Orbloom Privacy Policy
Effective date: July 22, 2026
Last updated: July 26, 2026
Application: Orbloom
Bundle ID: `com.hulingyan.innergate`
Service Provider: chenxuanyu
Contact: 457162499@qq.com
1. Scope
This Privacy Policy explains how Orbloom (the "Application") handles information when you use the Application on a supported mobile device. Orbloom is a personal productivity and reflective adventure application. Most Application data remains on your device. Network processing occurs only for features that require it, including optional AI features, subscription management, and optional iCloud synchronization.
Orbloom does not require an account with the Service Provider. Please do not submit personal information about another person, or sensitive information that is not necessary for the feature you are using, through an AI input.
2. Information handled by the Application
2.1 Data stored locally
Depending on the features you use, Orbloom may store the following information locally on your device:
- optional birth date or birth year;
- goals, notes, inspiration seeds, maps, memories, and canvas content;
- mood, timeline, sleep, focus, rest, and work-session records;
- spirit beast, adventure, skill, scene, and progression data;
- settings, notification preferences, interface state, and locally cached AI conversation history.
This local data is used to provide the Application's features. The Service Provider does not receive this data merely because it is stored on your device.
2.2 Optional iCloud synchronization
If you enable iCloud synchronization, selected Application data is stored in your private Apple iCloud container so that it can be restored or synchronized across your Apple devices. This may include timeline entries, goals, memories, settings, sleep records, work-session data, spirit beast data, adventure data, and canvas content.
iCloud data is processed by Apple under your Apple ID and Apple's terms and privacy policy. The Service Provider does not operate the iCloud service and does not access the contents of your private iCloud container through the Service Provider's servers.
2.3 AI feature data
When you choose to use an AI-powered feature, the Application sends the information required to generate the requested result. Depending on the feature, this may include:
- text you enter, such as a wish, goal, question, note, or action;
- relevant context assembled by the Application, such as inspiration-seed or goal-map content, adventure scenes, selected actions, spirit beasts, skills, recent conversation context, and previously generated text;
- language and generation settings;
- a randomly generated installation identifier;
- your anonymous RevenueCat App User ID, when available; and
- technical request information, including your IP address, which Cloudflare processes for routing, security, and rate limiting.
Do not include passwords, payment-card details, government identifiers, health records, or other highly sensitive information in AI inputs.
2.4 AI quota and service metadata
To enforce free and Pro AI usage limits, the Application and its Cloudflare service process:
- the random installation identifier or anonymous RevenueCat App User ID;
- subscription-plan status;
- token usage, quota limit, remaining quota, and reset period;
- short-lived request reservation identifiers and timestamps; and
- rate-limit signals associated with the installation identifier and IP address.
The Service Provider's Cloudflare quota database is not designed to store the text of AI prompts or AI responses. Prompt and response content passes through the Cloudflare Worker to and from the AI provider. Cloudflare and the AI provider may process service and security logs under their own terms and policies.
2.5 Subscription and purchase information
If you view, start, purchase, restore, or manage Orbloom Pro, Apple and RevenueCat may process:
- an anonymous App User ID;
- product and offering identifiers;
- purchase history and transaction or receipt information;
- entitlement, trial, renewal, expiration, cancellation, and refund status; and
- limited device and technical information required to operate the purchase service.
Apple processes payments. The Service Provider does not receive your full payment-card information.
2.6 Information not intentionally collected
Orbloom does not intentionally collect your name, postal address, phone number, precise location, contacts, photos, microphone recordings, or advertising identifier. The Application does not contain third-party advertising and does not use personal information for cross-app tracking or targeted advertising.
3. How information is used
Information is processed only as reasonably necessary to:
- provide, maintain, personalize, and restore Application features;
- generate AI responses requested by you;
- maintain conversation continuity on your device;
- enforce AI quotas, rate limits, and abuse-prevention controls;
- verify subscriptions, trials, purchases, and Pro entitlements;
- synchronize selected data through iCloud when you enable that feature;
- deliver local notifications you configure;
- diagnose service failures, protect security, and comply with law; and
- respond to privacy, support, or legal requests.
The Service Provider does not sell personal information and does not share personal information for targeted advertising.
4. Legal bases for users in the EEA, Switzerland, and the UK
Where applicable, the Service Provider relies on the following legal bases:
- Performance of a contract: to provide the features, AI results, subscription benefits, and support you request.
- Legitimate interests: to secure the service, prevent abuse, enforce fair-use quotas, troubleshoot failures, and maintain the Application, provided those interests are not overridden by your rights.
- Consent or your direction: when you enable optional iCloud synchronization, notifications, or submit content to an optional AI feature. You may stop using or disable an optional feature at any time.
- Legal obligation: when processing is necessary to comply with applicable law, tax, accounting, consumer-protection, or lawful government requirements.
