Privacy Policy

Last updated: 8 October 2026 · Version 7 · Contact: support@orbit-dating.app

This Privacy Policy explains how JYDEV LTD (company number 17506340), registered office 128 City Road, London, United Kingdom, EC1V 2NX, trading as Orbit (“Orbit”, “we”, “us”, or “our”), collects, uses, stores, and protects personal information when you use the Orbit apps for Android and iOS, the website at orbit-dating.app, and the related services (together, the “Services”).

Orbit is a dating app for adults who want to meet in person. We intend to operate worldwide. Please read this policy before you create an account. It is written for the UK GDPR and the Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), the Australian Privacy Principles, and the US state privacy laws described below. It is not legal advice to you.

1. Who we are

The data controller is:

• JYDEV LTD (company number 17506340), trading as Orbit
• Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
• Privacy and support: support@orbit-dating.app
• Website: https://orbit-dating.app

Write to that email for privacy questions, access requests, and deletion requests. We aim to reply within one month, or sooner where the law sets a shorter time.

2. Scope

This policy covers the Orbit Android app, the Orbit iOS app, our website, the waitlist, accounts, profiles, discovery, chat, voice and video calls, date proposals, Orbit posts, events, the in-app store, verification, notifications, and support.

It does not cover sites or apps you open from Orbit, such as maps, a social profile, a music service, or a store account. Those have their own policies.

Creating an account means you have read this policy. Where we need consent for a particular use, we ask for it in the app at the time.

3. Information we collect

We collect what we need to run Orbit and the features you turn on.

3.1 You give us

• Account: email address, mobile number, display name, date of birth, and a password. The password is stored as a hash. We do not keep it in plain text.
• Phone check: Google sends and checks the SMS code (and related phone checks Google offers). Google processes the number for that purpose under Google’s terms.
• Profile: bio, photos, short profile clips, tags you pick from our list, and optional links to social profiles you choose to show.
• Dating preferences: gender, who you want to meet, and similar fields. See section 4.
• Private gallery: photos and videos you keep off your public profile and may send in chat.
• Chat: messages, photos, videos, and GIFs. A GIF search sends the search words to Giphy.
• View-once: a photo or video you send as view-once. The other person can open it once. We then remove it.
• Dates: proposals, the place and time, and the response.
• Emergency contact: a name and phone number you can store for yourself. We do not show it on your public profile.
• Verification: where we ask for it, a photo of your ID, a selfie, and a short liveness video of you holding that ID.
• Reports and support: reports you file, and emails or chats you send to Orbit Support.
• Waitlist: an email address, if you join the waitlist on the website. That list is kept apart from app accounts.

3.2 Calls

Voice and video calls are not recorded. We do not store the audio or the video. We keep a record that a call happened and when it happened: who took part, whether it was voice or video, and the time. Section 8 explains this in full.

3.3 Listening status

If you turn on Spotify, we can show the track that is playing, and your top songs if you turn that on as well. If you turn on Apple Music, the iOS app reads what the Music app is playing while Orbit is open and you are sharing, and we show that track on your profile. Android can display a listening tile. It does not read Apple Music on the phone. Section 10 explains this.

3.4 Collected from the device

• Device and security data: a device identifier used to enforce bans, app version, operating system, a general device description, IP address, and diagnostic logs.
• Push tokens: so we can send notifications you allow, through Firebase Cloud Messaging on Android and Apple push on iOS.
• Location: while the app is open and you have allowed location, so we can show people nearby and bias place search. See section 11.
• Purchase records: that a subscription or token pack was bought, your Premium status, and your token balance. We do not receive your card number. See section 13.

3.5 From other people and from our review

• Reports another member files about you.
• The outcome of a photo, verification, or safety review by our staff.
• Delivery status from email, SMS, or push providers, such as a failed send.

4. Dating preferences and other sensitive information

Gender, who you want to meet, and similar dating preferences can reveal sexual orientation or sex life. Under the UK GDPR and the EU GDPR that is special-category data. We process it because you choose to give it when you sign up and when you edit your profile. That choice is your explicit consent for us to use it to run discovery, filters, and your profile.

