Privacy Policy
The short version
- Your expenses, budgets, accounts, goals and everything you import stay on your iPhone. We never see them.
- If you turn on Group sharing, your account email, the name you choose, and the groups you share are stored on our server so the other members see the same balances.
- We send only the emails you ask for, such as a sign-in code. No marketing email.
- No ads, no analytics, no tracking, and we never sell or share your data.
- Deleting your account in the app deletes the account on our server.
1. What stays on your iPhone
Everything you enter or import in orbo stays in the app's storage on your iPhone, and in your own iCloud backup if you have backups turned on (under Apple's terms). That includes expenses, categories, budgets, bills, accounts, savings, goals, lent and borrowed entries, notes, photos of bills, bank statements you import, and bank messages that a Shortcuts automation you set up hands to orbo. We have no access to any of it. Deleting the app deletes it from the iPhone.
The optional smart features (category suggestions, reading a receipt) use Apple Intelligence on your iPhone; nothing is sent to us. In India, orbo downloads the public mutual fund prices that AMFI publishes; that download sends no information about you.
2. What goes to our server (Group sharing only)
Group sharing is off until you turn it on. Then you sign in with Google or with a code sent to your email, and we store:
- Your email address, the one you sign in with.
- Your name as other members see it, which you choose and can change.
- An account identifier, a random ID that links you to your groups.
- The groups you share: their names, members, and the expenses, amounts, dates, categories, splits, payments between members and comments added to them.
This is stored by our database provider, Supabase, in India (Mumbai), and sent over encrypted connections. Members of a group see that group; nobody else does.
3. Emails
We send only emails you cause, such as sign-in codes. They are delivered by our email provider, Resend, which handles your email address and the message to deliver it for us.
4. What we don't do
- No selling, renting or sharing of personal data.
- No advertising and no advertising identifiers.
- No analytics, crash-reporting or tracking tools. If you share Apple's crash reports with developers, they reach us through Apple, without your identity.
- No bank connections: orbo never asks for bank logins.
- No profiling or automated decisions about you.
5. Why we use it
To provide Group sharing, which you ask for, and to keep accounts secure. Where the law asks for a legal basis, it is providing the service you request and our legitimate interest in keeping accounts secure.
6. How long we keep it
Your account and shared groups are kept while your account exists. When you delete your account, you leave every group, every iPhone signed in to it is signed out, and the account is deleted. Expenses you added to a group stay in that group for its other members. Our email provider keeps sending logs for 30 days, and any server backups are deleted within 30 days.
7. Your choices and rights
- Delete your account in the app: Settings › Group sharing › Delete account. It takes effect at once.
- Export your data from Settings › Data at any time.
- Leave a group or remove expenses you added.
- Depending on where you live (for example the EU, the UK, India, Brazil, California or Korea) you may have the right to access, correct, delete or port your data, to object, and to complain to a regulator. Email us; we answer within 30 days. In India, our grievance officer is Harsh Sahu, reachable at hello@orbo.moonlabs.one.
8. Children
orbo is not made for children. You must be at least 13 to turn on Group sharing (18 where local law requires it, including India).
9. International transfers
Our server and email provider may be outside your country. Where the law requires, we rely on the providers' standard contractual clauses or similar safeguards.
10. Security
Data is encrypted in transit and at rest by our providers. Access to the database is limited to the developer and protected by two-factor authentication. If a breach affects your data, we will tell you and, where required, the authorities.
11. Changes
We post changes here and update the date above. For a change that matters to Group sharing, we tell account holders in the app or by email first.
12. Contact
Harsh Sahu · 70 Nand Vihar, Pratap Nagar, Jaipur, Rajasthan, India · hello@orbo.moonlabs.one · orbo.moonlabs.one