Privacy Policy

This Privacy Policy explains how Ruminski Labs OÜ ("we", "us", "our") collects, uses, and protects your personal data when you use the Orbis app (the "App"). We are the data controller for that data.

1Who We Are

Ruminski Labs OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. Privacy contact: support@learnorbis.com. As an Estonian company, we process personal data in line with the EU General Data Protection Regulation (GDPR).

2Data We Collect

Account and identity data. If you create an account, then depending on the sign-in method you choose (Google, Apple, or email), we receive a user ID, your email address, and — where the provider supplies it — your display name and profile photo, along with the sign-in provider used. If you use Apple's "Hide My Email", we receive only the relayed address Apple gives us.

Technical and usage data. We store a small profile and usage record that can include your platform (iOS or Android), app version, account creation time, last-active time, and a count of how many times you have opened the App.

Learning data. To make the App work, we keep your learning activity: lesson progress and completion, quiz answers and results, learning streaks, flashcard and spaced-repetition state, bookmarks, reading positions, daily minutes studied, recent history, and the topic interests you select during onboarding. This data is stored on your device and, if you are signed in, can be backed up to your account so you can restore it on a new device.

Analytics and diagnostics. If enabled, we collect product-analytics events (for example, which lessons or screens you open, quiz completions, and paywall interactions) and crash reports. These can include limited device and app identifiers and, when you are signed in, an identifier linked to your account.

Subscription data. When you subscribe, the app stores and our subscription provider (RevenueCat) tell us your subscription status (for example, whether you are on a trial or an active plan). We do not receive or store your full payment-card details — those are handled by Apple or Google.

Messages and submissions. If you contact us or use the in-app tools to send feedback, report an error in a lesson, or request a topic, we collect the message you write together with limited context — such as the item you were viewing, the app version, your platform, and your user ID if you are signed in.

Notifications. Daily reminder notifications are scheduled locally on your device. We do not operate a remote push-notification service, and enabling reminders does not send your data to us.

3Where Your Data Is Stored

Most learning data lives locally on your device. Your account profile and any cloud backup are stored using Google Firebase (Cloud Firestore and Firebase Storage).

4How and Why We Use Your Data, and Our Legal Bases

• To provide the App and your account, sync your progress, and deliver any subscription you buy — legal basis: performance of a contract.
• To keep the App secure, prevent abuse, fix crashes, understand and improve how the App is used, and respond to your messages and reports — legal basis: our legitimate interests, and your consent where required for analytics.
• To send the local learning reminders you have turned on — legal basis: your consent.
• To comply with legal obligations, such as tax and accounting for purchases — legal basis: legal obligation.

We do not sell your personal data, we do not use it for third-party advertising, and we do not make decisions about you based solely on automated processing.

5Analytics and Crash Reporting — Your Controls

Analytics and crash reporting are provided through Firebase (Firebase Analytics and Firebase Crashlytics) and PostHog (product analytics and session replay). You can turn analytics and crash reporting on or off at any time in Settings > Privacy. Turning them off stops collection of that data going forward.

6Third-Party Services (Processors)

We share data only with service providers that help us run the App, under appropriate agreements:

• Google Firebase — we use Firebase Authentication (sign-in), Cloud Firestore and Firebase Storage (your profile, submissions, and cloud backup), Firebase Analytics (usage analytics), Firebase Crashlytics (crash reporting), and Firebase Remote Config. See policies.google.com/privacy and firebase.google.com/support/privacy.
• PostHog — product analytics and session replay to help us understand how the App is used and improve it (EU-hosted; session recordings mask text you enter). See posthog.com/privacy.
• RevenueCat — manages subscription entitlements. See revenuecat.com/privacy.
• Apple App Store and Google Play — process payments and host the App. See apple.com/legal/privacy and policies.google.com/privacy.
• The App may also load images and media hosted by third parties such as Wikimedia; those requests are subject to their privacy policies (foundation.wikimedia.org).

7International Transfers

Some of these providers (for example, Google and RevenueCat) may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards by emailing support@learnorbis.com.

8How Long We Keep Data

We keep your account profile and cloud backup for as long as your account exists. We keep messages and reports you send us for as long as we need them to respond and for our records. When you delete your account, we delete your cloud profile and cloud backup; learning data stored locally is removed when you delete the App or reset local data. Analytics and crash data are retained for limited periods under our providers' standard retention settings. We may keep limited records longer where the law requires (for example, purchase records for tax purposes).

9Your Rights

Under the GDPR you have the right to: access your data; correct inaccurate data; delete your data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time, without affecting processing already carried out. You can exercise many of these directly in the App — including deleting your account and toggling analytics — or by emailing support@learnorbis.com. We will respond within the time the law allows. You also have the right to complain to your local data-protection authority; in Estonia this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

10California Residents

If you are a California resident, you have rights under the CCPA/CPRA to know what personal information we collect, to request deletion, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share your personal information. You can exercise these rights using the contacts above, and we will not discriminate against you for doing so.

11Children

The App is intended for users aged 16 and over and is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

12Security

We use reasonable technical and organisational measures to protect your data, including reputable cloud infrastructure and encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13Changes to this Policy

We may update this Privacy Policy as the App evolves. If we make material changes, we will take reasonable steps to notify you in the App and we will update the "Last updated" date above.

14Contact

For any privacy question or request, email support@learnorbis.com or write to Ruminski Labs OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia.