OrbitFit Privacy Policy

1. Overview

This Privacy Policy explains how OrbitFit ("OrbitFit," "we," "us," or "our") handles information when you use the OrbitFit desktop application, related backup features, and connected services.

OrbitFit is a desktop gym management application designed to keep core workspace data on the user device while using selected third-party services for account access, licensing, and optional backup integration.

2. Information We Process

Depending on how you use OrbitFit, we may process the following categories of data:

• Account and sign-in data: email address, user ID, business ID, role, installation ID, device label, session tokens, and authentication state.
• License and access data: license key details, license status, expiry information, verification metadata, and local license cache details.
• Workspace data you enter: member names, phone numbers, membership details, notes, billing dates, and related records created in the app.
• Backup data: local backup files, backup file names, timestamps, storage status, restore preview metadata, and backup logs.
• Google Drive connection data: Google account email, OAuth authorization data, and a locally stored refresh token if you choose to connect Google Drive backup.
• Technical and device-side data: app settings, local cache files, backup catalog metadata, and diagnostic messages related to authentication, licensing, backup, restore, or sync actions.

3. How We Use Information

We use the information above to:

• authenticate users and manage sign-in sessions;
• verify licenses and control access to OrbitFit features;
• store and display local gym workspace data inside the app;
• create, catalog, restore, sync, and delete local or cloud backups;
• connect to your Google Drive account when you request backup integration;
• protect the security and integrity of the app and backup workflows; and
• provide support, troubleshoot issues, and maintain service reliability.

4. Where Data Is Stored

• Local device storage: OrbitFit stores core workspace data in a local database on your device, along with local backup files in the app data directory.
• Local secure credential storage: sensitive local credentials such as saved license details and Google Drive refresh tokens may be stored using the operating system keyring or secure credential store when available.
• Connected services: OrbitFit uses Supabase for user authentication, session-related functionality, and licensing-related verification flows.
• Google Drive: if you connect Google Drive backup, backup files may be uploaded to a folder created for OrbitFit backups in your Google Drive account.

5. Google Drive Backup Permissions

OrbitFit only accesses Google Drive if you choose to connect it. When connected, OrbitFit uses Google OAuth and requests the access needed to create, upload, list, download, and delete backup files used by OrbitFit backup features.

OrbitFit may also request access to your Google account email address to show your connection status inside the app.

OrbitFit does not use Google Drive access for advertising, profiling, or unrelated data mining. If you disconnect Google Drive from OrbitFit, the locally stored refresh token on that device is removed, but any backup files already present in your Google Drive may remain there until you delete them.

6. Sharing and Disclosure

We do not sell your personal information.

We may disclose or transmit limited information only in the following cases:

• Supabase: to authenticate users, establish backend session state, and perform licensing-related verification.
• Google: to complete user-authorized Google Drive backup actions.
• Legal or safety reasons: if required to comply with applicable law, regulation, legal process, or to protect the rights, safety, or security of OrbitFit, its users, or others.

7. Data Retention

• Local workspace data and local backups generally remain on your device until you delete them, uninstall the app, or otherwise remove the underlying files.
• Backup catalog records and backup logs may remain in the local OrbitFit database until removed by app actions, retention settings, or deletion workflows.
• Google Drive backup files remain in your Google Drive account until deleted by you, removed by OrbitFit retention rules, or otherwise removed from your account.
• Authentication, licensing, and session data handled by third-party services may be retained according to those service providers' own practices.

8. Your Choices and Controls

You can control your data in several ways inside OrbitFit:

• sign in or sign out of your OrbitFit account;
• connect or disconnect Google Drive backup;
• create, sync, restore, or delete backup files;
• delete local backup copies, cloud backup copies, or both; and
• manage the business data you enter into your local workspace.

9. Security

We use reasonable technical and organizational measures designed to protect information handled by OrbitFit. For example, OrbitFit may use local secure credential storage for certain sensitive secrets where the operating system provides it.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.