Scope and who we are
This policy explains how Orion Software LLC (“Orion,” “we,” “us,” or “our”) handles information through Orion-operated websites, mobile and desktop applications, cloud services, support channels, and development or beta programs (together, the “Services”). It covers Orion products that link to this policy, including Constella Mobile, Cliproom, Mend, Stanza, Vox, WhoWins.AI, and Snappshot.
Some portfolio work is operated by an Orion client or another company. When another company controls a service, its own privacy notice applies to that service. A product-specific notice shown in an app may supplement this policy; if the notices conflict, the more specific notice controls for that product.
Orion Software LLC is the business responsible for the personal information described here. Our contact details appear at the end of this policy.
Our privacy approach
- We do not sell personal information or share it for cross-context behavioral advertising.
- We do not add third-party advertising SDKs to Orion apps.
- Local-first products keep their core content on your device unless you choose a cloud, sharing, feedback, or support feature.
- Permissions such as Health, camera, microphone, photos, files, LiDAR, speech recognition, and notifications are requested only for the feature that needs them.
- Product differences matter. The product-specific section below explains what leaves your device and when.
Information we may process
The information involved depends on the Service and the choices you make. Orion may process the categories below; no single product uses every category.
- Account and contact information: name, email address, authentication provider, account identifier, profile image, organization, and communication preferences. Authentication providers process credentials under their own terms; Orion does not receive your Apple or Google password.
- Content you create or submit: project briefs, media, comments, predictions, reading documents, room scans, screenshots, support messages, feedback text, and other files or text you choose to use with a Service.
- Purchase and entitlement information: product, subscription, credit, transaction, and entitlement status supplied by Apple, Google, Square, or another payment provider. Orion does not receive full payment-card details from App Store purchases.
- Feature and permission data: information selected through device permissions, such as Health data, camera or microphone input, photo-library items, files, spatial scans, speech input, and notification tokens. Granting a system permission does not mean Orion receives all information available through that permission.
- Community information: display name, profile image, predictions, rankings, comments, and other content you choose to make visible in a social or collaborative product.
- Usage and diagnostics: feature interactions, app-instance or account identifiers, crash or error details, IP address, request time, requested resource, browser or device category, and similar service and security logs. Mend and Stanza do not include analytics or advertising SDKs; WhoWins.AI uses product analytics as described below.
- Business inquiries: name, email, organization, requested services, project details, schedule, budget range, and any other information you submit through Orion’s website or direct communications.
How individual Orion products handle data
Constella Mobile. Account, destination, eSIM profile, plan, activation, usage, support, and transaction information may be processed to provide travel connectivity. Firebase supports account and product data, Square or an app store processes payment, and connectivity or eSIM partners receive the information needed to provision and support the selected service. Full card numbers are handled by the payment provider, not stored by Orion.
Cliproom. A guest workspace remains local. If you create an account or collaborate, Firebase may process account and profile information, project metadata, original and proxy media, thumbnails, messages, comments, invite and role information, read status, notification tokens, and activity needed to sync and collaborate. Camera, microphone, photo-library, speech-recognition, screen-recording, and file access are used only for capture, import, captions, editing, and export features you initiate.
Mend. Recovery plans, surgery details, check-ins, pain and swelling entries, medications, exercise history, milestones, notes, and photos are stored locally on the device. With permission, Mend reads step counts and workout history from Apple Health to display movement trends; Mend does not write Health data or send Health data to Orion. Reminders are scheduled locally. Reports are generated locally and leave the device only when you use the system share sheet. Mend’s feedback form sends only the feedback text and optional reply-to email you enter.
Stanza. Camera and LiDAR data are processed on the device through Apple’s RoomPlan and ARKit technologies. Room captures, recognized objects, measurements, floor plans, and exports remain in the local library unless you choose to save, export, or share them. Stanza does not require an account and does not include analytics or advertising SDKs.
Vox. Imported text, PDFs, web content, reading state, and generated audio are stored locally and may sync to the private CloudKit database associated with your Apple account. System and downloaded on-device voices process text locally. When you explicitly choose a cloud voice and confirm the credit use, the relevant text segment and voice settings are sent through Orion’s service to OpenAI for speech generation; the returned audio may be cached locally. Importing a web page contacts that site to retrieve the page. Apple processes iCloud and purchase information under Apple’s terms.
WhoWins.AI. Firebase may process account and profile information, authentication data, profile images, predictions, comments, follows, rankings, preferences, subscription status, and push-notification tokens. Sports pages and APIs process requests needed to deliver matchups, model probabilities, market context, and community features. Firebase Analytics records product interactions and may associate them with an app instance or signed-in account to measure onboarding, feature use, subscription state, and reliability. WhoWins.AI does not use this information for third-party advertising.
Snappshot. Firebase may process account and profile information. The app reads a project selected on your Mac to create a compact project digest, capture plan, editable automation script, copy, and screenshots. Project files and generated assets are stored locally unless you choose a connected AI or cloud feature. When an AI generation or repair feature is used, the relevant project digest, prompt, script, or run log is sent to the configured AI service to produce the requested output. User-provided API credentials are stored in Keychain and are not embedded in the app.
Health and other sensitive information
Mend is designed to keep recovery and Apple Health information on the device. Orion does not use Health data for advertising, marketing, data brokerage, credit, employment, insurance, or any purpose unrelated to the health feature the user requested. Apple Health access can be reviewed or revoked in the Health app or iOS Settings.
Please do not include health records, passwords, API keys, financial account numbers, or other highly sensitive information in a feedback or general contact form. If you voluntarily include sensitive information in a support request, Orion will use it only to address that request and related legal or security needs.
