Privacy Policy

1. Introduction

Orbil is a personal book library, reading tracker, and reading journal app. Orbil is made by Prometeuz ("Prometeuz", "we", "us", or "our"), based in Cauayan City, Isabela, Philippines.

This Privacy Policy describes how we handle information when you use the Orbil mobile app and the orbilshelf.com website (together, the "Service"). By using Orbil, you agree to this policy. If you do not agree with it, please do not use Orbil.

2. The short version

3. Information Orbil handles

3.1 Library and journal content you create

This is the information you type, choose, or capture inside Orbil. It can include:

• Book details such as title, author, cover image, ISBN, genre, format, page count, publisher and edition details, and where you keep the book;
• Reading status, current page, progress, start and finish dates, and reading queue and wishlist entries;
• Your personal writing: thoughts, notes, saved quotes, vocabulary words, character notes, tags, and collections;
• Reading goals, reminder times, shelf styles, and shelf decoration placements;
• Loan records, including the name you type for the person who borrowed or lent a book.

This content is private to you. It is never publicly visible in Orbil, and Orbil has no social feed, public profile, or sharing network.

3.2 Reading activity

When you run a reading session, Orbil records the book, the start and end times, the duration, the pages you covered, and the individual intervals if you pause and resume. Orbil uses this to build your progress, streaks, reading calendar, insights, and recaps. These statistics are calculated for you and shown only to you.

3.3 Account information

You can use Orbil without an account. If you choose to create one for cloud sync, we handle:

• Your email address and an account identifier;
• The sign-in method you used: email and password, Sign in with Apple, or Google;
• Sign-in session tokens and the date of your last successful sync.

If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address. If you sign in with a password, the password is handled and stored in hashed form by our authentication provider; we never see or store your plain password.

3.4 Device and technical information

When cloud sync is switched on, Orbil creates a random device identifier so the sync system can tell your devices apart and avoid duplicating changes. Our hosting provider also keeps standard server logs, which can include your IP address, the time of a request, and technical error details. We use these to keep sync working and to investigate problems.

3.5 Purchase information

Orbil Plus is sold through the app store on your device. We receive a transaction identifier and your entitlement status so we can unlock Plus features and link them to your Orbil account. We never receive or store your card number, billing address, or any other payment details — those are handled entirely by Apple.

4. How Orbil uses this information

• To store and display your library, notes, and reading history;
• To calculate your progress, streaks, goals, insights, and recaps;
• To sync your data between your devices and keep a backup, if you have turned cloud sync on;
• To create and secure your account and keep you signed in;
• To unlock and restore Orbil Plus, and to prevent a single purchase from being shared across unrelated accounts;
• To schedule the reading reminders you set up on your own device;
• To answer your support messages and fix bugs you report to us;
• To keep the Service secure, prevent abuse, and comply with the law.

We do not use your library content, notes, quotes, or reading history for advertising, profiling, or to train artificial intelligence models.

5. Legal bases for processing

If you are in the Philippines, the European Economic Area, or the United Kingdom, we rely on the following legal bases:

Where we rely on consent, you can withdraw it at any time in your device settings, without affecting processing that already took place.

6. Where your data is stored

6.1 On your device (the default)

Orbil is offline-first. Your library, notes, reading sessions, cover images, goals, reminders, and preferences are stored in Orbil's own storage area on your device, protected by your device's operating system and device encryption. If you never sign in, this data never leaves your device and we have no way to access it.

Because this data lives on your device, deleting the app, resetting the device, or losing the device will delete it. We cannot recover it for you. You can create your own backup file at any time from Settings.

6.2 In the cloud (Orbil Plus with sync enabled)

If you own Orbil Plus, sign in, and enable cloud sync, Orbil copies your library data to our cloud database so it can be backed up and used on your other devices. What syncs: books, collections, tags, saved thoughts, quotes, vocabulary entries, character notes, edition details, reading sessions and intervals, reading goals, reading queue entries, shelf decoration inventory and placements, and the book cover images you added.

Cloud storage is protected with access rules that allow only your signed in account to read or write your records. Data is encrypted in transit using HTTPS and encrypted at rest by our hosting provider.

You can turn cloud sync off, and you can keep using Orbil entirely offline.

7. Camera, photos, and book lookup

Orbil asks for camera access only when you scan a book barcode, capture a book cover, or capture a background for a quote image. Orbil asks for photo library access only when you pick an existing image for a cover or quote background, or when you save an exported quote image back to your photos. Barcode reading happens on your device.

When you scan an ISBN or search for a book, Orbil sends the ISBN or your search words to the Google Books API to fetch book details such as title, author, cover, and page count. We do not send your name, email, account identifier, notes, or library contents with that request.

Book details returned by Google Books come from third-party sources and can be incomplete or wrong. You can always edit them.

8. Notifications

Orbil's reading reminders are local notifications. They are scheduled and delivered by your device based on the times you choose. Orbil does not use a push notification server, and we do not send marketing or promotional push messages. You can turn reminders off inside Orbil, or turn off notifications entirely in your device settings.

If you use Live Activities during a reading session, the session details shown on your Lock Screen are generated on your device.

9. Service providers we use

We keep the list of third parties deliberately short. Each one is used for a specific purpose and is not permitted to use your information for its own marketing.

Face ID and Touch ID confirmations stay on your device. Your biometric data is handled entirely by Apple's secure hardware and is never shared with Orbil.

