1. Overview
This Policy applies to the Orbit iPhone app (the “App”) and https://orbit.wpppc.cn (the “Website”).
The current version does not require an Orbit account, does not provide Orbit cloud sync, does not upload business records or user-selected images to developer-operated servers, and contains no advertising, cross-app tracking, or third-party analytics SDK.
The Website is static. It offers no account, form that submits information to an Orbit server, or mailing-list signup and uses no analytics, advertising, or marketing cookies. The consent control on the Support page only records your choice in the browser and opens your email client; it does not submit form content to an Orbit server. The developer may process only Apple-provided aggregate analytics or diagnostic reports, Website security logs, and information you voluntarily send in a support email.
2. Local App Data
You may create and save Workspace settings, record types, custom fields, products, categories, tags, orders and other records, amounts, dates, notes, customer names and contact details, metrics, and goals in the App.
The App processes and stores this information on your device. The developer does not receive, store, or access it through an Orbit server and does not use it for advertising, tracking, or profiling.
Local data remains until you modify or delete it in the App or on your device. A normally deleted record remains in Recently Deleted until you permanently delete it. Device backups may contain App data; those backups are managed by you and Apple through device and iCloud settings and are not Orbit cloud sync.
If you enter information about another person in a business record, make sure you are permitted to do so and avoid recording sensitive information unrelated to your business purpose.
3. User-Selected Images
When you choose an image for a Workspace, product, or category, the App uses Apple’s system photo picker. Orbit does not request broad access to browse your photo library and reads only the item you explicitly select.
The processed image is stored with the App’s local data. A product image may remain in a historical order as a product snapshot so the record continues to display consistently. Orbit does not upload these images to a developer-operated server.
- The input file is limited to 25 MB;
- the output is a JPEG with a maximum dimension of 512 pixels;
- the output is limited to 2 MB; and
- metadata from the original file is not retained.
4. Apple Aggregate Analytics and Diagnostics
Apple may provide the developer with aggregate App Store performance information, such as product-page activity, downloads, and territory trends.
Only when a user has chosen in their Apple device settings to share analytics and diagnostics with app developers may Apple also provide aggregate or privacy-protected usage, session, crash, and performance reports. The developer uses these reports only to understand overall App stability and use, investigate problems, and improve Orbit.
Orbit contains no SDK that independently uploads analytics. It does not deliberately add your local business records or selected images to these reports, and the developer does not attempt to identify individuals from Apple reports or use them for advertising. You can manage this choice under Settings > Privacy & Security > Analytics & Improvements on your iPhone.
5. Website Requests and Security Logs
The Website uses no analytics, advertising, or marketing cookies and does not track visitors across websites.
When you visit the Website, Tencent Cloud hosting infrastructure and the web server process technical information associated with requests and security events to deliver the Website, detect abuse, troubleshoot failures, and meet network-security obligations. This may include the IP address, request time, HTTP method and requested path, response status, and browser or device user agent. Website access logs do not record query strings or referrers.
Network logs will be retained on Tencent Cloud infrastructure in mainland China for at least six months. They may be kept longer where required by law or necessary for a specific security incident, and will be deleted or anonymized when the retention purpose ends. They are not used for advertising, marketing, or profiling.
6. Support Email
If you voluntarily email wpppc2022@outlook.com, the developer processes your email address, display name, subject, message, attachments, message time and transmission metadata, and any device, operating-system, or App-version details you choose to provide.
This information is used only to answer your request, troubleshoot an issue, maintain security, and comply with applicable law. Do not send passwords, complete business databases, financial-account details, or sensitive information unrelated to the issue.
Support email is retained for one year after the last correspondence and is then deleted from the developer’s active mailbox, unless continued retention is legally required or necessary for an active dispute or security incident. The email provider’s deletion and backup cycle may retain a deleted copy for a short additional period.
7. Service Providers and International Processing
The developer currently uses Tencent Cloud Computing (Beijing) Co., Ltd. for Website hosting and security infrastructure in Guangzhou, mainland China; Apple for App Store distribution, user-controlled analytics and diagnostic sharing, and user-managed device backups; and Microsoft Outlook.com to receive and store support email. Orbit does not transfer local App data to these Website or email providers.
Microsoft states that Outlook.com email may be stored and processed in your region, the United States, and other locations where Microsoft or its service providers operate. For users in mainland China, an overseas recipient may include Microsoft Corporation and its affiliates and service providers. The purpose is email transmission, storage, security, and support. The information may include the sender address, email headers, message, attachments, and transmission metadata.
Microsoft Corporation can be contacted at One Microsoft Way, Redmond, Washington 98052, USA. You may use the contact and privacy-rights request channels in the Microsoft Privacy Statement to ask about Microsoft’s processing and exercise applicable data rights.
Sending support email is optional. A user in mainland China should review the cross-border notice on the Support page and provide a separate confirmation before opening the email link. The developer does not sell personal data or provide it to advertisers or data brokers.
8. Legal Bases
Depending on the law that applies, processing may be based on responding to your support request or taking steps necessary to provide the requested service; compliance with network-security, recordkeeping, and other legal obligations; legitimate interests in Website and App security, reliability, and product quality; or consent and separate consent where required by law.
Orbit does not make decisions based solely on automated processing that produce legal or similarly significant effects on an individual.
9. Your Choices and Rights
You can review, modify, and delete local App data directly in the App or on your device. Because the developer does not possess that local data, the developer cannot retrieve or modify it from a server.
For support email or Website logs, applicable law may give you rights to request access, a copy, correction, deletion, restriction, withdrawal of consent, or objection. The developer may need to verify your identity and may limit a request where a statutory retention period, security investigation, or other lawful exception applies.
Use the Support page to submit a request. You may also complain to a competent privacy or data-protection authority.
10. Children
This Policy does not impose a general minimum age for Orbit. Normal local use of the App does not transmit age information or local business records to the developer.
A user under 14 in mainland China should not send personal information to the support address without authorization from a parent or other guardian. Users in other regions should obtain guardian authorization where local law requires it. If the developer learns that information requiring guardian consent was received without that consent, processing will stop and the information will be deleted after verification.
11. Security
The developer uses technical and organizational safeguards appropriate to the type of information and risk to limit access and reduce the risk of unauthorized access, disclosure, alteration, or loss. No device, email, or internet transmission method can be guaranteed to be completely secure.
12. Changes
If product features, data practices, providers, or legal requirements change, this Policy and its effective date will be updated. Material changes will be prominently identified on the Website, and renewed consent will be obtained where required.
13. Contact
Controller: Pengcheng Wang / 王鹏程
Privacy and support email: wpppc2022@outlook.com
Go to Support