5. Service providers and disclosures
The Application uses the following service providers:
5.1 Cloudflare
Cloudflare Workers route AI requests, protect the provider API key, apply request limits, and maintain pseudonymous AI quota records. Cloudflare receives network information such as IP addresses as part of providing these services.
5.2 DeepSeek
DeepSeek provides the language model used for AI generation. AI inputs, relevant feature context, generation settings, and a pseudonymous installation identifier may be sent to DeepSeek. DeepSeek is based in China and may process information in China or other locations in which it or its service providers operate.
5.3 RevenueCat
RevenueCat manages subscription offerings, purchase validation, trials, entitlement status, and subscription history using an anonymous App User ID and purchase information supplied by the app store.
5.4 Apple
Apple processes App Store purchases, device-level platform services, local notifications, and optional iCloud synchronization under Apple's terms and privacy policy.
Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate fraud or security incidents, protect users or the public, or establish and defend legal claims. If the Application or its service is transferred to another operator, information may be transferred subject to applicable law and appropriate notice.
6. International transfers
The Service Provider and the providers listed above may process information in countries outside your country of residence, including the United States, countries in Europe, and China. These countries may have different data-protection laws. Where required, the relevant provider or Service Provider will rely on an approved transfer mechanism or another lawful safeguard. Because DeepSeek supplies the AI model, users who do not want AI input processed by DeepSeek should not use AI-powered features; the rest of the Application remains usable subject to its normal feature limits.
7. Retention and deletion
- Local data remains on your device until you delete it through an available in-app control, reset the Application's data, or uninstall the Application.
- iCloud data remains in your iCloud account until you remove it using the Application's synchronization controls or Apple's iCloud storage controls.
- Local AI history remains on your device until it is cleared in the Application or the Application data is removed.
- AI prompt and response content is forwarded for generation and is not intentionally written to the Service Provider's Cloudflare quota database. Cloudflare and DeepSeek may retain information according to their own terms, security practices, and legal obligations.
- Quota and security metadata is retained for as long as reasonably necessary to provide monthly quota accounting, prevent abuse, resolve billing or support issues, and meet legal obligations, after which it is deleted or de-identified where reasonably possible.
- Purchase and subscription records are retained by Apple and RevenueCat according to their policies and applicable financial and legal requirements.
You may request deletion of information controlled by the Service Provider by emailing the address in Section 12. Some information may be retained where required by law, to complete transactions, prevent fraud, protect security, or establish and defend legal claims.
8. Security
The Application uses reasonable technical and organizational safeguards appropriate to the information processed. Network requests use HTTPS, provider credentials are kept outside the distributed Application, and server-side identifiers are pseudonymous. No transmission or storage system is completely secure, and the Service Provider cannot guarantee absolute security.
9. Your choices and rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about the processing of your personal information. You may also have the right to withdraw consent, appeal a denied request, or complain to a competent data-protection authority.
You can also:
- avoid AI processing by not using AI-powered features;
- clear available AI conversation history in the Application;
- disable notifications in system settings;
- disable iCloud synchronization and manage stored data through Apple's iCloud settings;
- restore or manage subscriptions through Apple and RevenueCat interfaces; and
- delete local Application data by using available controls or uninstalling the Application.
The Application does not maintain a Service Provider account containing your real-world identity. To locate pseudonymous server records, the Service Provider may ask for the anonymous identifier displayed or generated by the Application. In some cases, records cannot be connected to you after the identifier has been deleted.
The Service Provider will not discriminate against you for exercising an applicable privacy right. Requests may be sent to the contact address in Section 12.
10. United States privacy notice
Where applicable under United States state privacy laws, the categories described in Section 2 are collected for the business purposes described in Section 3 and disclosed to the service providers described in Section 5. The Service Provider does not sell personal information, does not share it for cross-context behavioral advertising, and does not use it to make decisions that produce legal or similarly significant effects. You or an authorized agent may submit an applicable privacy request using the contact information below.
11. Children's privacy
Orbloom is not directed to children under 13, and the Service Provider does not knowingly collect personal information from children under 13. Where local law requires a higher age for a child to consent to data processing, a parent or legal guardian must provide any required authorization. If you believe a child has submitted personal information, contact the Service Provider so that appropriate action can be taken.
12. Contact
For questions, complaints, or privacy-right requests, contact:
Service Provider: chenxuanyu
Email: 457162499@qq.com
When submitting a request, describe the feature involved and provide only the information reasonably necessary to locate the relevant record. Do not send passwords or payment-card details by email.
13. Changes to this policy
This Privacy Policy may be updated when the Application, its providers, or applicable law changes. The effective date and last-updated date will be revised when a new version is published. Material changes will be communicated through the Application or another appropriate method when required by law.