Orbiri Data Privacy and Usage Policy
Website data
This section covers data collection and usage via the www.orbiri.com website.
Purpose
Orbiri is designed to support collective digital safety through simplified parental controls and community-based screen time standards. Our website’s purpose is to provide information to visitors about our service. We collect data on all visitors in line with our cookie policy. For visitors who complete the contact form, we store the information provided for the purpose of responding to the query.
Orbiri Service Data
This section covers data collection and usage via the Orbiri apps — Orbiri Parent and Orbiri Screen — as well as via the community portal at communities.orbiri.com.
Purpose
We collect only the data necessary to provide our service: protect children’s device use, teach good digital habits, empower parents and communities (e.g. schools), and enable intelligent, adaptive features like safety scoring.
Consent
By installing and configuring Orbiri Parent on your parent device(s) and Orbiri Screen on your child(ren)’s device(s), you are granting consent for all the data described below to be collected and used, in the manner also described below. Withholding this consent will mean you are not able to use the service.
You are also granting general consent for Orbiri to use anonymised, pseudonymised and/or aggregated copies of your data for the purposes of company analytics and product development.
You are not consenting for any of your (or your child’s) data to be given or sold to any third party, in any form, for any purpose that is not explicitly described below.
Withdrawing consent & your Right To Erasure
While you have an active subscription to the Orbiri service (either paid or free), you are providing consent for all data we collect to be used as described in this document.
You are free to cancel your subscription at any time, which will cause all of your data to be irreversibly anonymised so it may continue to be used for the purposes of company analytics and product development, but without any personal identifiers. Re-subscribing (even with the same username) will create a brand new set of data which cannot be linked to the previous, anonymised dataset.
All historical data is kept while your subscription is active. Upon cancelling your subscription, and having your data irreversibly anonymised, the anonymised data may then be kept indefinitely for the purposes of company analytics and product development.
General Data Protection (GDPR) Roles
Data Controller
Orbiri Limited is the data controller, as defined by the UK GDPR. We strictly adhere to the guiding principles of the UK GDPR and our responsibilities as a data controller.
Data Processors
Google Cloud
Orbiri securely stores and processes its user data as part of providing its service on infrastructure hosted on Google Cloud Platform. Google Cloud is therefore the data processor, as defined by the UK GDPR. More information on GCP’s GDPR commitments can be found here. All data is stored in GCP’s UK or EEA regional data centres.
Stripe, Apple and Google (payments)
Orbiri does not process payments directly; instead we allow users to select their preferred payment processor. If a user subscribes using their app store, then the payment processor will be Apple or Google accordingly. If subscribing via the orbiri.com website, our selected payment processor is Stripe.
Data Collection & Usage
1. Parent/Guardian Data (including account data)
| Data collected | Usage |
|---|---|
| Apple or Google ID and associated full name | Account management and secure authentication. Also used with our third‑party payment processor for billing. |
| Family structure (e.g. linked co‑parents, children and devices) | Processing screen‑time requests and usage reporting. |
| Device information (e.g. make, model, OS version, UUID of parent device) | Secure management of child devices by authorised parents/guardians (encrypted linking of devices), and analytics on device types. |
| Interaction logs (logins, setup, approvals/rejections, toggling protections, other Parent app interactions) | Applying requested actions, system performance monitoring, detailed usage reporting, and aggregated/anonymised reporting for communities. |
| Profile change voting | To automate profile changes based on community voting. |
| In‑app feedback | Qualitative and quantitative feedback to drive product development and satisfaction surveys. |
| Parent‑set reward details (reward name/description, “cost” in credits) | To enable purchasing of rewards by children with credits earned through encouraged usage patterns. |
| Subscription tier | For billing purposes and the enablement of tier‑dependent features. |
2. Child Data
| Data collected | Usage |
|---|---|
| Full name | Parental recognition among family structure and school reporting of registered children (if required for school smartphone policy enforcement). |
| Gender (if provided by the parent) | To anonymously report on digital habits across different genders. |
| Community details (e.g. school name and address) and school year group | To apply community‑agreed screen time rules appropriate for the year group and provide aggregated/anonymised reporting. |
| Installed app names and bundle IDs | For on‑device Orbiri Spaces organisation and for global app list for global space categorisation. |
| Device information (e.g. make, model, OS version, UUID of child device) | Secure management of child devices by authorised parents/guardians (encrypted linking of devices), and analytics on device types. |
| Interaction logs (logins, space usage, website usage, screen‑time request details, in‑app educational content consumption) | Applying set screen‑time rules (e.g. countdowns for different spaces, URL allowing/blocking), system performance monitoring, safety score definition and management including rewards, request processing, usage reporting to parents and child, education on digital device usage, aggregated/anonymised reporting for communities and Orbiri. |
3. Community Data
Note: “Communities” will usually be schools.
| Data collected | Usage |
|---|---|
| Community name and address | For members of the public to search for registered communities; also used as unique identifiers and to provide anonymised/aggregated analytics. |
| Names, email addresses and passwords of registered users (e.g. teachers) | For authentication to the community portal to see analytics and manage the school space setup. |
| Calendar information | To determine school days vs non‑school days in order to apply appropriate screen‑time settings. |
| Year group information (year numbers and number of children in each year) | For issuing unique invitation codes to distribute to parents for registering with the service; also for grouping in community analytics. |
| Interaction logs (logins, space updates) | System performance monitoring, usage reporting to community admins, and applying updates to the school space as requested; aggregated/anonymised reporting. |
Data Usage for AI (LLM) Training
To improve Orbiri’s proprietary AI engine for real‑time request safety scoring and auto‑categorisation of content (apps and websites) into spaces. Also to help with usage analytics to drive product development.
- Any of the data described in this document may be used to train our LLMs. However, all data is irreversibly anonymised before use — i.e. no personal identifiers are used for LLM training.
- All data used for LLM training remains within Orbiri’s secure UK/EEA environment (no external sharing) at all times.
Trust Centre
Orbiri has implemented state‑of‑the‑art security practices to keep customer data safe, whilst maintaining availability & ease of use. Internally we follow best practices, separating production accounts and environments whilst providing robust oversight of our internal staff among many other key measures which allow us to attain certifications such as ISO27001.
Certifications & Compliance
| Certification | Status | Date |
|---|---|---|
| ISO/IEC 27001 | Pending | Expected December 2025 |
| ISO/IEC 27017 | Pending | Expected December 2025 |
| ISO/IEC 27018 | Pending | Expected December 2025 |
| GDPR | Pending | Expected December 2025 |
| Cyber Essentials | Pending | Expected December 2025 |
| Cyber Essentials Plus | Pending | Expected December 2025 |
Contact
For any complaints or queries relating to Orbiri’s data usage and our policy, please contact dpo@orbiri.com.
Further information
Further information can be found in our Data Protection Policy and Data Retention Policy. Please contact dpo@orbiri.com for copies of these.
Orbiri Limited is registered with the Information Commissioner's Office, reference ZB780838.