Privacy Policy

Orin
Effective date: 1 September 2026

SOLIDBLANK LTD (“we”, “us”) operates the Orin mobile app. We are a company registered in England and Wales. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Contact: orin@thesolidblank.com

What Orin is

Orin provides natal-chart, relationship compatibility (synastry), timing, and AI-assisted interpretive features for entertainment and self-reflection. It is not medical, legal, financial, or mental-health advice.

Data we collect and how we collect it

You can use Orin without creating an email or password account. We create a pseudonymous session ID so your profile can be stored on your device and in our backend.

• Name — the first name or display name you enter for yourself and people you add.
• Birth and chart data — birth date, optional birth time, birth-place name, coordinates, and calculated chart placements. You enter the birth details directly. Place search uses Google Places through our server; we do not collect your live GPS location.
• User content — relationship labels, goals, people you add, questions you type in Ask, and interpretations generated for you.
• User ID — a pseudonymous account identifier created by Appwrite and used for saving your profile, API requests, abuse prevention, and subscription status.
• Purchase information — product and entitlement status received from Apple or Google through RevenueCat. We do not receive your full payment-card details.
• Technical request data — our network receives an IP address when you call our API. Before a rate-limit counter is stored in our application database, the IP address is converted into a salted one-way hash. On supported production iOS devices, quota-consuming AI requests use Apple App Attest assertions and a DeviceCheck token. Apple validates that the request came from the genuine Orin app on a genuine Apple device; each assertion is short-lived, single-use, and bound to the exact request. The DeviceCheck token is sent only to Apple for validation and is not stored. Orin stores only the attested public key, a one-way hash of its key identifier, Apple’s opaque attestation receipt, and quota/replay counters. During observe-only rollout or in unsupported development environments, Orin may instead send a SHA-256 subject derived on-device from IDFV; our server privately peppers and hashes it again. Raw IDFV values and DeviceCheck tokens are not stored or logged. We do not use this information for advertising or cross-app tracking.

We do not collect your email address in the app. We do not sell your data. We do not use your data for third-party advertising or tracking across other companies’ apps or websites.

You choose which optional details to enter. By entering and saving profile or people data, you ask Orin to process it to provide the corresponding feature. You can remove a saved person, leave optional fields blank, or delete your account. Third-party AI sharing requires a separate explicit permission described below.

How we use data

We use this information only to operate Orin: calculate charts, save your profile and people, personalise relevant modules, generate interpretations you request, verify paid access, prevent abuse, secure our services, and respond if you contact support.

AI features and consent

Before Orin sends personal data to a third-party AI provider, the app asks for your explicit permission. Depending on the feature, the request may include the text you type and relevant chart facts such as planetary signs, houses, aspects, compatibility scores, and transit information. Compatibility requests replace people’s names with “Person A” and “Person B” before transmission.

If you decline, calculated charts continue to work. You can withdraw permission at any time in Settings → AI data sharing. After withdrawal, Orin will not send another AI request unless you choose an AI feature and grant permission again. Withdrawal does not delete your profile; use Delete account for that.

Who processes data

We use the following service providers only for the stated purposes:

• Appwrite — anonymous accounts and stored profile/people data
• Apple / Google — App Store / Play billing; Apple also validates App Attest and DeviceCheck signals on iOS
• RevenueCat — product and subscription status
• Google Places — birth-place autocomplete, including the search text you type
• DeepSeek — primary AI interpretations using the submitted text and relevant chart facts
• Amazon Web Services (Bedrock / Anthropic) — fallback AI processing for the same purpose if DeepSeek is unavailable
• Expo / EAS Hosting — app updates and our API

These providers may process data in the United Kingdom, European Economic Area, United States, and China (for DeepSeek). We share only what is necessary for the requested feature. Our applicable agreements and provider terms require personal data to receive the same or an equivalent level of protection described in this policy and required by applicable law and Apple’s App Review Guidelines.

Retention and deletion

• Profile, saved people, user ID, Ask usage counts, and entitlement records: kept while your Orin account exists and deleted when you use Delete account.
• AI request data in Orin’s backend: Ask questions, chart payloads sent to AI, and Ask answers are not saved in our application database after the request finishes. Name-free, user-ID-free bond and planet interpretation templates may be cached for up to 12 months.
• AI provider processing: DeepSeek may keep isolated context-cache fragments for hours to days. AWS Bedrock may retain prompts and responses for abuse detection for up to 30 days, depending on the model and account retention mode. Provider terms govern any legally required security records. Orin does not permit this data to be used for advertising.
• IP rate-limit records: raw IP addresses are not stored in our application database. Salted one-way rate-limit hashes and counters are kept for no more than 30 days.
• Device anti-abuse records: raw IDFV values and DeviceCheck tokens are not stored. Server-only records may include a pepper-hashed fallback subject, an App Attest public key, a one-way hash of its key identifier, Apple’s opaque attestation receipt, and quota/replay counters. They are kept for no more than 30 days, including after account deletion, so deleting and recreating a pseudonymous account does not reset promotional AI quotas.
• Backups: deleted account data may remain in encrypted service backups for up to 30 days before being overwritten or deleted.
• Deletion-protection record: after account deletion, we retain an irreversible salted hash of the former pseudonymous user ID for no more than 30 days. It contains no profile or birth data and prevents delayed billing webhooks from recreating a deleted account during that period.
• Store records: Apple, Google, and RevenueCat retain transaction records under their own legal and operational requirements.

Deleting the app removes its on-device storage but does not by itself delete backend records. Use Delete account in Settings to delete the account records we control.

Data about other people

If you add another person, you must have their permission or another lawful right to enter their name and birth details. Their saved details are handled like your own profile data. Do not request an AI compatibility interpretation using another person’s data unless you have permission to do so. Names are removed before compatibility data is sent to the AI provider.

Your rights

You may request access, correction, deletion, restriction, or a copy of your data. You may withdraw AI consent in Settings, delete your account in Settings, or contact orin@thesolidblank.com.

If you are in the UK or EEA, you may also complain to the ICO (ico.org.uk) or your local supervisory authority. California residents may request access or deletion; we do not sell or share personal information as those terms are used in the CCPA/CPRA.

Children

Orin is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes

We may update this policy. The effective date at the top will change. Material changes will be reflected in the app or on this page where appropriate.

Apple App Store

In-app purchases and subscriptions are billed by Apple. Manage or cancel in iOS Settings → Apple ID → Subscriptions.