1. Purpose and scope
This Privacy Policy explains how Orrbbit collects, uses, discloses, stores and protects personal information when people use the Orrbbit mobile application, website, support channels and related services (together, the Service).
Orrbbit is designed as an 18+ location-based platform that helps users discover and connect with nearby people and independent professionals. Location information, communications, profile information and safety reports can be sensitive. Orrbbit therefore applies privacy-by-design and data-minimisation principles to the Service.
For privacy questions or requests, contact support@orrbbit.com.
2. Information we collect
We collect only information reasonably required to operate, secure, improve and support the Service.
- Account information: name, email address, date of birth or age confirmation, password hash, account status, authentication records and consent records.
- Profile information: profile photo, display name, biography, interests, languages, pronouns or other optional information a user chooses to provide.
- Location information: precise device location when permission is granted, approximate location shown to other users, selected visibility radius, last location update, movement and proximity events needed to operate Radar and Nearby features.
- Connection and communication information: pings, connection requests, accept/decline status, blocks, reports, messages, attachments, consultation records and review activity.
- Professional information: professional category, business or service details, qualifications, licences, certificates, credential images, expiry dates, verification status and verification communications.
- Safety and moderation information: reports, evidence, account actions, appeals, blocked-user records and information needed to investigate fraud, harassment, threats, child-safety risks or other misuse.
- Technical information: IP address, device type, operating system, app version, device identifiers, push notification token, crash logs, security logs, timestamps and diagnostic information.
- Support information: messages, contact details, attachments, reference numbers and records of support or complaint handling.
- Payment information when paid features launch: transaction identifiers, price, currency, tax and refund status. Full payment-card details will be handled by the applicable app store or payment processor rather than stored by Orrbbit.
- Website information: essential cookie or local-storage identifiers, security logs, form submissions and basic server logs.
3. How we collect information
- Directly from users when they register, create a profile, enable location, send messages, upload documents, submit reports or contact support.
- Automatically from the user’s device when they use the Service, subject to device permissions and privacy settings.
- From other users when they send a connection request, message, report, review or complaint involving the user.
- From verification providers, app stores, payment processors or service providers where needed to provide a requested feature.
- From lawful public or professional sources when a user asks Orrbbit to verify a professional credential, where permitted by law.
4. Why we use personal information
- To create, authenticate and administer accounts.
- To provide Radar, Nearby, connection, messaging, consultation and professional-discovery features.
- To display selected profile information and approximate proximity to other users according to visibility settings.
- To verify professional credentials and display verification status.
- To send service, safety, security, account and support communications.
- To prevent, detect and investigate fraud, harassment, abuse, stalking, impersonation, child exploitation and other prohibited conduct.
- To moderate content, enforce policies, respond to reports and decide appeals.
- To troubleshoot, maintain, analyse and improve the Service.
- To comply with legal obligations, lawful requests and court orders, and to establish, exercise or defend legal claims.
- To send optional marketing communications only where the user has separately opted in; users may unsubscribe at any time.
5. Legal bases for processing
Where laws such as the EU or UK GDPR apply, Orrbbit relies on one or more lawful bases: performance of a contract, consent, legitimate interests, compliance with legal obligations, and protection of vital interests in urgent safety situations. Orrbbit’s legitimate interests include operating and securing the Service, preventing abuse, improving features and protecting users, provided those interests are not overridden by individual rights.
A user may withdraw consent for optional processing, including location access, camera access, marketing and notifications, through device or account settings. Withdrawal does not affect processing already completed lawfully.
6. Location privacy
Precise location is used only when the user grants device permission and enables a location-based feature. Other users are shown an approximate location, proximity range, map area or status rather than the user’s exact coordinates.
Orrbbit does not promise that location obfuscation eliminates every risk. Users must not use the Service to track, stalk, surveil or infer another person’s home, workplace, routine or exact location.
More information appears in the Location & Radar Privacy Notice.
