This Privacy Policy explains how Orbinux LLC ("Orbinux," "we," "us," or "our") collects, uses, and shares personal information when you use the Ideario application (iOS and Android) and the website at orbinux.com (collectively, the "Service").

Data Controller: Orbinux LLC, 7345 W Sand Lake Rd, Suite 210, Office 6764, Orlando, FL 32819, USA. Contact for privacy matters: contact@orbinux.com.

This Policy applies to personal information we process about Users of the Service. It is designed to comply with the EU/UK General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA) and other U.S. state privacy laws, Brazil's Lei Geral de Proteção de Dados (LGPD), and the data-protection rights recognized under the laws of Venezuela.

Category	Examples	Source
Account data	Name, email address, profile image	You provide it
Usage and analytics data	App interactions, features used, session data, usage metrics	Collected automatically via Firebase and Google Analytics
Device and technical data	Device type, operating system, app version, identifiers, IP address	Collected automatically
Push token	Device push-notification token	Generated when you enable notifications
Communications	Messages you send to contact@orbinux.com	You provide it

We do not knowingly collect sensitive personal information, and we do not collect payment card data (the Service is currently free; any future payments will be processed by the App Stores).

We use personal information to: create and manage your account and provide the Service; operate, maintain, secure, and improve the Service; analyze usage through Firebase and Google Analytics; send push notifications you have enabled; send marketing emails with your consent; prevent fraud and abuse; and comply with legal obligations.

For Users in the European Union, Spain, and other jurisdictions that require a legal basis (including Brazil under the LGPD), we rely on the following bases:

Purpose	Legal basis
Create and manage your account; provide the Service	Performance of a contract
Operate, maintain, secure, and improve the Service; analytics	Legitimate interests, or your consent where required for non-essential analytics cookies
Send push notifications you have enabled	Consent
Send marketing emails	Consent
Prevent fraud and abuse; ensure security	Legitimate interests
Comply with legal obligations	Legal obligation

Where consent is the basis for processing (for example, marketing emails, push notifications, and non-essential cookies), you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

With your consent, or as otherwise permitted by law (including the U.S. CAN-SPAM Act), we may send you marketing emails. You can unsubscribe at any time using the link in each email or by contacting contact@orbinux.com. Transactional or service messages (such as account or security notices) are not marketing and may still be sent.

If you enable push notifications, we process your device push token to deliver them. You can disable push notifications at any time in your device settings.

Our website (orbinux.com) and our analytics tools use cookies and similar technologies, including those set by Google Analytics, to understand usage and improve the Service. On our website we present a cookie consent banner that lets you accept or reject non-essential cookies before they are placed, and you can change your choice at any time. You can also manage cookies through your browser settings. See our Cookie Policy for details.

We do not sell your personal information for monetary consideration. We do, however, use analytics and similar identifiers (for example, through Google Analytics) that, under California's CPRA, may be treated as a "share" of personal information for cross-context behavioral advertising or analytics purposes. You can opt out as described in Section 12. We share information with:

Recipient	Purpose
Google LLC (Firebase, Google Analytics)	Hosting, backend infrastructure, authentication, analytics, and push delivery
Service providers / processors	Acting on our instructions to operate the Service
Legal and safety	To comply with law, enforce our Terms, or protect rights and safety
Business transfers	In connection with a merger, acquisition, reorganization, or sale of assets. We will notify you (for example, by in-app notice or email) of any change in ownership or control that materially affects how your personal information is handled.

Our service providers are bound by contractual obligations to protect your information and to process it only on our behalf.

Your information is stored and processed primarily in the United States using Firebase (Google) infrastructure. If you are in the European Union, Spain, the United Kingdom, Brazil, or Venezuela, your data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. Where we transfer personal data from the EU/UK or Spain, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and equivalent mechanisms offered by our service providers, and on the safeguards available under the LGPD for transfers from Brazil. You may request a copy of the relevant safeguards by contacting contact@orbinux.com.

