Last updated: October 8, 2026
Órbita helps you plan walking and running routes and follow them with on-device GPS. This policy describes information handled by the app and its service providers.
App: Órbita
Privacy contact: salimictus@gmail.com
When you request a route, Órbita sends the start point, any intermediate route points, route preferences, and any street areas you chose to avoid over HTTPS to the Órbita routing service operated on Cloudflare. The service forwards the routing request to OpenRouteService / HeiGIT to calculate walking directions. The routing service does not store route request bodies or route histories.
While a run is active, Órbita uses your device location on the phone to show your progress and provide turn guidance, including when the app is minimized or the screen is off. GPS updates are processed on your device and are not sent to the routing service. You can also set a route start point manually instead of using your current location.
Órbita stores saved routes, temporary route-selection state, run summaries, and your weekly goal in app storage on your phone. Run summaries contain the route name, date and time, duration, and distance; they do not contain a GPS track. Run history can be cleared from the app. This information is not uploaded or synchronized. It remains on the phone until you remove it, clear Órbita's app storage, or uninstall the app. GPX export is performed only when you choose Export GPX and select another app or destination.
Cloudflare processes routing requests as the infrastructure provider. OpenRouteService / HeiGIT receives the route coordinates and options needed to calculate the requested route. OpenStreetMap's tile server receives requests for the map tiles displayed on your screen; those requests include the network information needed to deliver tiles and may reveal the area being viewed. Each provider handles its service logs under its own policies.
To enforce request limits, the Órbita routing service stores a random request identifier, timestamp, and a daily HMAC hash of the connecting IP address in its Cloudflare database. These records are deleted after 48 hours. Raw IP addresses and route request bodies are not stored in that database.
Requests to the routing service use HTTPS. Location permission is used only when you ask to use your location or start a GPS-guided run. You can deny location permission and set a start point manually, but GPS-guided tracking will not be available. You can stop a run at any time. You can clear run history in the app; clearing app storage or uninstalling Órbita removes routes and other local app data.
Órbita does not use accounts. To delete run summaries, clear Run history in the app. To remove saved routes and other data stored on your phone, clear Órbita's app storage in Android settings or uninstall the app. To request deletion of an Órbita backend rate-limit record, email salimictus@gmail.com with the approximate date and time of the routing request. These records are automatically deleted within 48 hours and do not contain raw IP addresses or route request bodies. For data held by OpenRouteService, OpenStreetMap, or another service provider under its own policies, contact that provider directly.
Órbita does not require an account and does not include advertising or an analytics service.
If you choose Support Órbita via PayPal, confirm that you are at least 18 and the app opens a PayPal-hosted page in your browser. PayPal handles any information you enter and the payment under its own privacy policy and terms. Órbita does not receive or store your PayPal login or payment details. Tipping is optional and does not unlock app features, content, or services.
This policy may be updated if the app's data practices change. For questions or privacy requests, contact salimictus@gmail.com.