7. Information visible to other users
- Profile information selected for display, including photo, display name, biography, interests and professional information.
- Approximate proximity, availability, status or presence when the user has enabled visibility.
- Connection, communication and review information shared with the intended recipient.
- Verification badges or status, but not the underlying credential document.
- Content the user intentionally posts or sends.
8. Sharing with service providers and others
- Cloud hosting, database, storage, security and infrastructure providers.
- Email, push-notification, analytics or crash-reporting providers that are actually enabled and disclosed in the Service.
- Identity or credential verification providers.
- App stores, payment processors and financial institutions when paid features are active.
- Professional advisers, insurers, auditors and contractors bound by confidentiality.
- Law enforcement, regulators, courts or emergency services where required by law or reasonably necessary to address a serious safety threat.
- A buyer, investor or successor in a proposed merger, financing, restructuring or sale, subject to confidentiality and applicable law.
9. No sale of personal information
Orrbbit does not currently sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. If this changes, Orrbbit may update this Policy from time to time. Where required by law, we will provide notice and obtain consent or offer an opt-out mechanism before a material change takes effect. If Orrbbit is involved in a merger, acquisition, reorganisation or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law and the protections described in this Policy.
10. International transfers
Service providers may process information in Australia and other countries. Where required, Orrbbit will use contractual safeguards, transfer assessments, adequacy mechanisms or other lawful measures. Information may be subject to the laws of the country in which it is processed.
11. Retention schedule
Orrbbit keeps personal information only as long as reasonably necessary for the purpose for which it was collected, safety, dispute resolution and legal obligations. The following are proposed maximum operational periods, subject to legal holds and mandatory law:
12. Security
Orrbbit uses reasonable administrative, technical and organisational safeguards appropriate to the sensitivity of the information, including access controls, encryption in transit, credential hashing, logging, least-privilege access, secure development practices, backups and incident response. No system is completely secure, and users should use a strong unique password and protect their device.
13. Data breaches
Orrbbit will investigate suspected breaches and notify affected individuals and regulators where required, including under Australia’s Notifiable Data Breaches scheme. Notifications may describe the incident, affected information, likely risks and recommended protective steps.
14. Automated tools and decisions
Orrbbit may use automated tools to detect spam, suspicious activity, prohibited content or credential anomalies. These tools may flag content or accounts for review. Orrbbit does not intend to make a decision producing legal or similarly significant effects solely by automated means without an available human review process, unless permitted by law and clearly disclosed.
15. User privacy rights
Depending on location, users may have rights to access, correct, delete, restrict, object to or obtain a portable copy of personal information; withdraw consent; opt out of sale or sharing; and complain to a privacy regulator. Rights may be subject to identity verification and lawful exceptions.
- Submit a request through Account & Data settings or email support@orrbbit.com.
- Orrbbit will acknowledge requests and respond within the period required by applicable law, generally within 30 days where practicable.
- Orrbbit will not discriminate against a user for exercising a privacy right.
- Authorised agents may submit requests where permitted, subject to proof of authority and identity verification.
16. Children
Orrbbit is for adults aged 18 years and over. Orrbbit does not knowingly permit minors to create accounts. Accounts reasonably believed to belong to a minor may be suspended and deleted. Suspected child sexual exploitation or grooming will be handled under the Child Safety Standards Policy.
17. Complaints
Privacy complaints may be sent to support@orrbbit.com. Orrbbit will investigate and provide a response. Users may also contact the Office of the Australian Information Commissioner or their local privacy regulator where entitled.
18. Changes to this Policy
Orrbbit may update this Policy to reflect product, legal or operational changes. Material changes will be communicated through the Service or by email where appropriate. The version and effective date will be displayed publicly.
19. Contact
Email: support@orrbbit.com Website: https://orrbbit.com Legal operator and address: BLUEPRINT HOLDINGS GROUP PTY LTD, 24 Nettle Street, Mambourin VIC 3024