Your messages. Not our business.
Most of what ORBLINK knows about you never leaves your phone. Here's the full picture: what stays, what leaves, and what you can change.
What stays on your phone
Held in sealed storage on the device, never in an account we can read. Deleting the app removes all of it.
- Your private key, made in the secure chip and impossible to export
- Your messages, photos, files and call history
- Your contacts in ORBLINK and their settings
- Your Passport: what you've proven about yourself
- Your recovery material, sealed with a phrase only you hold
What leaves it
Encrypted on your phone. Our relay keeps sealed bytes until they're delivered or expire.
Only a scrambled fingerprint of the address, never the address itself.
Needed to send you a code. Phone codes go out through our SMS provider, Twilio.
Our provider DIDIT must see them to check them. Optional, and you can have them deleted.
Like any internet service, our relay sees which IP address connected, when, and how much moved. Never what was said.
What we never do
No tracking code
No analytics, crash-reporting or attribution kit of any kind is in the app.
No ads, ever
No advertising identifier, no ad network, no data broker.
No address book, no location
The app never asks for either permission.
We don't sell your personal information, and we don't share it for advertising.