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter only as required for legitimate business or legal purposes. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required by law.

We implement reasonable technical and organizational measures to protect your information, including the security features provided by the Firebase platform. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you are in the European Union, Spain, or the United Kingdom, you have the right to: access your personal data; rectify inaccurate or incomplete data; erase your data ("right to be forgotten"); restrict or object to processing, including profiling; data portability; and withdraw consent at any time. You may also object to processing based on our legitimate interests. To exercise these rights, contact contact@orbinux.com.

You have the right to lodge a complaint with your local supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD, www.aepd.es).

Because Orbinux is established outside the European Union, where required by Article 27 of the GDPR we will designate a representative in the EU for data-protection matters; the representative's contact details will be made available here and on request at contact@orbinux.com.

California residents have the right to: know and access the personal information we collect; delete it; correct it; and opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information for monetary consideration; however, our use of analytics or advertising identifiers may constitute "sharing" under the CPRA. To exercise the "Do Not Sell or Share My Personal Information" right, use the opt-out control made available in the app and on orbinux.com, or contact us at contact@orbinux.com; we also honor recognized opt-out preference signals (such as Global Privacy Control) where technically feasible. We will not discriminate against you for exercising your rights.

If you reside in a U.S. state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others in effect in 2026), you may have rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising and certain profiling. Contact contact@orbinux.com to exercise these rights; where the law provides, you may also appeal a decision regarding your request.

If you are in Brazil, you have the rights granted by the LGPD, including: confirmation that we process your data; access to your data; correction of incomplete or inaccurate data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed with your consent; information about with whom we share data; and the right to withdraw consent. You may exercise these rights, and reach the person in charge of data processing (Encarregado/DPO), at contact@orbinux.com. You may also contact the National Data Protection Authority (ANPD).

If you are in Venezuela, you have the right of habeas data recognized under Article 28 of the Constitution, including the right to access the personal information we hold about you and to request its correction, update, or deletion. You may exercise these rights at contact@orbinux.com.

To exercise any of the rights described above, contact us at contact@orbinux.com. We will verify your request and respond within the timeframes required by applicable law: under the GDPR, within one month (extendable by two further months for complex requests, with notice); under the CCPA/CPRA, within 45 days (extendable by an additional 45 days with notice); under the LGPD, without undue delay and, for confirmation and access requests, in simplified form immediately or in full within 15 days; and within a reasonable period for other jurisdictions. We do not charge a fee for reasonable requests and will not discriminate against you for exercising your rights. If we deny a request, we will explain why, and you may appeal or complain to your supervisory authority where the law provides.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected information from a child under the applicable minimum age without verifiable parental consent (as required by the U.S. Children's Online Privacy Protection Act, COPPA), we will delete it. In the European Union the minimum age to consent to data processing is set by each member state (between 13 and 16; 14 in Spain); below that age, processing requires the consent of a parent or guardian. Under Brazil's LGPD, the personal data of children and adolescents is processed only in their best interest and with specific, highlighted consent from a parent or legal guardian where required; in Venezuela, minors are afforded special protection under the LOPNNA. For minors above the applicable threshold but below the age of majority, use of the Service requires the consent and supervision of a parent or legal guardian. If you believe a child has provided us information, contact contact@orbinux.com.

Ideario uses AI tools to help create its summaries. This processing concerns the content of the Service and does not involve automated decision-making that produces legal or similarly significant effects about you. We do not use your personal information to train third-party AI models. In accordance with Article 50 of the EU AI Act, AI-assisted content is identified as such within the Service.

You can delete your account at any time using the in-app "delete account" function. This initiates deletion of your personal information as described in Section 10. You may also request deletion by emailing contact@orbinux.com.

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice (for example, in-app or by email).

Orbinux LLC — Privacy 7345 W Sand Lake Rd, Suite 210, Office 6764, Orlando, FL 32819, USA Email: contact@orbinux.com