You can change those fields in the app. You can withdraw consent by deleting the account. Some features need a gender and a preference to work.

A liveness video and an ID image are used so a person on our team can check that you are an adult and that the document is yours. We do not build a face-recognition template from them, and we do not publish them as profile photos.

If you turn on an app lock, the fingerprint or face check stays on your phone or tablet. We never receive that biometric data.

5. How we use information

• Create the account, sign you in, and check the phone number.
• Show profiles, run the grid and filters, deliver chat, calls, date proposals, Orbit posts, and events.
• Show a listening tile when you have turned that on.
• Run blocks, reports, photo review, verification, and abuse controls, including device bans.
• Send codes, security messages, and the notifications you allow.
• Answer support and data requests.
• Take payment through the app stores and keep your Premium status and token balance correct.
• Keep the service reliable and look into crashes and misuse.
• Meet legal duties, including child-safety duties described in section 14.

We do not sell your personal information. We do not use your private messages, your photos, or your calls to advertise you to other companies. There is no call recording to use.

6. Legal bases

Depending on where you live and the activity, we rely on:

• Contract: to provide the account, discovery, chat, calls, dates, and the store features you use.
• Explicit consent: for dating preferences that reveal sexual orientation or sex life, for precise location, for optional notifications, and for Spotify or Apple Music sharing. You can withdraw consent in the app or in system settings. Withdrawal does not undo processing that already happened.
• Legitimate interests: keeping the service secure, preventing fraud and abuse, moderating reports, and fixing faults. We balance those interests against your rights.
• Legal obligation: where the law tells us to keep or disclose information, including child-safety duties.
• Vital interests: in a rare case of serious and immediate risk to someone’s life.

If you are in the United Kingdom, those bases are the ones in the UK GDPR. If you are in the EEA, they are the ones in the EU GDPR. In Australia we handle personal information under the Australian Privacy Principles, including notice, purpose, security, access, and correction. US residents have the rights in section 19.

7. Sharing

We do not sell personal data. We do not rent mailing lists. We do not give your data to third parties for their own marketing.

• Other members: the profile you choose to show, messages and media you send them, date details you share, and a listening tile if you turned that on. Private messages are not posted to the rest of Orbit. Your emergency contact is not shown to other members.
• Google: phone verification and SMS codes, push notifications on Android, maps in the app, cloud hosting, and Play Billing on Android.
• Apple: the App Store, push notifications on iOS, and, only if you turn it on, the track the Music app is playing on that iPhone.
• Spotify: if you connect Spotify and turn sharing on.
• Giphy: the words you type when you search for a GIF.
• Place search: a place query, biased by your location when you have allowed location, goes to a place-search provider so we can pin a meetup.
• Cloudflare and email delivery: to serve the website and send service email.
• Legal and safety: if the law, a court, or a competent authority requires it, or if we believe in good faith that disclosure is needed to protect a person from serious harm, fraud, or a crime.
• A sale of the business: if JYDEV LTD is sold or merged, personal information may transfer with the business, still under a privacy commitment.

A chat marked as sponsored is from Orbit or a partner. It is not a private conversation with another member. If it opens a partner page, that page has its own policy.

Processors may use the data only to provide the service to us. They are not allowed to use your Orbit account for their own unrelated marketing.

8. Calls

Calls are not recorded. We do not store the audio of a voice call or the audio and video of a video call. We do not keep a transcript of what was said or shown.

We do keep a record that the call happened and when it happened. That record includes who took part, whether the call was voice or video, and the time. It exists so the conversation can show the call and so we can look into a report about the call. It does not include the contents.

During a call the app uses the microphone. It uses the camera only if the call is a video call. The media is encrypted on the way. It passes through our service only as needed to connect the two phones. We do not keep it after the call ends.

9. Messages, photos, and view-once

Messages and shared photos and videos are stored so you and the other person can read the conversation. Staff may open content when investigating a report, abuse, a technical fault, or a legal demand.

Profile photos are reviewed by staff before they are public. A private-gallery item stays off your public profile until you send it.

