Privacy Policy

Last updated: February 16, 2026

1. Data Controller

My Orbis Travel ("we", "our", "us") is the data controller responsible for your personal data in accordance with the General Data Protection Regulation (GDPR) and Norwegian data protection law (Personopplysningsloven).

My Orbis Travel
Norway
Email: support@myorbistravel.com

2. Scope

This Privacy Policy applies to the My Orbis Travel mobile application and website (the "Service").

3. Personal Data We Collect

3.1 Account Information

Email address
Username
Display name (optional)
Profile picture (optional)
Home city and country (optional)

3.2 User-Generated Content

Trip destinations, dates, and descriptions
Photos uploaded
Hotel/resort names
Comments, likes, and tags
Friend connections

3.3 Technical Information

IP address
Device type and operating system
App version
Crash reports and log data

3.4 Payment Information

Payments are processed by Google Play Store, Apple App Store, and RevenueCat. We do not store full payment card details.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds (GDPR Article 6):

Purpose	Legal Basis
Account creation and management	Performance of contract (Art. 6(1)(b))
Storing and displaying your trips	Performance of contract (Art. 6(1)(b))
Social features (friends, comments, tags)	Performance of contract (Art. 6(1)(b))
Subscription management	Performance of contract (Art. 6(1)(b))
Sending in-app notifications	Legitimate interest (Art. 6(1)(f))
Service improvement and crash reporting	Legitimate interest (Art. 6(1)(f))
Security and fraud prevention	Legitimate interest (Art. 6(1)(f))
Legal compliance	Legal obligation (Art. 6(1)(c))

5. How We Use Your Data

To create and manage your account
To store and display your trips on interactive maps
To enable social features (friends, comments, likes, trip tagging)
To send in-app notifications about friend requests, comments, likes, and trip tags
To process and manage subscriptions
To improve functionality and fix issues
To ensure the security of the Service
To comply with legal requirements

6. Data Storage and Third-Party Processors

We use the following third-party services to operate the app:

Service	Purpose	Location
Google Firebase Authentication	Account login and security	EU/US (Google Cloud)
Google Cloud Firestore	Storing trip data, profiles, social data	EU/US (Google Cloud)
Google Firebase Storage	Photo and image storage	EU/US (Google Cloud)
Cloudflare	Security, CDN, and DDoS protection	Global
RevenueCat	Subscription and payment management	US
Google Play Store	App distribution and payments (Android)	US
Apple App Store	App distribution and payments (iOS)	US
Nominatim (OpenStreetMap)	City/location search (no personal data sent)	EU

All third-party processors are bound by data processing agreements and comply with GDPR requirements.

7. International Data Transfers

Some of your data may be transferred to and processed in countries outside the EU/EEA (primarily the United States) through our third-party service providers. Where this occurs, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU-US Data Privacy Framework to ensure adequate protection.

8. Data Sharing

We do not sell your personal data to third parties. Your data is shared only in the following ways:

Your trips are visible to your accepted friends within the app
Tagged trips are shared only with your consent
Data is shared with the third-party processors listed in Section 6 solely to provide the Service
We may disclose data if required by law or to protect our legal rights

9. Data Retention

Account and trip data: Retained as long as your account is active
Deleted account data: Removed within 30 days of account deletion
Backup copies: May persist in encrypted backups for up to 90 days after deletion
Legal obligations: Some data may be retained longer where required by law

10. Your GDPR Rights

As a user in the EU/EEA, you have the following rights regarding your personal data:

Right of access (Art. 15) — Request a copy of the personal data we hold about you
Right to rectification (Art. 16) — Request correction of inaccurate data (you can also edit your data directly in the app)
Right to erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten")
Right to restrict processing (Art. 18) — Request that we limit how we use your data
Right to object (Art. 21) — Object to processing based on legitimate interests
Right to data portability (Art. 20) — Request your data in a structured, machine-readable format
Right to withdraw consent (Art. 7) — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at support@myorbistravel.com. We will respond within 30 days as required by GDPR.

11. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

Encrypted data transmission (HTTPS/TLS)
Firebase Authentication with secure password hashing
Cloudflare security and DDoS protection
Access controls limiting who can access your data
Regular security updates

While we strive to protect your data, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

The Service is not intended for individuals under 16 years of age within the EU/EEA. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

13. Cookies and Tracking

The web version of the Service may use essential cookies required for basic functionality (authentication session). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

14. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
P.O. Box 458 Sentrum, 0105 Oslo, Norway
Website: www.datatilsynet.no
Email: postkasse@datatilsynet.no

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or via email. The "Last updated" date at the top reflects the most recent revision.

16. Contact

For privacy-related inquiries or to exercise your data rights:
support@myorbistravel.com