Privacy Policy

Orbitly ("the App", "we", "us", "our"), operated by Tranquil Mind Technology JSC, respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the App, you agree to this Policy.

Orbitly is a family location-sharing app that lets you share your live GPS location with family and friends you connect with, view them on a shared map, set safe-zone alerts, send SOS alerts, and use built-in utilities such as a GPS-stamp camera and weather. You do not need to create an account or sign in to use the App — your device is identified by an anonymous code the App generates. You connect with others only by exchanging an invite code or QR code; there is no public profile discovery, no chat, and no messaging.

1. Information We Collect

1.1 Location information (the core of a family tracker)

Orbitly is a family location tracker. To let the people in your family circle see where you are, the App collects and transmits your device location. With your permission, the App accesses:

• Precise (GPS) location. Your exact device location, used to show your real-time position on the map to the members of your family circle.
• Approximate location. A coarse location used when precise location is unavailable or not required.
• Background location. If you enable it, the App continues to update your location while it runs in the background, so that safe-zone (geofence) arrival/departure alerts keep working and your family circle can see your current position even when the App is not open.

Your location, together with recent location history and geofence (safe-zone) events, is transmitted through our backend service (Google Firebase) and shared with the family members you are connected to. You are always in control: you can stop sharing your location, leave a family circle, or turn off location permission in your device settings at any time. See Section 4 for how this information is shared. If you open the in-app Weather tool or use the weather photo stamp, your current coordinates are sent to Open-Meteo (a third-party weather service) to retrieve the local forecast; Open-Meteo does not require an account and we do not send it any identifying information.

1.2 Camera and media (GPS camera)

With your permission, the App accesses:

• Camera. The App uses the camera only when you take a photo with the built-in GPS camera. Captured photos are stamped with the address, coordinates and time and are saved to your device; they are shared only if you choose to share them.
• Photos and videos. The App reads images or videos you select from your gallery (for example, to set a profile picture or attach a photo), on your device.

1.3 Information collected automatically by third-party services

When you use the App, the third-party services listed in Section 3 may automatically collect:

• Advertising & device identifiers (such as the Android Advertising ID / IDFA) and basic device information (model, OS version, app version).
• Approximate location derived from your IP address (city/region level) — not GPS-based tracking.
• App activity & diagnostics such as feature usage, session data, and crash reports.

1.4 Information you provide

The App does not require you to submit personal information such as your email or phone number to use it. You may choose to provide a display name or nickname and a profile picture, and you connect with family members by sharing or accepting an invite. Your in-app settings and preferences are stored on your device. If you contact support, we receive the information you send us.

2. How We Use Information

• Provide and operate the App — core features run on-device; remote configuration keeps the App's settings up to date.
• Advertising and measurement — to serve ads (which fund the free App) and measure ad performance and install attribution.
• Analytics and improvement — to understand how the App is used and improve features and stability.
• Fraud prevention, security and compliance — to detect invalid ad traffic and abuse.
• Legal compliance — to comply with applicable laws and enforce our terms.

3. Third-Party Services

The following third-party services are integrated in the App and may collect the data described in Section 1.3 under their own privacy policies:

We are not responsible for the privacy practices of these third parties and recommend reviewing their policies. We do not sell or rent your personal information.

4. How We Share Information

We do not sell your personal information for money. Information is shared only:

• With the family members you connect to. This is the core purpose of the App: your real-time location, recent location history, safe-zone (geofence) arrival/departure events, and your display name and profile picture are shared with the members of the family circle you join or create. You choose who to connect with, and you can stop sharing or leave a circle at any time.
• With our backend provider (Google Firebase). We use Google Firebase to transmit and relay location and family-circle data between the devices in your circle, and for analytics and crash reporting. Firebase processes this data on our behalf.
• With the ad, analytics, and attribution partners listed in Section 3, to the extent described above. Under some U.S. state privacy laws (for example the CPRA), the transfer of identifiers to advertising partners for personalized ads may be considered a "sale" or "sharing" — Section 7 explains how to opt out.
• For legal reasons, if required by law, regulation, legal process, or enforceable governmental request, or to protect our rights, users, or the public.
• In a business transfer, such as a merger, acquisition, or asset sale, in which case this Policy will continue to apply to previously collected data.

