Security at ORBII
You trust us with the two most sensitive things you own: where you are, and your voice. We treat that as sacred.
Your voice stays on your phone
ORBII recognises your distress word using a model that runs on your own device. Your audio is never uploaded, streamed, or stored on our servers during normal use. The safest data is the data that never leaves, so there is no voice recording of yours on any server to leak or misuse.
Encryption
- In transit: All data between the app and our servers is sent over encrypted connections (HTTPS/TLS).
- At rest: Data stored on our managed cloud infrastructure is encrypted at rest.
Strict access controls
We use row-level security so that each user can only ever access their own data. Sensitive uploads, such as any responder verification documents, are kept in private storage accessible only to authorised reviewers, never to other users.
Location is shared only when you choose
Your live location reaches your trusted circle during an active SOS, during a Safe Journey, and while you have Circle sharing switched on. Circle sharing is opt-in, you set how long it runs, and everyone in the circle can see who is currently visible, so it can never be used to watch someone secretly. It is unavailable on accounts belonging to under-18s.
Today’s location history is permanently deleted at midnight IST by an automated job. We hold no long-term record of where you have been, and we never sell your location.
Honesty about limits
No system is perfectly secure, and we will never pretend otherwise on a safety product. We use strong, industry-standard protections and keep improving them. If a feature is not real or not ready, we do not claim it.
Reporting a vulnerability
If you believe you have found a security issue in ORBII, please tell us responsibly at orbiisafety@gmail.com. Give us a reasonable chance to fix it before disclosing it publicly. We genuinely appreciate researchers who help keep users safe.