A view-once photo or video can be opened once. We then remove it. While it is on screen we block screenshots on Android, and on iOS we cover it in the app switcher. Do not assume a view-once item can never be copied by the other person’s own camera.

Deleting a message on your phone does not always erase every copy at the same second. Backups and a legal hold can keep a copy for a limited time. View-once media is removed after it is opened, except where section 14 or section 15 requires us to keep it.

10. Listening status

Listening is off until you turn it on.

• Spotify: if you connect and turn on “now playing”, other members can see the current track. If you turn on top songs, they can see that list too. You can disconnect in the app.
• Apple Music: the switch exists on iOS. While Orbit is open and the switch is on, the app reads the system Music player and sends the current song, artist, artwork, and link. Other members on Android and iOS can see that tile. Android does not offer the switch and does not read Apple Music on the device.

We keep a short history of tracks you chose to share, for about 30 days, so the feature can show a recent track. We then delete that history. We do not sell it.

11. Location

If you allow location, we collect it while Orbit is open, about every two minutes, and when you refresh the grid. We use it to show people nearby, to set distance, and to bias place search when you propose a date. The map pin for a date uses Google Maps. The place search uses a place-search provider.

We do not run a persistent background location tracker, and we do not sell location. Other members see what the feature is built to show, such as an approximate distance or a meetup place you chose. You can turn location off in system settings. Nearby discovery and place suggestions then stop working.

12. Age and identity checks

Everyone must be 18 or over. In some countries we also require an ID photo, a selfie, and a short liveness video before the account can be used fully. Authorised staff review those materials. They are not shown as profile photos.

Send only your own genuine document. A false document, or someone else’s, can close the account.

13. Premium and tokens

Orbit Premium and token packs are sold by Google Play on Android and the App Store on iOS. The store charges your payment method. We receive a record of the purchase, and we store whether you have Premium and what your token balance is. We do not receive your card number, bank account, or store password.

Token use is unlimited in this sense: we do not add a fair-use cap on top of your balance. If your balance covers the price shown in the app, you can spend the tokens. Prices, any monthly token grant that comes with Premium, and the cost of a post, an event, or a verification are shown in the app before you confirm.

14. Safety scanning

We have zero tolerance for child sexual abuse and exploitation. Images and videos uploaded to Orbit are checked with our own internal fingerprinting process. A match is reviewed by staff. We do not use that material to train models, to sell ads, or to analyse members for marketing, and we do not return it to the person who uploaded it.

Where the law or a competent authority requires it, we report to the relevant body. In the United Kingdom that includes the National Crime Agency and the Internet Watch Foundation. In other countries it can include the National Center for Missing and Exploited Children. We keep the evidence for as long as the authority requires, including a preservation hold. We do not delete it on our own timetable while that requirement stands.

A confirmed case closes the account. There is no warning and no strike count for this.

15. Retention and deletion

• Account data stays while the account is active.
• If you delete the account in the app or at orbit-dating.app/delete-account, your profile and chats are hidden from other members straight away. We keep the account data for 30 days so you can sign in and restore the profile. Chat history does not come back. After 30 days with no sign-in we delete or anonymise the personal data.
• We can keep a limited set after that where we must: ban records, fraud prevention, a dispute, backups for a short further period, verification audit trails, and evidence an authority has told us to preserve.
• Call records (the fact and the time, not the audio or video) are kept with the conversation on the same timetable as other chat records.
• View-once media is removed after it is opened, unless a safety hold in section 14 applies.
• Listening history is kept for about 30 days.
• Waitlist emails stay until we invite you, you ask to be removed, or the waitlist ends.
• Security logs are kept for a shorter operational period unless an investigation needs longer.

16. Security

Traffic between the app and Orbit is encrypted in transit. Passwords are hashed. Admin tools are access-controlled. We rate-limit abuse and can ban a device linked to a disabled account.

An optional app lock uses the biometrics already on your device. That check never leaves the device.

No service is perfectly secure. Use a strong unique password and tell us if you think someone else has the account. If a breach must be reported under the law, we will notify the regulator and the people affected.

