Orbitomo Privacy Policy

This Privacy Policy explains the information Orbitomo handles, why it is used, when it is shared with service providers, how long it is kept, what happens when an account is deleted, and the choices available to users.

Orbitomo is a card-collection game where users collect Tomo Cards, Spot Cards, Venue Cards, Tomo Eggs, and related items while visiting real places. The Feed available after a card exchange is limited to eligible exchange relationships. Orbitomo is not designed for exchanging contact details, finding people to meet, private messaging, public user search, or sharing users' current locations with one another.

Contact: support@orbitomo.com

1. Information We Handle

Depending on the features a user chooses to use, Orbitomo handles the following information:

Account information, including an in-app account identifier, My ID, account recovery status, and notification registration status
Profile and card information, including nickname, character name, Tomo Egg settings, selected profile text, birth and residence countries, collected cards, card appearance, badges, gifts, and point balances and history
Age-verification information, including date of birth, age group, verified email address, and guardian confirmation status where required
Venue Partner information, including name, email address, phone number, business address, venue information, card applications, review results, publication capacity, and subscription status
Location information needed for outing mode, card collection, encounter decisions, Spot Card or Venue Card collection, and a coarse historical exchange-area label
Card-exchange information from Bluetooth or My ID proximity and mutual-confirmation flows
Content submitted by users, including Feed posts, replies, images, short videos, hearts, reports, blocks, Tomo Card free text, private card photos or notes, public-card images, and support messages
Search and activity information, including in-app searches, filters, card interactions, screen interactions, feature usage, and notification settings
Collection progress and sharing, including confirmed card progress by day, week, and month, safe share images, and share-link expiration or revocation state
Purchase and point information, including product type, purchase, restore or refund status, Orbit Point purchase and spending history, and Venue Partner subscription status
Tomo Egg AI creation information, including text entered by the user, creation progress, generated images, safety-review results, and related Orbit Point processing
Diagnostics and security information, including device and app version, crash information, feature usage, and records needed to prevent abuse and operate the service

Payment-card or bank-account details processed directly by Apple and not received by Orbitomo are not collected by Orbitomo.

2. How We Use Information

Orbitomo uses information to:

Provide card collection, exchanges, outing mode, Feed, notifications, points, Shop exchanges, gifts, and AI creation
Show daily card progress and weekly or monthly collections, and provide safe sharing only for cards or albums a user explicitly selects
Authenticate users and protect information intended for the account owner
Apply age-based access rules
Review posts, media, generated content, and public cards, and respond to reports and blocks
Process purchases, restores, refunds, points, and subscriptions
Respond to support, deletion, correction, suspension, and reinstatement requests
Prevent fraud, abuse, and unsafe use
Investigate crashes and improve reliability and product quality
Meet applicable legal obligations

3. Advertising And Tracking

Orbitomo does not use personal information for third-party advertising, third-party advertising measurement, or data sales. Orbitomo does not combine app information with information from other companies to track users for advertising.

Usage and crash information may be used to improve Orbitomo and keep the service reliable.

4. Location And Bluetooth

Location and Bluetooth are used for card collection, proximity confirmation, and a coarse historical exchange-area label on a card.

Orbitomo does not show a general user's exact current location, movement history, or exact encounter place or time to other users.
A Tomo Card may show a past “Exchange area” at the state, province, prefecture, or equivalent first-level administrative-region level. When that cannot be determined safely, it may show only the country. It does not show a municipality, address, building, road, station, store, exact place or time, current location, or map pin.
Exchange areas are resolved with a worldwide administrative-area catalog bundled with Orbitomo's backend. Exact coordinates are not sent to an external address or reverse-geocoding provider. The area is not used as exchange proof, for current-location sharing, nearby-user search, movement history, or advertising.
Location information is handled only for the short period needed to make a collection or proximity decision and is not kept as a long-term movement history.
Map locations for Spot Cards and Venue Cards describe public places such as shops, facilities, and event venues. They are not a user's current location or visit history.
A user's current-location marker is displayed on that user's own device and is not shared with other users or Venue Partners.
Outing mode and background location use can be stopped in the app and device settings.
Bluetooth is used to confirm proximity for card exchanges. Device-identifying information is not shown to other users.

5. Information Visible To Other Users

The following information may be shown when needed for the card experience:

Nickname, character name, Tomo Egg, selected profile text, and card appearance
Safe card information included in an exchanged or collected card
A Tomo Card's past exchange area at the state, province, prefecture, equivalent region, or country level
Feed posts, replies, images, short videos, and heart counts within eligible exchange relationships
Spot Card and Venue Card names, descriptions, categories, public-place locations, images, and reviewed or ended status
Display badges such as Founder Badge and Supporter Badge

Orbitomo does not publish legal names, personal face photos, home addresses, phone numbers, email addresses, school or workplace information, dates of birth, internal administrative identifiers, exact user locations or times, payment details, or text entered for AI creation.

When a user explicitly chooses to share, Orbitomo can create an expiring public page for a card or weekly/monthly album. The page expires 30 days after creation and can be revoked earlier by the user. A shared Tomo Card image includes the nickname, character name, Tomo Egg appearance, selected fixed phrase or safety-reviewed free text, profile text, birth and residence countries chosen for display on the card, and display badges saved on the card when it was collected; anyone who knows the share URL can view that image. Depending on the shared item, the page may also show card type, rarity, acquisition date, and album period. It does not show an exact place or time, exchange area, private photo or note, email address, date of birth, or internal information identifying the owner or another user.

6. Feed, Posts, Media, Reports, And Blocks

Feed is a card-status feature whose audience is limited by Tomo Card exchange relationships. It is not a public timeline, private messaging service, friend-request system, follower network, or nearby-user search.

