PRIVACY / TRANSPARENCY
Privacy Policy
Orb XR ("the app") is an Android XR workspace that connects to a Mac you own and control. This policy explains what data the app accesses, where it goes, and how it is used.
Summary
Terminal, keyboard-forwarding, and window-mirroring traffic travels directly between your headset and your Mac through an encrypted SSH connection. The developer does not relay or inspect terminal content. Optional voice AI and subscription verification use the services described below. Orb XR has no ads and does not sell personal data.
What the app accesses
| DATA / PERMISSION | PURPOSE | WHERE IT GOES |
|---|---|---|
| Camera | Scan the pairing QR shown by the Orb XR Mac companion. | Processed on the headset. Camera images are not recorded or uploaded. |
| Microphone and voice input | Optional dictation, spatial voice commands, and voice-pet interactions. | Audio may be sent through authenticated Firebase Cloud Functions to Deepgram for transcription. Command text and short text-to-speech requests may be processed by Google Gemini services. |
| SSH host, username, host fingerprint, and generated key material | Securely pair and reconnect to your Mac. | Stored on the headset using Android encrypted storage. Connection details are sent only to the paired Mac. |
| Terminal, keyboard, and window-mirror content | Display and control shells, coding agents, and an optional Mac window in XR. | Travels directly between the headset and your Mac over the local network using SSH-protected channels. It is not sent to the developer. |
| Firebase anonymous account and app attestation | Protect paid voice services from abuse and associate subscription access with an installation. | Processed by Google Firebase Authentication, App Check, Cloud Functions, and Firestore. |
| Google Play purchase information | Verify, acknowledge, restore, renew, or revoke Orb XR Pro access. | Processed by Google Play and the app's Firebase backend. The backend stores entitlement status, expiry, product ID, and purchase-token association. |
Voice AI services
Voice features are optional and inactive until you choose to use them. They may use:
- Deepgram for speech-to-text. Requests opt out of Deepgram's model-improvement program.
- Google Gemini and Firebase AI services for voice commands and text-to-speech responses.
These providers process requests under their own policies: Deepgram Privacy Policy and Google Privacy Policy.
Data we do not collect
- No advertising identifiers, advertising SDKs, or sale of personal data.
- No developer access to your terminal commands, files, agent output, mirrored windows, or SSH private keys.
- No camera recordings or stored microphone recordings.
- No account profile requiring your name, email address, or phone number.
Retention and deletion
Pairing details and generated keys remain on the headset until you use "Forget this Mac" or uninstall the app. Terminal content is retained only in active terminal scrollback and in any host-side tmux sessions you control on your Mac.
Firebase may retain an anonymous installation identifier and entitlement record used for access control and purchase restoration. Google Play retains purchase records under its own policies and legal obligations. To request deletion of developer-controlled backend records, contact the address below.
Security
Pairing verifies the Mac's SSH host fingerprint when available. Secrets for Deepgram, Gemini, and Google Play verification remain on the server and are not embedded in the app.
Children's privacy
Orb XR is a developer productivity tool and is not directed to children.
Changes
Updates to this policy will be published at this URL with a revised date.
Contact
Privacy questions or deletion requests: nik.anand.1998@gmail.com