Last updated: 21 August 2026
Orbo is a fasting timer. It runs on your iPhone and it is built so that we know
as little about you as possible.
You do not need an account to use Orbo. Install it, start a fast, and we
never learn that you exist. Everything below applies only to the parts you
choose to switch on.
| Works with no account | Yes — permanently, not as a trial |
|---|---|
| Works offline | Yes, entirely |
| Analytics or tracking SDKs | None |
| Advertising identifiers | None |
| Data sold or shared with brokers | Never |
| Your fasting history | Stored on your device. Exportable any time. |
Unless you explicitly turn on an optional feature described further down, all of
the following is stored only on your iPhone, in a private app container:
We cannot read any of it. There is no copy on a server.
You can export all of it to CSV or JSON at any time, on the free plan,
from Settings → Export. It is your data and it leaves with you.
An account exists only so your history can survive a lost or replaced phone.
You can use Orbo forever without one.
Sign in with Apple. Apple sends us an opaque user identifier, and — only on
the very first sign-in — your name and email address. If you use Apple's *Hide
My Email*, we receive a relay address and never your real one. We store the
identifier, and the name and email if you provided them.
Accounts are hosted on Supabase. What is stored: your identifier, your
optional name and email, your timezone, your language, and — if you enable
sync — your fasting records.
If you grant permission, Orbo can:
only values you enter yourself.
was so you do not have to type it.
**Health data is never uploaded, never leaves your device, and is never shared
with anyone.** It is read, used on-screen, and forgotten. You can revoke access
at any time in the Health app. Orbo works fully without it.
Orbo does not write your fasts to Apple Health, because Apple Health has no
fasting type and we will not misfile a fast as a workout.
Reminders about your fast are scheduled on your device and need no server.
If you separately opt into occasional product notifications, we store a
notification token together with a random identifier generated on your device,
your language and your timezone — so the message arrives in your language at a
sensible hour. This identifier is not linked to your name, email or phone
unless you have an account, and it is not an advertising identifier.
Subscriptions are processed by Apple. Orbo never sees your card, your
billing address or your Apple ID. We receive only whether an active
subscription exists, and its expiry.
If you subscribe through our website instead, payment is processed by
Moyasar, a licensed Saudi payment provider. We do not store card details.
Mixpanel, or any other analytics or attribution SDK.
feature you enabled.
In the app: Settings → Account → Delete Account. This permanently deletes
your account and every server-side record, and revokes the Sign in with Apple
token. It cannot be undone. We offer you an export first.
Without an account: delete the app. Nothing of yours exists anywhere else.
Deletion is immediate. Backups containing residual copies are overwritten
within 30 days.
| Data | Retention |
|---|---|
| On-device data | Until you delete it or delete the app |
| Account records | Until you delete your account |
| Notification token | Until you disable notifications or delete the app |
| Purchase records | As required by tax and accounting law |
Server-side data is hosted by Supabase in Singapore. If you are outside
Singapore, your data is transferred there — where required, under Standard
Contractual Clauses or an equivalent transfer mechanism.
Our processors:
| Processor | Purpose |
|---|---|
| Supabase | Database and authentication hosting |
| Apple | Purchases, Sign in with Apple, push delivery |
| Moyasar | Web subscription payments |
Wherever you live, you may ask us to access, correct, export or delete your
data, and to object to or restrict processing. The export and delete controls
are built into the app so you do not have to ask.
If you are in Saudi Arabia, the Personal Data Protection Law (PDPL) applies.
You may lodge a complaint with the Saudi Data & AI Authority (SDAIA).
If you are in the EEA or UK, the GDPR applies. Our legal bases are:
performance of a contract (providing the app), consent (Health data,
notifications, optional account), and legitimate interests (security and
preventing abuse). You may complain to your national supervisory authority.
If you are in California, the CCPA/CPRA applies. We do not sell or share
personal information as those terms are defined, and we do not offer financial
incentives for data.
Orbo is not directed at children under 13 and we do not knowingly collect their
data. Fasting is not appropriate for children. If you believe a child has
provided us data, contact us and we will delete it.
Data in transit is encrypted with TLS. Data at rest is encrypted by our
hosting provider. On-device data is protected by iOS file protection. Access to
production systems is limited and authenticated.
No system is perfectly secure. If a breach affects your data, we will notify
you and the relevant regulator as the law requires.
If we change this policy materially, we will say so in the app before the
change takes effect. The date at the top always reflects the current version.
abdulrahmanalmaz99@gmail.com
Orbo, Riyadh, Saudi Arabia.