on the explorers board and on every place you were the first to open, for as long as you have an account. Nothing else about you appears anywhere public: not your hero, not its name, not your email, and never your photos.

5. Who works on it with us

Orbit runs on providers that process data for us and are bound to use it only for that: a database and sign-in provider that holds your account and your files, a hosting provider that runs the app, an email provider that delivers your sign-in code, a security provider that checks a sign-in on the website comes from a person and not a script, and a job scheduler that runs the background work of making heroes and places and sees the identifiers and results that work passes around.

The pictures, words and sounds are made by AI providers. A vision and writing provider reads photos as described above, writes scene text, and checks every generated picture before it is kept, including the pictures of your hero. An image and video provider draws places, films and heroes, which means it receives your hero’s character sheet each time your hero is drawn into a new place. A voice provider makes the narration and ambience and receives only the words of the story, nothing about you or your hero.

Purchases are handled by the App Store, for purchases in the app, and by a payment processor, for purchases on the website. Each tells us what was bought and whether the payment went through, and neither shares your card details with us.

A small number of people who run Orbit can see a hero’s name and character sheet, and never the original photos, when they are helping you with your account or checking that the service is working and safe.

We name our providers on request: write to hello@orbitstudio.ai and we will tell you who they are today. We do not sell personal information, and we do not share it for advertising. We would disclose it if the law required us to, and we would tell you if we were allowed to.

6. How long we keep things

Photos. Until the hero is created or the draft is discarded, and never more than 30 days after an unfinished draft was last worked on. Then they are deleted.

Your hero. Until you delete it. Deleting a hero deletes its character sheet, its description, its clips and every picture of it in every place, from the database and from storage.

Your account. Until you delete it. You can do that yourself, in Settings in the app or in the account menu on the website, and it happens straight away: the account, every hero on it, every picture made of them, your explorer name and any discoveries you had not used, from the database and from storage. Places you were the first to open stay in the world, because they hold nothing of yours, and your explorer name comes off them. If you would rather we did it, write to hello@orbitstudio.ai from the address on the account.

Purchases. A record that each purchase happened stays after an account is deleted, because we have to keep accounting records. It holds the store’s transaction number, what was bought and when, and nothing that points to you. Deleting your account cancels a subscription bought on the website. It cannot cancel one bought through the App Store, which you cancel in your App Store subscriptions.

Sign-in requests. When the apps ask for a sign-in code, we note the address it went to, the app install and a scrambled form of the connection address, and delete the note after a day. It is how we stop anyone sending floods of codes. An account made for an address whose code is never typed is deleted after a day as well.

Logs. Our providers keep server logs for a limited time, then discard them.

7. Children

Orbit is for families, and accounts belong to adults. You must be at least 18, or the age of majority where you live, to create an account. Children use Orbit with a parent or guardian, on that person’s account.

We do not knowingly collect personal information from a child directly. A child’s photos are uploaded only by a parent or legal guardian who has confirmed that they are one and consented to how the photos are processed, and those photos are deleted the moment the hero is created, or 30 days after an unfinished draft was last worked on. A child hero cannot be used as an account picture. If you believe a child has given us information without a guardian’s consent, write to us and we will delete it.

8. Your choices

Your heroes are on the home page, and each one can be deleted from its own page. You can delete your whole account from Settings in the app or from the account menu on the website. The comfort switches live in the settings menu. Inside any story you can report a scene that should not be there.

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, by writing to hello@orbitstudio.ai. We answer within thirty days. Depending on where you live, the law may give you further rights, and we honor requests from everyone in the same way.

9. Security

Your hero’s pictures are kept in private storage and served through short-lived links: to your account and, when they are helping you or checking the service, to the few people who run Orbit. Your original photos are never shown to anyone. Everything travels over encrypted connections. Keys that can reach the database stay on our servers and never on your device. No system is perfect. If we learn of a breach that affects your information, we will tell you.

10. Changes

When this policy changes, the date at the top changes with it. If a change matters to you, we will say so here and by email.

11. Contact

Rally App, Inc., doing business as Orbit Studio. Write to hello@orbitstudio.ai.