Legal

Privacy Policy for Helpers

For ORBII Helpers (in.orbii.helper), the responder app. The ORBII app has its own policy, and the two are deliberately different: what we collect from a helper is not what we collect from somebody we are protecting.

Last updated: 24 August 2026

Who we are

ORBII Safety, operating in India. For any question about your data, to exercise a right, or to complain: privacy@orbii.in. We answer from a monitored inbox, usually within two working days.

1. What we collect, and why

Data	Why	Kept for
Name, phone, email	To identify you and contact you about your application	While your account exists
Government photo ID	To verify you are a real, identifiable person before you can be sent to a stranger in distress	See section 2
Selfie	To confirm the ID belongs to you	See section 2
City and occupation type	Context a reviewer needs to assess an application	While your account exists
Location, while on duty only	To send you the nearest emergency	See section 3
Arrival records	Accountability: who attended which incident	See section 4
Coin and payout ledger	To pay you, and for tax and audit obligations	8 years (Income-tax Act)
Device push token	To reach you when the app is closed	While your account exists
Crash and error logs	To find bugs	14 days

2. Identity documents

We collect a government-issued photo identity document and a selfie. The selfie exists only to confirm the document belongs to you.

Aadhaar. If you submit an Aadhaar card we ask you to mask the first eight digits, in line with UIDAI guidance. We do not perform Aadhaar authentication or eKYC, we do not store a full Aadhaar number, and we do not use Aadhaar as a database key. You may use a driving licence, passport or voter ID instead, and if you would rather not give us an Aadhaar card at all, do not.

Where it is stored. Documents go to a private storage bucket that is not publicly readable, enforced by row-level security rather than by the app. Reviewers open them through links that expire. No document is ever attached to a dispatch, shown to a person who called for help, or shown to another helper.

How long we keep them. If your application is rejected, documents are deleted within 30 days of the decision. If you are approved, they are kept while you are on the network and for 90 days after you leave, so that a dispute about a past incident can still be investigated, and then deleted.

Documents are never used for advertising, profiling or credit assessment, and never sold or shared with a third party for their own purposes.

3. Location

We collect your location only while you are marked On Duty. Not before, not after, and never when the app is merely installed or open.

While on duty your position updates in the background so we can send you the nearest emergency. The moment you go off duty, collection stops and your position is removed from the dispatch pool.

You will always be able to tell. While on duty, Android shows a permanent notification that cannot be dismissed. This is deliberate and it is not configurable. An app that knows where you are and does not say so is a tracker, and that is as true for a responder as for anybody else.

Your location is used to compute distance to an incident. It is not sold, not shared with advertisers, not used to build a profile of your movements, and not kept as a history of where you have been. You can revoke location permission at any time in Android settings; duty mode will not work without it, and nothing else in the app is affected.

4. Incident and arrival records

When you accept a dispatch and confirm an arrival, we record that you attended, when, and for which incident.

These records concern another person's emergency, so they are kept for accountability even if you later delete your account: for 3 years, or longer where an incident is subject to a legal proceeding, an investigation, or a lawful request from an authority.

This is the one place your right to erasure is limited, and it is limited on purpose. A record that a particular person attended a particular emergency protects the person who called for help, and it protects you against a false accusation. We will tell you what is retained and why if you ask.

5. Your rights

Under India's Digital Personal Data Protection Act you may ask us for a copy of your data, ask us to correct it, ask us to delete it, or complain about how it is handled. Write to privacy@orbii.in from the email address on your account, so we can identify you without asking for more personal data than we already hold.

The single exception to erasure is section 4. Everything else goes.

6. Deleting your account

You can delete your ORBII Helpers account at any time from inside the app, or by writing to privacy@orbii.in. You do not need our permission and we will not ask you to justify it. Deletion removes your profile, your documents (subject to the 90-day window in section 2) and your push token. Arrival records are retained under section 4, and the payout ledger under the Income-tax Act.

7. Security

Data in transit is encrypted (HTTPS/TLS). Data at rest is encrypted by our managed cloud provider. Access is enforced with row-level security so one helper cannot read another's records, and identity documents sit in a private bucket readable only by an authorised reviewer. More detail is on our security page.

8. Who we share with

Our infrastructure providers, who process data on our instructions and for no purpose of their own: a managed database and storage provider, and a push-notification service. We also share what a lawful request from an authority requires.

We do not sell your data. To anybody, for any amount. That includes colleges and institutions we work with, who receive no dashboard and no access to helper or user data.

9. Under-18s

ORBII Helpers is for adults. You must be 18 or over to be verified as a responder, and we do not knowingly accept applications from anybody younger.

10. Changes

If we change this policy in a way that materially affects you, we will tell you in the app rather than quietly updating this page. The date at the top always reflects the current version.