Orbit Wallet ("Orbit", "we", "us") is operated by Big Bad Agency. You can reach us at hello@bigbad.agency. This policy explains what data the app and our backend service (api.orbitwallet.me) handle, and what stays only on your device.
To provide portfolio balances, the @username identity feature, and Orbit Pay merchant payments, our backend processes a limited set of data:
| Data | Why |
|---|---|
| Public on-chain wallet addresses (Bitcoin, EVM chains, Solana) | To read balances and transaction history from public blockchains and show your portfolio. On-chain addresses and transactions are inherently public. |
| Your chosen @username and its mapping to your public address(es) | So others can send to your @name instead of a long address. |
| Payment-link and transaction metadata (amounts, coin, memo, status, timestamps) for Orbit Pay | To create, display, and settle merchant payment requests. |
| Basic technical/log data (IP address, request time, app version, error diagnostics) | Security, abuse prevention, and keeping the service running. Retained only as long as needed for those purposes. |
We do not require an email address or phone number to use the wallet. If a specific optional feature asks for contact details in the future, this policy will be updated and that collection will be clearly disclosed at the point of entry.
Transactions you broadcast are recorded on public blockchains that Orbit does not control and cannot alter or delete. Anyone can view addresses, balances, and transaction history on a public block explorer. Linking a public username to an address may make your on-chain activity easier for others to associate with you.
We use infrastructure and blockchain data providers strictly to operate the service, for example: public blockchain RPC / indexer providers to read on-chain data, and our own hosting for api.orbitwallet.me. These providers process data only to deliver their function and are not permitted to use it for their own purposes. We do not share your data with advertisers or data brokers.
Your keys and wallet configuration live in your device's local storage / secure storage. Uninstalling the app or clearing app storage without a backup of your recovery phrase will permanently remove access to those funds — we cannot restore them.
Orbit Wallet is a financial application intended for adults (18+). It is not directed to children and we do not knowingly collect data from anyone under 18.
We use transport encryption (HTTPS/TLS) for all traffic to api.orbitwallet.me and follow reasonable safeguards. No system is perfectly secure; because Orbit is non-custodial, protecting your recovery phrase is ultimately your responsibility.
We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, surfaced in the app.
Questions or data requests: hello@bigbad.agency.