Why we use information
- Provide, personalize, synchronize, and maintain the feature or Service you requested.
- Authenticate accounts, manage subscriptions and entitlements, process transactions, and restore purchases.
- Enable collaboration, sharing, community participation, notifications, support, and feedback.
- Generate requested outputs, including speech, reports, room exports, model probabilities, and app-store screenshots.
- Monitor reliability, debug problems, protect accounts and infrastructure, prevent fraud or abuse, and enforce usage limits.
- Understand product performance and improve Orion products, using aggregated or de-identified information where practical.
- Communicate about service changes, security, support, transactions, or an active business relationship.
- Comply with law, enforce agreements, establish or defend legal claims, and maintain required business records.
Legal bases for processing
Where European Economic Area, United Kingdom, or similar law requires a legal basis, Orion relies on performance of a contract to provide requested Services; legitimate interests in operating, securing, supporting, and improving the Services; consent for optional permissions, certain cloud features, and communications where required; and legal obligations. You may withdraw consent at any time, but doing so does not affect processing already completed and may disable the related feature.
Third-party services
Third-party services process information under their own privacy terms and Orion’s agreements with them. Depending on the product, these may include Apple (App Store, StoreKit, Sign in with Apple, HealthKit, iCloud/CloudKit, device notifications, and system frameworks), Google Firebase (authentication, database, storage, messaging, and analytics), OpenAI (selected text or development context submitted to an AI feature), Square (payments), Vercel or Heroku (hosting), Resend (feedback email delivery), and Formspree (website inquiries).
Links, imported web pages, and exports may connect you to third-party sites or apps that Orion does not control. Their privacy practices apply once you use those services.
Cookies, analytics, and tracking
The public Orion portfolio website does not add advertising pixels or behavioral-profiling trackers. It may use local browser storage for interface preferences. Protected administrative areas use authentication and security storage needed to maintain a session.
WhoWins.AI uses Firebase Analytics to understand feature use, onboarding, purchases, and app reliability. Other products may add privacy-preserving diagnostics only after this policy and the product’s store disclosures are updated. Orion does not combine product activity with third-party data to advertise across unrelated companies’ apps or websites.
Hosting, authentication, security, and content-delivery providers may receive ordinary request data such as IP address, user agent, route, and timestamp to deliver and protect their services.
Retention
Local content remains on your device until you delete it, delete the app, or use an operating-system storage control. Content in your private iCloud database follows your Apple account and CloudKit controls.
Account and cloud content is generally retained while the account or shared project remains active and for a limited period afterward for recovery, security, dispute resolution, and backup expiration. Product deletion controls remove or schedule deletion of information governed by that account, subject to legal obligations and information another user independently retains in a shared space.
Feedback and support correspondence is retained as reasonably needed to respond, improve the relevant product, document the resolution, prevent abuse, and meet legal obligations. Transaction and tax records may be retained for the period required by law. Security and service logs are retained for the shortest period reasonably necessary for operations, investigation, and abuse prevention.
Aggregated or de-identified information that can no longer reasonably identify a person may be retained for product measurement and research.
Security
Orion uses administrative, technical, and organizational safeguards appropriate to the nature of the information, including platform security controls, transport encryption, access controls, provider security rules, and restricted production credentials. Sensitive credentials should be stored in Keychain or server-side secret stores rather than application source.
No system is completely secure. You are responsible for protecting your devices, account credentials, exported files, invite links, and information you publish or share. Contact Orion promptly if you believe an account or submission has been compromised.
International processing
Orion is based in the United States, and Orion and its providers may process information in the United States and other countries. Where required, Orion uses recognized transfer mechanisms or provider contractual protections for international transfers. Privacy and data-protection laws may differ from those in your home jurisdiction.
Your controls and choices
- Review or revoke app permissions in iOS, iPadOS, macOS, Apple Health, notification, photo, camera, microphone, speech-recognition, or file settings.
- Use in-product controls to edit or delete account information, local content, cloud projects, community content, or an account where available.
- Disable push notifications in the product or system settings. Transactional or security messages may still be sent when necessary.
- Choose local or on-device features instead of optional cloud features where a product offers that choice.
- Avoid entering an optional email in a feedback form if you do not want a reply.
- Contact Orion to request access, correction, deletion, portability, restriction, or objection where applicable law provides that right.
Regional privacy rights
Depending on where you live, you may have rights to know or access personal information, correct inaccurate information, delete information, receive a portable copy, restrict or object to processing, withdraw consent, and appeal a denied request. You may also complain to your local data-protection authority.
California residents can review the separate California privacy notice linked in the site footer. Orion does not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing opt-out to exercise.
To submit a request, email info@orionsoftware.co with the subject “Privacy Request.” Describe the product and request. Orion may verify your identity, account ownership, and authorization before responding. Applicable law may permit or require Orion to retain certain information or deny part of a request.
Children
The Services are not directed to children under 13, and Orion does not knowingly collect personal information from a child under 13 without authorization required by law. Some Services may require a higher minimum age under store rules, local law, or product-specific terms. If you believe a child provided information improperly, contact Orion so it can be reviewed and deleted where appropriate.
Changes to this policy
Orion may update this policy as products, providers, or legal requirements change. The effective date will be revised when changes are published. If a change materially affects how an account-based Service handles personal information, Orion will provide additional notice where required.
Contact
Orion Software LLC · 44 W Broadway, Ste 230 · Eugene, OR 97401 · United States
Privacy requests and questions: info@orionsoftware.co
Support and product feedback: adrian@orionsoftware.co