ORVYN - PRIVACY, BY DESIGN.
Privacy Policy
Effective August 22, 2026 - Version 1.0
Our promise
Orvyn is built to minimize what Vybe Technologies can know. Private messages, Sparks, private Stories, private-profile fields, Vault content, and Ghost Map coordinates are encrypted on the user's device. Vybe does not receive the private keys required to decrypt them.
Data processed
The service processes a username, Argon2id password verifier, hashed one-time backup codes, device public keys, intentionally public profile fields, ORVYN PULSE total, push token, conversation membership, and short-lived delivery routing data. Orvyn does not request an email address, phone number, or contact-book upload.
Password handling
During registration and login, the API receives the password inside a protected TLS request and holds it briefly in process memory to create or verify an Argon2id hash. It stores only the verifier and is configured not to log passwords. Backup codes are shown once; only salted hashes and a lookup digest are stored.
Location
Location is collected only after an explicit timed Ghost Map share. The app reduces precision at the selected level and encrypts each coordinate before upload. A background upload capability can append ciphertext only to that one expiring share. Standard iOS background updates stop if the user force-quits Orvyn.
Retention and deletion
Timed content is removed after expiry and delivery envelopes never exceed the published maximum retention. Delete Account removes the account, profiles, device records, backup-code hashes, Stories, location shares, and associated encrypted envelopes. Some operational backups may persist briefly until their documented rotation completes.
Service providers
Fly.io processes API traffic, Neon stores encrypted records and minimal metadata, Cloudflare protects the API edge, Expo transports generic push signals, and Apple delivers notifications and TestFlight builds. Push payloads contain no sender name, message content, location, or encryption key.
No tracking
Orvyn is designed without advertising IDs, cross-app tracking, contact discovery uploads, or third-party behavioral analytics. Any future diagnostic telemetry must be opt-in, documented here, and stripped of private content.
Your choices
Users control public discoverability, Story audience, disappearing timers, notification types, location precision and duration, read receipts, relay-only calls, link previews, blocking, and account deletion.