Draft: this text has not been legally reviewed yet and will be revised before the public launch.
Privacy policy
In short: we only keep what we need for your account, ratings and abuse protection. No ads, no tracking. We never store your location as a coordinate.
Who is responsible
The controller is ORION AI LLC (Limited Liability Company (LLC), Florida, USA), 7901 4th St N #26226, St. Petersburg, FL 33702, USA. Privacy contact: privacy@orion-ai.us.
The iOS app is offered in the Apple App Store through the developer account of Torsten Schiefen, the Android app through the account of ORION AI LLC. ORION AI LLC remains responsible for the service and the data. Apple and Google process download-related data under their own responsibility.
What data we process
Account
Email address (for sign-in with a code, there is no password), an automatically generated username (you can change it), an avatar seed, points, level and badges, and the creation date.
Ratings
Your roll rating, sub-ratings, tags, an optional comment (up to 140 characters) and the time. To check that you are on site the app briefly sends your location. We only store the distance to the venue in metres and a coarse grid value (about 150 m), no coordinates.
Photos
An uploaded photo is downsized and metadata such as GPS is removed. It stays private until an automatic review approves it (moderation, people and content check). For this the image is sent to OpenAI without account or location data. Please photograph only the room and fixtures, no people.
Profile picture
An uploaded profile picture is cropped and downsized and metadata such as GPS is removed. It stays private until an automatic review approves it (moderation, violence, hate, readable documents). For this the image is sent to OpenAI without account or location data. Everyone sees an approved profile picture next to your ratings and in the rankings. You can replace or remove it in your profile at any time.
Reports and blocks
When you report content or block people we store that so reports can be handled and your block list applied.
Technical data
Our providers log IP addresses and request data when you use the service. The app stores your session, settings and a random install identifier locally. The identifier is sent with ratings and only serves abuse protection (limits per install). It is not a device ID and is not linked to any ad network.
Location
The app asks for your location in the foreground only, to centre the map, show places near you and verify on-site rating. You can revoke access in the system settings at any time. Without location you can browse but not rate.
What is public
Username, profile picture, points, level, badges, your ratings with comments and approved photos are visible to everyone. We never show your email address. Choose a username that does not identify you.
Purposes and legal bases
- Providing the account, sign-in, ratings, rankings and awards (performance of the contract).
- Preventing abuse, fake ratings and unlawful content, reviewing photos (legitimate interest, protection of users).
- Verifying that you are on site (your consent through your device permission).
- Secure and stable operation (legitimate interest).
We use no advertising, no analytics or tracking services and we do not sell data.
Service providers
- Supabase (database, sign-in, file storage; region Zurich, operated by Supabase Inc., USA).
- Cloudflare (serving the website, bot protection with Turnstile at sign-in; Cloudflare Inc., USA). Turnstile evaluates browser characteristics to detect bots.
- Resend (sending sign-in emails; email address and code; Resend Inc., USA).
- OpenAI (automatic review of uploaded photos and profile pictures; OpenAI, USA).
- OpenFreeMap / OpenStreetMap (map tiles; the map service sees your IP address and the map section).
Where data reaches the USA we rely on recognised safeguards (standard contractual clauses or the EU-US Data Privacy Framework where the provider is certified). Place data (restaurants, hotels etc.) comes from Overture Maps and OpenStreetMap.
How long we keep data
Account, ratings and photos stay until you delete your account. In the app under Settings → Delete account, your account, ratings, badges, reports and photos are removed, and the files are deleted from storage shortly after. Rejected, replaced or no longer needed photo and profile picture files are deleted automatically. Provider logs are kept briefly according to their policies.
Your rights
You can request access, correction, deletion, restriction, data portability and object to processing. Write to privacy@orion-ai.us. You may also complain to your supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your place of residence.
Age
Loocation is intended for people aged 16 and over. If you are younger, please do not use the app without your parents' consent.
Security and changes
Connections are encrypted, database access rights are limited per account, and no secret keys are in the app. Security reports to security@orion-ai.us. We update this policy when the service changes; the date above shows the version.