Privacy Policy

1. Introduction

Welcome to Orcb ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Orcb (the "App"), available on Android and iOS.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the App immediately.

2. Who We Are

Orcb is developed and operated by Orcb, based in Peru. For the purposes of applicable data protection laws, Orcb is the data controller of your personal information.

3. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third-party services.

3.1 Information You Provide Directly

• Account Information: When you register, we collect your email address and password (stored in hashed form). If you use Google Sign-In, we receive your name, email address, and profile picture from Google.
• Alert Preferences: Market capitalization threshold alerts you create, including token pair addresses, blockchain network (currently Solana; Ethereum and BNB Chain support coming soon), alert conditions (greater than or equal to / less than or equal to), and target thresholds.

3.2 Information Collected Automatically

• Device Information: Device type, operating system, app version, and a unique installation identifier generated by our system.
• Push Notification Token: A Firebase Cloud Messaging (FCM) token is collected when you grant notification permissions, used solely to deliver price alerts to your device.
• Usage Data: Logs of alerts created, edited, activated, or deleted; token pairs searched; and timestamps of app activity.
• Session Data: Authentication tokens (JWT) stored locally on your device to maintain your session.
• Alert History: A local history of push notifications received, stored on your device.

3.3 Information We Do NOT Collect

• We do not collect precise or approximate GPS location data.
• We do not collect payment card numbers, bank account details, or any sensitive financial identifiers. All payment processing is handled directly by Apple App Store and Google Play Store.
• We do not collect biometric data.

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain the App: Create and manage your account, authenticate your identity, and deliver the core alert functionality.
• Send push notifications: Alert you in real time when a token's market capitalization crosses your configured threshold.
• Process subscriptions: Manage your free tier limits and PRO subscription status via RevenueCat, in coordination with Apple App Store and Google Play Store.
• Improve the App: Analyze usage patterns and app performance to debug issues and improve features.
• Communicate with you: Respond to support inquiries submitted to info@orcb.app.
• Ensure security: Detect fraud, abuse, and unauthorized access using audit logs and role-based access controls.
• Comply with legal obligations: Respond to lawful requests from public authorities.

5. How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

5.1 Third-Party Service Providers

We use the following third-party services to operate the App. Each provider processes data according to their own privacy policy:

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain certain information for legal or compliance purposes (e.g., financial transaction records).

Local data stored on your device (session tokens, alert history, notification history) is deleted when you log out or uninstall the App.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including HTTPS encryption, JWT authentication, role-based access control, audit logs, and secure hosting on Railway.

8. Children's Privacy

Orcb is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@orcb.app.

9. Your Privacy Rights

Depending on your location, you may have the right to access, correct, delete, or port your data. Feel free to contact us at info@orcb.app to execute these rights.

For European Union residents, processing is conducted on the basis of contract execution, consent (e.g., push permissions), and legitimate business interest under the GDPR.

For California residents, we comply with the CCPA. We do not sell your personal data.

10. Push Notifications and Alerts

The App requests permission to send push notifications to alert you when your configured market cap thresholds are triggered. You may opt out at any time in device settings.

11. Financial Disclaimer

Orcb displays market capitalization data sourced from third parties. We do not control the accuracy, completeness, or timeliness of this data. This information is provided for informational purposes only and does not constitute financial advice.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top and notify you via push notification or in-app notice at least 7 days before changes take effect.