10. What Orbil does not do

• Orbil does not display advertising.
• Orbil does not include advertising networks, advertising identifiers, or the App Tracking Transparency prompt, because it does not track you across other apps or websites.
• Orbil does not include third-party analytics or crash reporting software.
• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
• We do not build advertising profiles or make decisions about you using automated processing that produces legal or similarly significant effects.

11. When we may disclose information

We may disclose information only in these situations:

• To the service providers listed above, so they can perform the function we hired them for;
• With your instruction or consent, for example when you email us a screenshot or export to help us fix a bug;
• For legal reasons, when we reasonably believe disclosure is required by applicable law, a valid court order, or lawful government request, or is necessary to protect the rights, safety, or property of our users, the public, or Prometeuz;
• In a business transfer, such as a merger, acquisition, or sale of assets. If this happens, we will notify you and the acquiring party must honour this policy or give you notice before any material change.

Our staff do not browse user libraries. Access to production data is limited to the people who need it to operate the Service, and support access to your account content happens only when you ask us to look into a specific problem.

12. International transfers

Prometeuz operates from the Philippines, and our providers may store or process data on servers in other countries, including the United States, Singapore, and the European Union. Where personal data of users in the EEA or the UK is transferred outside those areas, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with the UK Addendum where applicable. You can ask us for more detail using the contact details below.

13. How long we keep information

If an account shows no sign-in and no sync activity for 24 months, we may contact you at your registered email address and delete the account and its synced data if we receive no response within 30 days.

14. Security

• All network traffic between Orbil and our servers uses HTTPS.
• Passwords are hashed by our authentication provider and are never visible to us.
• Database access rules restrict every synced record to the account that owns it.
• Cloud data is encrypted at rest by our hosting provider.
• On-device data is protected by your device passcode and system encryption, and Orbil can ask for Face ID or Touch ID before destructive actions such as deleting all of your data.

No system is perfectly secure. If we become aware of a personal data breach that is likely to pose a real risk to you, we will notify you and the relevant authorities as required by law, including the National Privacy Commission of the Philippines within the periods it prescribes.

15. Your rights and choices

Depending on where you live, you may have the right to: access a copy of your personal data; correct inaccurate data; delete your data; object to or restrict certain processing; withdraw consent; receive your data in a portable format; and complain to a data protection authority. You will never be treated differently for exercising these rights.

Practical ways to exercise them in Orbil:

• Access and correct: your data is visible and editable inside the app at any time.
• Export: Settings lets you export an Orbil backup file containing your library data and covers.
• Delete on-device data: Settings includes a Delete All Data action that permanently removes your books, reading history, goals, tags, reminders, preferences, and locally stored covers from the device.
• Stop syncing: turn cloud sync off, or sign out.
• Permissions: camera, photo library, and notification access can be changed at any time in your device settings.

To make a formal request, email support@prometeuz.com. We may need to verify that the request comes from the account holder before we act on it. We respond within 30 days, and will tell you if we need more time.

16. Deleting your account and cloud data

To delete your Orbil account and everything stored for it in the cloud, email support@prometeuz.com from the email address on the account, with the subject line "Delete my Orbil account".

We will confirm the request, then delete your account record and your synced library data and cover images within 30 days. Copies inside encrypted infrastructure backups are overwritten within 90 days.

We may keep purchase and transaction records after deletion where the law requires it.

17. Philippines: Data Privacy Act

We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. As a data subject, you have the rights to be informed, to object, to access, to correct, to erasure or blocking, to damages, and to data portability.

Please contact us first at support@prometeuz.com so we can resolve your concern. You also have the right to complain to the National Privacy Commission, 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines.

18. EEA and UK: GDPR

For users in the European Economic Area and the United Kingdom, Prometeuz is the controller of the personal data described in this policy. Our legal bases are set out in section 5, and your rights are set out in section 15. You also have the right to lodge a complaint with your local supervisory authority, or with the Information Commissioner's Office in the United Kingdom.

We do not have an establishment in the EEA or the UK, and given the limited scope of the data we process we have not appointed an Article 27 representative. You can reach us directly at support@prometeuz.com.

19. California: CCPA and CPRA

In the past 12 months, Orbil has collected the categories of personal information described in section 3: identifiers such as an email address and account identifier, commercial information in the form of purchase records, internet or network activity in the form of server logs, and user content that you choose to enter.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the past 12 months, and we do not knowingly sell or share the personal information of anyone under 16.

California residents may request to know, delete, or correct their personal information, and may not be discriminated against for doing so. Send requests to support@prometeuz.com. An authorised agent may submit a request on your behalf with written proof of authorisation.

20. Children's privacy

Orbil is intended for readers aged 13 and older. We do not knowingly collect personal information from children under 13. If you are between 13 and the age of digital consent where you live, please use Orbil with the involvement of a parent or guardian.

If you believe a child under 13 has provided us with personal information, email support@prometeuz.com and we will delete it promptly.

21. Changes to this policy

We may update this Privacy Policy as Orbil changes. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle your personal information, we will give you notice in the app or by email before it takes effect. Continuing to use Orbil after a change takes effect means you accept the updated policy.

22. Contact us

For any privacy question, request, or complaint about Orbil, contact us:

• Email: support@prometeuz.com
• Phone: 0994 307 1560
• Address: Prometeuz, Cauayan City, Isabela, 3305, Philippines