17. Your rights and choices

Subject to the law where you live, you can:

• Access the personal information we hold.
• Correct it. Most profile fields can be edited in the app.
• Ask us to delete it.
• Restrict or object to certain processing.
• Ask for a portable copy of information you provided.
• Withdraw consent where we rely on consent, including location, notifications, and listening.
• Turn off non-essential notifications in Settings.
• Leave the waitlist.

Request a copy at orbit-dating.app/data-request or by email. Delete the account in Settings or at orbit-dating.app/delete-account. We may need to confirm it is you. Some rights are limited where the law tells us to keep information.

You can complain to a regulator. Under the UK GDPR that is the UK Information Commissioner’s Office. Under the EU GDPR that is the supervisory authority in your EEA country. In Australia it is the Office of the Australian Information Commissioner. Please write to us first so we can try to fix it.

18. Children

Orbit is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has an account, email support@orbit-dating.app with the subject “child safety”. We will close the account and delete the information, except where section 14 requires us to keep evidence for an authority.

19. United States

If you live in the United States, this section applies as well as the rest of the policy. Orbit is not directed at children under 13, and we do not knowingly collect personal information from a child under 13. The service itself is only for people aged 18 or over.

We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use personal information for targeted advertising. Those statements use “sell” and “share” in the sense of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA). We have not sold or shared personal information in the 12 months before the date on this policy.

The categories we collect, the sources, and the purposes are in sections 3, 5, and 7. Sensitive personal information we handle includes login details, precise location, dating preferences that reveal sexual orientation, the contents of messages, and government ID where you submit it. We use that information to run Orbit, for safety, and for the checks in this policy. We do not use it to infer characteristics about you for advertising.

We do not collect biometric identifiers, such as a fingerprint template or a face-geometry scan, for automated identification. An app lock uses the biometrics already on your device, and that check stays on the device. A liveness video is watched by a person. It is not used to build or match a face template. That includes the position under US state biometric laws such as the Illinois Biometric Information Privacy Act.

If you are a California resident you may ask us to know, delete, or correct personal information, and you may use an authorised agent if you show that the agent is allowed to act for you. We will not deny the service, charge a different price, or provide a different quality of service because you exercised these rights. Premium and token prices are the same whether or not you make a privacy request.

If you live in another US state with a consumer privacy law, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, you may ask to access, correct, delete, or receive a copy of your personal information, and you may appeal a refusal. Email support@orbit-dating.app with the subject “privacy appeal”. We will decide the appeal within 60 days. Because we do not sell personal information, do not use it for targeted advertising, and do not profile you in a way that produces a legal or similarly significant effect, there is no separate advertising opt-out to switch off.

Service email about your account may continue after you turn off optional notifications. We do not send third-party marketing email.

20. International transfers

JYDEV LTD is in the United Kingdom. We host the service primarily in the UK. Our processors, including Google and Apple, can process personal information in the UK, the EEA, the United States, Australia, and other countries where they operate. For a transfer out of the UK, the UK GDPR requires a safeguard. For a transfer out of the EEA, the EU GDPR requires one. Where that applies we use standard contractual clauses or another lawful transfer tool.

21. Cookies

The website uses cookies and similar storage that are needed to run it securely, for example to protect a form or to keep you signed in to a restricted page. We do not use advertising cookies to follow you across other sites. You can block cookies in the browser. Some pages will then not work.

22. Automated decisions

We use automated checks for rate limits, spam signals, and device bans tied to an account our staff have disabled. Reports, photos, and verification are reviewed by people. We do not make a solely automated decision that produces a legal or similarly significant effect on you without a person involved where the law requires that.

You can ask us to review a ban or a verification refusal by emailing support.

23. Changes

We will update this policy as Orbit changes. The published page shows the date and version. For a material change we will ask you to accept the new policy in the app before you continue, and we may also email you. Where the law requires a fresh consent, we will ask for it.

24. Contact

Data controller: JYDEV LTD (company number 17506340), trading as Orbit.

Registered office: 128 City Road, London, United Kingdom, EC1V 2NX.

Privacy and support: support@orbit-dating.app

Website: https://orbit-dating.app