Feed is available only to users aged 13 or older who have completed the required email verification.
Feed and its registration path are not provided to users under 13.
Users aged 13 through 17 receive additional age-appropriate review, posting limits, and safety protections.
Tomo Card free text is limited to users aged 18 or older who have completed email verification.
Posts, replies, images, videos, and free text may be reviewed before or after publication.
Users can report inappropriate content and block another user.

Private photos and notes added to a collected card are not published to other users. They may be reviewed when necessary for safety, rights-protection, legal, or support purposes.

7. Tomo Egg AI Creation

Tomo Egg AI creation uses text entered by a user to create colors, patterns, or parts for a Tomo Egg. It is not a chat service, public posting feature, face-photo creator, or user-to-user marketplace.

Text entered for creation and in-progress images are not published.
Generated content cannot be equipped or shared until safety checks are complete.
Text, in-progress images, and generated images may be kept for 180 days after creation for safety checks, support, abuse prevention, and quality improvement.
If creation fails or does not pass a safety check, the Orbit Points intended for that creation are returned.

8. Purchases, Points, And Subscriptions

Purchases are processed through Apple's in-app purchase system. Orbitomo may offer Founder Badge, Supporter Badge, Orbit Points, Shop exchanges, and Venue Partner subscriptions.

Product type, purchase status, restores, refunds, point balances and history, and subscription status are used to provide paid features, prevent abuse, and respond to support requests. This information is not shown to other users.

9. Service Providers And Sharing

Orbitomo uses the following services when needed to operate the app:

Apple services for in-app purchases, maps, notifications, and account recovery
Google and Firebase services for authentication, data storage, notification delivery, usage analysis, crash reporting, and service operations
AI generation services for Tomo Egg AI creation and safety checks
Email services for support messages that a user chooses to create and send

Orbitomo does not sell personal information for advertising. Information may be disclosed when necessary to comply with a lawful request from a court or government authority, protect rights, prevent fraud, or address a serious safety concern.

10. Retention

Retention depends on the type of information, why it is needed, and applicable safety or legal requirements.

Exact location information: the short period needed for collection, proximity decisions, and coarse exchange-area resolution
Coarse exchange-area labels: while needed to provide the exchanged-card history
Account, profile, card, point, and subscription information: while needed to provide the account and service
Daily, weekly, and monthly collection progress: while needed to provide the account and collection history; progress does not store an exact location or time or another user's identifier
Share pages: expire 30 days after creation and can be revoked earlier; dedicated artifacts are deleted within 30 days after expiration, revocation, or safety invalidation
The user's Feed posts and replies: removed from normal display as soon as an account deletion request is accepted and generally deleted after 90 days, unless safety, rights-protection, or legal needs require longer retention
Purchase and refund accounting records: the minimum records needed for an individual operator in Japan, generally for seven years for the applicable calendar year; unresolved purchase notifications are retained for 180 days after resolution
Support messages: generally within 180 days, unless an open request, safety review, purchase issue, rights-protection need, or legal obligation requires longer retention
Private card notes: deleted as part of account deletion processing
Private card photos: hidden and made inaccessible to the owner as soon as the deletion request is accepted, then deleted within 180 days, except when safety, rights-protection, or legal needs require longer retention
Feed, report, block, suspension, and safety-review records: for the period needed to prevent abuse, protect users, prevent repeated violations, and meet legal obligations
Tomo Egg AI creation information: 180 days after creation

To prevent abusive re-registration for age-restricted features, Orbitomo may keep a one-way identifier derived from a previously verified email address after account deletion. The original email address cannot be recovered from this identifier, and the identifier may be kept without a fixed expiration date. That email address cannot be registered again for Orbitomo's age-restricted features.

11. Account Deletion

When an account deletion request is accepted, Orbitomo immediately disables use of the account and displays “Deletion request received.” This message confirms receipt of the request; it does not claim that every deletion step finished at the same moment. Resumable processing continues to delete or anonymize the user's profile, card collection, daily/weekly/monthly progress, owned share pages, notification registration, remaining location information, and encounter records as applicable.

The following information may remain after deletion:

An anonymized card already received by another user
Records needed for reports, blocks, suspensions, abuse prevention, safety reviews, and legal compliance
A one-way identifier used to prevent abusive re-registration of a verified email address
Tomo Egg AI creation information whose 180-day retention period has not ended
Purchase, refund, support, Venue Partner, and accountability records that still need to be retained

12. Minors

Orbitomo does not provide Feed, Tomo Egg AI creation, Tomo Card free text, or other age-restricted features to users under 13.

Users aged 13 through 17 receive additional protections for posting, replies, AI creation, reports, blocks, and account restrictions. A minor should review this Privacy Policy and the Terms of Use with a parent or legal guardian when appropriate.

13. User Choices And Requests

Users can:

Change location, Bluetooth, and notification permissions in device settings
Stop outing mode and background location use
Stop using Feed or free-text features
Request account deletion

Depending on local law, a user or guardian may have rights to request access, correction, deletion, or restriction of personal information. Contact support@orbitomo.com to make a request.

14. Security

Orbitomo uses access restrictions, protected communications, information-management controls, and service monitoring to protect information. No communication method or information system can be guaranteed to be completely secure.

15. International Processing

Information may be processed or stored in countries or regions outside the user's country where Apple, Google, Firebase, AI generation services, or other providers operate. Orbitomo handles this information in accordance with applicable law and appropriate safeguards.

16. Changes And Contact

Orbitomo may update this Privacy Policy when features or legal requirements change. Material changes may be announced in the app, on public pages, or by another reasonable method.

Questions about this Privacy Policy can be sent to support@orbitomo.com.