Orbeo
Privacy Policy
In force from 8 October 2026
Orbeo is a messenger without a phone number. This page says plainly what is stored, where, and how to remove it. It describes what the service actually does — not what it might do one day.
Who runs Orbeo
The service is operated by Prikota Kirill Olegovich. For any question about your data write to support@orbeo.me. Requests are answered at the same address.
What Orbeo never asks for
- Your phone number. Registration needs only an Orbeo ID and an access code.
- Your email address. The address stored for sign-in is derived from your Orbeo ID and does not lead anywhere.
- Your address book. The app never reads or uploads your contacts.
There is no advertising inside Orbeo, and the apps have no third-party analytics or trackers. Nothing about you is sold or handed on for marketing. The one exception is the website, described below: we advertise Orbeo on Yandex, and Yandex needs to know whether its ad brought someone in.
What is stored
- Account. Orbeo ID and a hash of your access code. The code itself is never stored.
- Profile. Display name, description, avatar colour, avatar image if you upload one, chosen decoration, and the links you add yourself.
- Messages and attachments. The text of your messages, photos, voice messages, stickers and reactions, together with who sent them and when.
- Location. Only when you send it to a chat yourself with the Place button. The point goes to the other person as an ordinary message and is stored with the conversation. The app never determines your location in the background.
- Conversations. Who takes part, group and channel names and handles, and when each participant last read a conversation.
- Presence. The time you were last seen, so others can see “recently online”.
- Notifications. A device token issued by the platform, the platform name, and your interface language — the language is what makes a notification arrive in words you read.
- Country. Taken once, at first launch, from the region set in your phone — not from your location and not from your IP address. It tells us which country's data-protection law applies to your data. Other people do not see it. If it is wrong, write to support@orbeo.me.
- Calls. Who called whom, when, and how long it lasted. Audio and video are not recorded.
- Recovery. A bcrypt hash of your twelve-word recovery phrase. The phrase itself is shown to you once and is never stored.
- Blocks and reports. Who you blocked, and complaints you send, so they can be reviewed.
What stays on your device only
Your chat wallpaper, including a photo you pick for it, your choice of sounds, and interface settings never leave the device. They are not part of your account and do not follow you to another phone.
Where it is stored, and who else touches it
- Supabase holds the database, photos and voice messages, on Amazon servers in Tokyo, Japan.
- Our own server stores videos and files you send. It also turns a voice message into text when someone in the conversation taps “Text” under it: the recording is recognised right there by an open speech-recognition model and is not kept; the text is stored with the message, visible to the members of that conversation, and deleted together with the message. The server is rented from Netcup in Nuremberg, Germany, and only we administer it.
- LiveKit Cloud carries voice and video during a call. Media passes through and is not recorded or stored.
- Firebase Cloud Messaging (Google) delivers notifications to Android devices. The message title and preview pass through Google in order to be shown on your screen.
- Apple Push Notification service delivers notifications to iPhones in the same way: the title and preview pass through Apple.
- OpenRouter (and the AI model it routes to) translates posts in the official Orbeo channel and in Orbeo's own content channels into Russian, English and Kazakh, so every subscriber can read them in their language. Only the text of those public channel posts is sent. Private chats, groups and other people's channels are never sent anywhere for translation.
- Yandex Metrica counts visits to the orbeo.me home page and clicks on the download buttons, and at web.orbeo.me it receives one mark — “an account was created” — at the moment you sign up in the browser, and nothing else. Yandex sees your IP address, browser and a cookie identifier, as it does on any site with its counter. Session recording (Webvisor) is switched off: your chats, contacts and Orbeo ID are never sent to it. The iPhone, Android, Mac and Windows apps do not contain Metrica.
No other party receives your data.
About encryption — plainly
Traffic between your device and the server is encrypted. Messages are then stored on the server in a readable form, which is what makes them appear on a new device after you sign in.
Orbeo does not have end-to-end encryption. Technically, whoever operates the server could read a message. We say this outright rather than let you assume otherwise: for anything that must be secret from us as well, use a messenger built for that.
How long it is kept, and how to delete it
Data is kept while your account exists. Settings → Delete account removes your account, your profile and the profile photos you uploaded. Deletion is immediate and cannot be undone.
What stays, said plainly: messages you already sent to other people remain in their copy of the conversation, together with the photos and voice messages attached to them. They are part of someone else's correspondence, and we do not reach into it. Your name is no longer attached to them.
A message you delete yourself is a different matter: its text and its attached file are erased, not merely hidden.
Children
Orbeo is not intended for children under 13. If you learn that a child has created an account, write to the address above and it will be removed.
Changes
If this policy changes, the new text appears on this page with a new date. Changes that materially affect you will also be announced inside the app.