5. Legal Bases (EEA/UK — GDPR)

Where the GDPR or UK GDPR applies, we rely on:

• Consent — for personalized advertising and, where required, analytics. You may withdraw consent at any time via the in-app consent dialog or system settings.
• Legitimate interests — for core App operation, security, fraud prevention, non-personalized advertising, and improvement, balanced against your rights.
• Legal obligation — where processing is required by law.

6. Data Retention

Your location and family-circle data (Sections 1.1 and 1.4) are stored on our backend service (Google Firebase) only for as long as needed to provide the tracking features — that is, while you are an active member of a family circle. Recent location history is kept for a limited period so that family members can see your latest position, and is overwritten as new location updates arrive. When you stop sharing your location, leave a family circle, or the circle is removed, the associated location data is deleted. You can also request deletion of your data as described in Section 7. Our advertising, analytics and attribution partners retain the data they collect for the periods stated in their own policies (for example, Google Analytics for Firebase retains user-level data for up to 14 months; crash logs are retained for around 90 days). Photos, videos and settings processed on your device (Sections 1.2 and 1.4) remain until you clear the App's data or uninstall the App.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict processing, to withdraw consent, and to lodge a complaint with your supervisory authority (GDPR/UK GDPR); or to know, delete, correct, and opt out of the "sale"/"sharing" of personal information and targeted advertising without discrimination (CCPA/CPRA and similar U.S. state laws); or equivalent rights under other laws (LGPD, PIPEDA, and others).

To exercise any right, email contact@tranquilmind.co. Because the App has no accounts, please include your Android Advertising ID (Settings → Google → Ads) and device model so we and our partners can locate data associated with your device. You can also act directly on your device: reset your Advertising ID, opt out of ads personalization, use the in-app consent dialog, or clear the App's data.

8. Children's Privacy & Child Safety Standards

The App is intended for users aged 16 and older and is not directed to children. We do not knowingly collect personal information from children under 16 for their own independent use. A parent or legal guardian who wishes to include a younger child in a family circle does so on their own responsibility and must obtain any consent required by local law before sharing that child's location. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.

Child Safety Standards (CSAE)

Orbitly (published by Tranquil Mind Technology JSC) has a zero-tolerance policy toward child sexual abuse and exploitation (CSAE) and child sexual abuse material (CSAM).

• Prohibited absolutely. We prohibit any content or conduct that sexually exploits, abuses, or endangers minors — in any form (images, video, audio, or text), including the sexualization of minors, grooming, sextortion, solicitation, or trafficking, and any attempt to create, request, share, or promote such material through the App.
• How Orbitly limits risk. Orbitly is a private family-safety tool, not a social network. Users connect only by exchanging a private invite code or QR code — there is no public discovery of strangers, no public profiles, no chat or messaging, and no public content feed. The only information shared between connected users is a chosen display name, an optional profile photo, live location, and battery level, all at the user's direction. You can remove any connection at any time from within the App.
• Reporting and response. If you encounter suspected CSAE/CSAM or any abusive use of the App, report it to our child-safety contact at contact@tranquilmind.co. We investigate reports, remove offending profile content, and suspend or terminate access for violations. We report apparent CSAM to the National Center for Missing & Exploited Children (NCMEC) and/or local law enforcement as required by law.
• Compliance. We comply with applicable child-safety laws and align with Google Play's Child Safety Standards policy.
• Child-safety point of contact: contact@tranquilmind.co.

9. International Data Transfers

Our ad and analytics partners may process data in countries other than yours, including the United States. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms maintained by those partners.

10. Data Security

Data transmitted by the SDKs described above is encrypted in transit using HTTPS/TLS. We and our partners apply reasonable technical and organizational measures; however, no method of transmission or storage is 100% secure.

11. Third-Party Apps, Content and Links

The App displays ads and may contain links that lead to third-party websites, apps, or services. Those services are governed by their own terms and privacy policies, and we are not responsible for them. Orbitly is not affiliated with, endorsed, or sponsored by any third-party brands referenced in the App.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted in the App or on this page with a new "Last updated" date. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

Tranquil Mind Technology JSC
No. 3, Alley 98, Vu Trong Phung Street, Thanh Xuan Ward, Hanoi City, Vietnam
Email: contact@tranquilmind.co