Privacy policy

Last updated: 28 September 2026

Orbit (the Orbit app and the pages on go.orbit.krd) is made by Orbit KRD in Sulaymaniyah, Kurdistan Region of Iraq. This policy says what the app and the pages collect, and why. You do not need an account to use them, and there are no ads and no tracking.

Kept only on your phone

The language you choose and light or dark mode are stored on your phone only. The places and items you save stay on your phone too, unless you sign in to an Orbit account (below). Deleting the app deletes what is on the phone.

Your Orbit account (optional)

You can sign in with Apple, with Google, or with your mobile number. With Apple or Google, they tell us only that it is you, your name and an email address (with Apple you can hide your real address); we never see your password, and we send them nothing about what you do in Orbit. With your mobile number, we send a code to that number on WhatsApp, from Orbit's own WhatsApp number, to check it is yours; WhatsApp (Meta) receives the number and the code to deliver it. We message you on WhatsApp only to send sign-in codes — never advertising. A phone number is optional: you can add one later, or never.

The account keeps how you sign in, your email address if Apple or Google gave one, your phone number if you add one, the name you give, your birthday (day and month only) if you add it, your language, your notification choices and your saved places and items, so they are the same on every phone you sign in on.

Businesses do not see your account, except as the Orbit Points section below says.

You can delete the account at any time in the app: More → your name → Delete my account. Your number, email address, name, birthday and saved list are erased straight away, every phone is signed out, and a Sign in with Apple link to Orbit is ended. You can also ask us to delete it: hello@orbit.krd.

Orbit Points

When you collect Orbit Points or use an offer, the business you buy from sees your first name only — never your phone number — and the purchase amount it already knows. Orbit keeps which Orbit businesses you bought at, when and for how much, so your points and offers work and so misuse can be spotted. Other businesses do not see where you shop.

At a counter, staff may type your number to find your rewards, or to send you a sign-in code so that purchase can earn — your account is made only when you read that code out. They still see only your first name.

After you delete your account, records of past purchases and points stay without your number or name, so each business's totals stay correct. They can no longer be linked to you.

Location

The app asks for your location only when you tap "Near me", the location button on the map, or "Directions" for a place. Nothing is asked for when the app opens, and nothing runs in the background.

Showing how far a place is happens on your phone. Asking for the way there is the one thing that leaves it: your position and the place's position are sent to the map's routing service (OpenStreetMap) to work out the road. Nothing else goes with them — no name, no account, no device identifier — and neither we nor they keep them. Your location is never stored on Orbit's servers.

You can turn location off at any time in your phone's settings. The app still works: it simply shows the places without distances, and the way there without a starting point.

Camera

The camera is used only to scan a place's QR code. No photo or video is stored or sent.

Visits to a page

When a place's page is opened, the app or the web page sends one anonymous count: which page, in which language, whether it was opened from its QR code, and which items were looked at. It carries no name, account or device identifier. The business sees the totals as visit statistics.

What you choose to send

A message to a place contains what you write, and your name and phone number only if you add them. It goes to that business. A report about a page goes to Orbit.

"Put your business on Orbit" sends the business name, type, city and phone number you enter, and your name if you add it, to Orbit so we can contact you.

Businesses that sign in

Owners and staff of businesses that use Orbit's system can sign in from the app. That use is covered by the agreement between the business and Orbit KRD.

Other services

Map pictures come from OpenFreeMap (map data © OpenStreetMap contributors) and some fonts from Google Fonts. As with any website, these services receive your device's internet address when the app downloads from them. Our own server keeps standard technical logs, such as internet address and time, to keep the service secure and prevent abuse.

We do not sell personal information and we do not share it with advertisers.

Children

Orbit is not directed at children under 13.

Your choices

To have a message or request you sent removed, or to ask about your information, contact us: hello@orbit.krd.

Changes

If this policy changes, the new version will be on this page with its date.